{"vulnerability": "2024-47", "sightings": [{"uuid": "2c6a09d6-288d-4fdf-a567-1e471bd93d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-24T07:23:35.722806Z"}, {"uuid": "997b0434-1cf7-4804-b2dd-06c05af90785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "", "content": "", "creation_timestamp": "2024-10-24T07:23:56.253649Z"}, {"uuid": "a48b28db-d4c7-4772-8516-5ae7e3424e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "confirmed", "source": "", "content": "", "creation_timestamp": "2024-10-24T07:24:00.179030Z"}, {"uuid": "0ffa099a-f377-4bd8-98cf-64ba607aaca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "", "content": "", "creation_timestamp": "2024-10-24T08:10:35.492175Z"}, {"uuid": "77fb0198-dd1b-471e-b4cb-3846fca8f2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47131", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02", "content": "", "creation_timestamp": "2024-11-07T12:00:00.000000Z"}, {"uuid": "d9889433-c113-4194-965f-35a9e736bae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1400/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "c896d12f-3c4f-4fb1-b36e-4a8103b6a70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1398/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "468c4e41-2a92-4d58-9143-3452d2efaccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47010", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1326/", "content": "", "creation_timestamp": "2024-10-08T05:00:00.000000Z"}, {"uuid": "dde89560-99f4-48da-8586-ed780a080b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://infosec.exchange/@adulau/113207584606763918", "content": "", "creation_timestamp": "2024-09-27T04:17:33.000000Z"}, {"uuid": "c048a176-fac1-497b-9059-34180fd139d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://infosec.exchange/@adulau/113207584606763918", "content": "", "creation_timestamp": "2024-09-27T04:17:33.000000Z"}, {"uuid": "ed7c229e-8c5b-4b4f-86bb-b388826d3fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47903", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01", "content": "", "creation_timestamp": "2024-10-29T12:00:00.000000Z"}, {"uuid": "975b4b63-35c1-4c53-85e7-93e50357a216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1385/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "5b1dc723-1327-47f0-b815-172115937135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://infosec.exchange/@adulau/113207584606763918", "content": "", "creation_timestamp": "2024-09-27T04:17:33.000000Z"}, {"uuid": "d33e4ada-6bca-40a6-8110-041d793784bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47131", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1463/", "content": "", "creation_timestamp": "2024-11-08T06:00:00.000000Z"}, {"uuid": "86ed07a3-d063-463d-98b1-e56e42e4e591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1410/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "bf773088-1f61-4722-a003-e95a9a2679bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://infosec.exchange/@adulau/113207584606763918", "content": "", "creation_timestamp": "2024-09-27T04:17:33.000000Z"}, {"uuid": "b1fff431-14d9-467c-aafa-09530988fa58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47191", "type": "seen", "source": "https://lwn.net/Articles/992948/", "content": "", "creation_timestamp": "2024-10-04T15:28:07.000000Z"}, {"uuid": "590d5d40-d509-46c5-9bc4-54c32313b176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47902", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01", "content": "", "creation_timestamp": "2024-10-29T12:00:00.000000Z"}, {"uuid": "cf3e5ef4-4d72-48db-a501-803a561f3e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1403/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "c65bf0e4-26de-484a-a316-6c4ccc1cb1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47964", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1399/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "8fb08802-0472-4164-b503-7b7e8b0e3735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1386/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "36ad0931-a481-4cf5-8f4f-abfe59d12ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47904", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01", "content": "", "creation_timestamp": "2024-10-29T12:00:00.000000Z"}, {"uuid": "0c6ba199-105a-44cc-a8f0-5338815705dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47901", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-01", "content": "", "creation_timestamp": "2024-10-29T12:00:00.000000Z"}, {"uuid": "94d6f6a4-b242-447d-83d5-5bd2b7852457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47194", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-05", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "db5a7a88-4574-4f41-958a-d43f361951ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47195", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-05", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "1f925eb3-e06d-4b81-adb8-522094f3051d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47196", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-05", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "23bfab4e-d271-41f0-b045-2a3f92fdab59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47553", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-06", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "ecdbdda7-6816-41bc-a31c-4c17db576770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47562", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-06", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "50e53205-101f-4649-ac45-7c5fb7d17a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47563", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-06", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "5ddfa728-5be6-4d73-80a3-693eda665843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47565", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-06", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "d41aac5a-c938-4742-af8a-77cb49be11eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47131", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1468/", "content": "", "creation_timestamp": "2024-11-08T06:00:00.000000Z"}, {"uuid": "8c76f0b7-c04e-4db0-9eb5-fab1ca0b4cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47131", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1466/", "content": "", "creation_timestamp": "2024-11-08T06:00:00.000000Z"}, {"uuid": "e9296e3e-c7cb-4605-8d89-179e5bd5f946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1402/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "83aa9361-f4af-48d1-a2fc-32ce0d31330a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-11-05T13:45:11.591938Z"}, {"uuid": "bcdf9844-b76f-498d-b87a-60ace06353f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47046", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-02", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "e5627451-534b-4298-b1c0-2787858e5a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1408/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "717332f0-da3f-45e0-9f9a-d526dcd27971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1401/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "b34c6b98-4dde-470a-8f48-d4e1fb0d9771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1394/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "402414da-ccc8-445c-b66c-673126e12c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1393/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "f733f926-3d95-4208-9023-87bb54c8e696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1392/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "a9f0e837-494c-49c0-a1de-1863598249c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1390/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "7bcff5ea-1886-4aa8-b622-7d502fc30d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47009", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1325/", "content": "", "creation_timestamp": "2024-10-08T05:00:00.000000Z"}, {"uuid": "d37ccfc4-dcce-4f17-a1cd-6ab40e1cef22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1409/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "effa9d49-56cd-4ac8-b7aa-7859f557b8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1404/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "c94c2b95-eb59-4487-b1c2-2bd7a718826b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47011", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1327/", "content": "", "creation_timestamp": "2024-10-08T05:00:00.000000Z"}, {"uuid": "454dac66-c7da-413f-b2c6-05232b95dfa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47008", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1324/", "content": "", "creation_timestamp": "2024-10-08T05:00:00.000000Z"}, {"uuid": "360265f8-1b06-45b5-9236-d66be85e82e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47966", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1411/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "989400a7-d07b-48b2-9277-b534b9d36fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1407/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "19b5ee20-d4ad-4e51-bec2-331c95b998cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1406/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "4d1c48df-f98d-4b62-88d8-065484a619aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1405/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "d97916d7-bf05-4728-8a08-4e0b2c751baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1397/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "bc1f603f-f2e8-4623-9c05-a4388f1b0eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1384/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "b6057c08-35c8-40a7-b8a3-6d5272507284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1396/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "e4217cdc-58a5-488e-a3c0-bffd27b92e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1395/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "5c9d6a16-d362-43f8-9270-6f6174108522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1391/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "57a74472-21e0-453c-a2ee-8061ff0343f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1389/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "5072dbe8-796a-412f-a5f5-1234adaf7209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47965", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1388/", "content": "", "creation_timestamp": "2024-10-15T05:00:00.000000Z"}, {"uuid": "8ce1654c-603b-40b1-9fc0-9061de1c609e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47460", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113432788302548189", "content": "", "creation_timestamp": "2024-11-05T22:49:49.929023Z"}, {"uuid": "87d9f241-e891-481a-a323-47efdc53ad0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47461", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113432818029718949", "content": "", "creation_timestamp": "2024-11-05T22:57:23.505246Z"}, {"uuid": "dce99967-ac8a-4fe2-bcf5-1810419d7302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47460", "type": "seen", "source": "https://infosec.exchange/users/patchnow24x7/statuses/113434504003363674", "content": "", "creation_timestamp": "2024-11-06T06:06:10.024591Z"}, {"uuid": "18939d86-56e0-45d2-a8da-54f4228c9d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4741", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113475144025927334", "content": "", "creation_timestamp": "2024-11-13T10:21:29.858574Z"}, {"uuid": "77ccd3eb-9651-4513-a191-0c8141e3c500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47574", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113475375268943677", "content": "", "creation_timestamp": "2024-11-13T11:20:15.557144Z"}, {"uuid": "0243464b-5cb7-4519-afd7-3ca94cd994a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47590", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113469118427199453", "content": "", "creation_timestamp": "2024-11-12T08:49:03.738938Z"}, {"uuid": "b21ee227-fb26-436c-9a8a-e7ec3380eef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47073", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113442874348339740", "content": "", "creation_timestamp": "2024-11-07T17:34:50.762175Z"}, {"uuid": "49fdf4e2-acd6-4cf6-90b9-4ba7303e921b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-47076", "content": "", "creation_timestamp": "2024-09-26T20:15:00.000000Z"}, {"uuid": "d2a3c7a4-ac23-4dbc-b39b-b7d697168895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0423", "content": "", "creation_timestamp": "2024-10-24T07:27:38.000000Z"}, {"uuid": "34fee061-0569-4776-813f-80ff74311876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47072", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113444334036917014", "content": "", "creation_timestamp": "2024-11-07T23:46:03.829285Z"}, {"uuid": "08efbbad-3725-4c2c-bab0-6d3ad0ce5c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47575", "type": "seen", "source": "https://infosec.exchange/users/patchnow24x7/statuses/113445973376795331", "content": "", "creation_timestamp": "2024-11-08T06:42:59.075572Z"}, {"uuid": "c8619ca5-ebaa-4a0a-92b8-c33ab8ffa5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47460", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113447523738206151", "content": "", "creation_timestamp": "2024-11-08T13:17:14.748794Z"}, {"uuid": "aedd77b4-8405-4925-895c-31d0dccde345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448127639962307", "content": "", "creation_timestamp": "2024-11-08T15:50:49.695673Z"}, {"uuid": "2239bca3-6c9a-4bf8-a3a9-876df9d7ec8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448127670506246", "content": "", "creation_timestamp": "2024-11-08T15:50:50.228672Z"}, {"uuid": "04b7b360-a582-41ca-ba6c-6a1d5b67e15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448139539865036", "content": "", "creation_timestamp": "2024-11-08T15:53:51.239689Z"}, {"uuid": "594f7ac6-2ebf-4e8a-ac60-86a0a4d92efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448139568921293", "content": "", "creation_timestamp": "2024-11-08T15:53:53.869063Z"}, {"uuid": "2935c392-2217-49c9-a426-6578465d118d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47783", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470250522659199", "content": "", "creation_timestamp": "2024-11-12T13:36:58.196260Z"}, {"uuid": "42a4f38b-80fc-448b-8361-1696153dbbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47808", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470309524837171", "content": "", "creation_timestamp": "2024-11-12T13:51:58.618187Z"}, {"uuid": "b036f8ca-aeaf-4b0f-b1f9-485cbaa48433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47940", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470309538746631", "content": "", "creation_timestamp": "2024-11-12T13:51:58.709432Z"}, {"uuid": "43f67156-2c82-44e3-94c1-ff14c85959cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47941", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470309553814296", "content": "", "creation_timestamp": "2024-11-12T13:51:58.971530Z"}, {"uuid": "7f4df1c9-2f11-488e-a685-99e592e6c1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47942", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470309567485069", "content": "", "creation_timestamp": "2024-11-12T13:51:59.254126Z"}, {"uuid": "a0d3edd6-da94-4335-8d26-b7cea5bd8a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47574", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:41.052143Z"}, {"uuid": "53b2f457-1fe0-4fdb-8148-8aea42144a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47131", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464913758697808", "content": "", "creation_timestamp": "2024-11-11T14:59:45.486250Z"}, {"uuid": "618a12f5-706d-4697-a598-d447e58be749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113467161777858654", "content": "", "creation_timestamp": "2024-11-12T00:31:27.457619Z"}, {"uuid": "81aeff9a-0187-498f-ae03-7f32034656f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47587", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113467161811465612", "content": "", "creation_timestamp": "2024-11-12T00:31:28.006641Z"}, {"uuid": "9735ec1d-d610-4ec0-9f7a-3c8b70e20d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47588", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113467161826048639", "content": "", "creation_timestamp": "2024-11-12T00:31:28.414817Z"}, {"uuid": "ba32369b-701d-4bb7-919c-fc1a9e8bea87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47590", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113467220826515051", "content": "", "creation_timestamp": "2024-11-12T00:46:28.810708Z"}, {"uuid": "17766453-0f4e-4061-bd11-b107ec25a3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47592", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113467220840526376", "content": "", "creation_timestamp": "2024-11-12T00:46:28.966032Z"}, {"uuid": "203e679a-3875-46d1-b22d-85ba0b2bbca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47593", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113467220854266697", "content": "", "creation_timestamp": "2024-11-12T00:46:29.198387Z"}, {"uuid": "af74a95b-5d49-460f-b878-1a086b84f900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47595", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113467220868327307", "content": "", "creation_timestamp": "2024-11-12T00:46:29.328258Z"}, {"uuid": "ec3d3f52-b9b7-46ea-91c9-ca8d2e26bfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-05-16T18:10:04.000000Z"}, {"uuid": "0e222aa2-5571-45e3-8f91-0ce73ee4299a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-10-23T18:10:02.000000Z"}, {"uuid": "e519edaa-e202-47e1-a658-bb30503d8c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/4fe85264-fb26-494e-8eb7-da101e19e291", "content": "", "creation_timestamp": "2024-10-24T07:26:42.000000Z"}, {"uuid": "58a69f13-2c3f-4248-84f8-7ad5e6024bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/0b67d8ae-d352-4594-ba0a-ecb93693fa91", "content": "", "creation_timestamp": "2024-10-24T08:36:52.000000Z"}, {"uuid": "5d212384-ebe1-4bad-b0b1-d46df085453e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113476472688256606", "content": "", "creation_timestamp": "2024-11-13T15:59:23.519631Z"}, {"uuid": "87460230-30e8-4544-a495-ac8d246b21c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47575", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113477656881433124", "content": "", "creation_timestamp": "2024-11-13T21:00:32.697723Z"}, {"uuid": "2007c17e-fda5-4b61-b9ab-9e4ded20d131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47575", "type": "seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/113478529352841373", "content": "", "creation_timestamp": "2024-11-14T00:42:23.918020Z"}, {"uuid": "a0f006e1-7803-4765-845b-f22516700da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47783", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-02", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "757cf40d-950e-40ae-a934-91f24958b096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4741", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "90f05821-4e73-45ae-91c2-482cd6d59932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4741", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "15848063-2eee-4c50-b3a1-de3c6cc60f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47255", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "bfe61cd2-aaa8-4c22-996d-283e1aebc257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47865", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113514131846208630", "content": "", "creation_timestamp": "2024-11-20T07:36:34.039605Z"}, {"uuid": "d830353f-80b9-421d-9d1f-fae18e216fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113482323234195101", "content": "", "creation_timestamp": "2024-11-14T16:47:13.266164Z"}, {"uuid": "42b37701-40d5-4bcf-a72f-68ab63c907f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47940", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-05", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "b57ca97e-327b-4c32-bdf4-3e29f724cdfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47808", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-04", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "0529ef61-215b-4f91-9da0-05f763f162f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47575", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113483673211675864", "content": "", "creation_timestamp": "2024-11-14T22:30:43.940861Z"}, {"uuid": "f5a092c4-bd24-4851-92bf-ed29b2670646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47873", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505054477519291", "content": "", "creation_timestamp": "2024-11-18T17:08:04.331299Z"}, {"uuid": "3625ae7b-1d74-4153-89a3-2e01c12a520d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47873", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505700408685113", "content": "", "creation_timestamp": "2024-11-18T19:52:20.606809Z"}, {"uuid": "03241a79-be08-4994-b2b9-e67fd990fc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47253", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "e3347b0f-d0a3-4896-b643-8d2796f6d6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113504997750093120", "content": "", "creation_timestamp": "2024-11-18T16:53:38.835966Z"}, {"uuid": "bf19cf55-25c8-42f5-a2be-734724a74ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47254", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "15fa7224-f28f-40e0-88f4-5acf80496973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47820", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505015541543695", "content": "", "creation_timestamp": "2024-11-18T16:58:10.187884Z"}, {"uuid": "ecd6a3a6-f7de-43f0-85a8-4853b1bdfe0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47941", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-05", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "c6ebf9c8-2a6d-41b0-a2ed-45baa7f4a8f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47942", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-05", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "c0171cee-0e36-4eb3-82d8-017bf97af1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47574", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113487067634176092", "content": "", "creation_timestamp": "2024-11-15T12:53:46.909476Z"}, {"uuid": "8359520d-c0a9-42a9-babb-a4a878c3938b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47575", "type": "seen", "source": "https://chaos.social/users/HonkHase/statuses/113492318503579152", "content": "", "creation_timestamp": "2024-11-16T11:56:29.729819Z"}, {"uuid": "6f2bf0c8-3afa-4ff4-a057-96e67c9c109e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47208", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113503085917748149", "content": "", "creation_timestamp": "2024-11-18T08:47:26.663809Z"}, {"uuid": "3e0abe50-0df5-440b-9a6e-fb866d3f7094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47133", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113595157623757307", "content": "", "creation_timestamp": "2024-12-04T15:02:29.430692Z"}, {"uuid": "9455989c-a0a1-484c-8f41-971efaf26e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47863", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528269076401600", "content": "", "creation_timestamp": "2024-11-22T19:31:51.052496Z"}, {"uuid": "1ce013dd-0578-41f7-a487-f49b6b75b6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47407", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07", "content": "", "creation_timestamp": "2024-11-21T11:00:00.000000Z"}, {"uuid": "043f9c64-60b9-4c14-bbf3-285ac76d60cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47043", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113607238645282439", "content": "", "creation_timestamp": "2024-12-06T18:14:50.843433Z"}, {"uuid": "66a63398-bc2b-404f-a065-6a1d9fd1bbc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47257", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548087510320019", "content": "", "creation_timestamp": "2024-11-26T07:31:56.346700Z"}, {"uuid": "a0effdb5-644d-4891-8f49-44af932400eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47181", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113556358020733569", "content": "", "creation_timestamp": "2024-11-27T18:35:14.233656Z"}, {"uuid": "247f0fdf-8780-442a-baf6-7aa5bdcf70d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47855", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113556384343564769", "content": "", "creation_timestamp": "2024-11-27T18:41:56.039054Z"}, {"uuid": "016878c4-d300-486e-9685-e9251d7477aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47791", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113607286244288892", "content": "", "creation_timestamp": "2024-12-06T18:26:57.470584Z"}, {"uuid": "f4248f87-acb6-400a-9b03-18fd407fed6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47115", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113611655226022131", "content": "", "creation_timestamp": "2024-12-07T12:58:02.595544Z"}, {"uuid": "ae76501c-ce9b-4d55-86a1-ca194053b467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47115", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113612095761749853", "content": "", "creation_timestamp": "2024-12-07T14:50:04.524163Z"}, {"uuid": "9e4dc0b2-aad4-47be-b5e8-41073c6f8ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47107", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113612105009390070", "content": "", "creation_timestamp": "2024-12-07T14:52:26.096575Z"}, {"uuid": "9ee00496-0676-432f-a43d-794bf78f96e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47791", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01", "content": "", "creation_timestamp": "2024-12-03T11:00:00.000000Z"}, {"uuid": "d73dc3cc-cf72-447c-9a76-2b52a7c73981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47043", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01", "content": "", "creation_timestamp": "2024-12-03T11:00:00.000000Z"}, {"uuid": "a59d7cdd-d086-4964-9c82-bbd1c98dfff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47138", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07", "content": "", "creation_timestamp": "2024-11-21T11:00:00.000000Z"}, {"uuid": "5cf3a5ec-7656-4058-a910-a19935ee2225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47476", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113588326527404991", "content": "", "creation_timestamp": "2024-12-03T10:05:15.110326Z"}, {"uuid": "30a08864-7536-4dd2-a92b-d3e466bbb175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47547", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01", "content": "", "creation_timestamp": "2024-12-03T11:00:00.000000Z"}, {"uuid": "39b7f400-1863-414b-b79e-e27d9cd2bfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47146", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01", "content": "", "creation_timestamp": "2024-12-03T11:00:00.000000Z"}, {"uuid": "0bbe08bb-521a-4a75-b573-c200a9d1b2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47094", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113565633262357911", "content": "", "creation_timestamp": "2024-11-29T09:54:03.238022Z"}, {"uuid": "311bcf81-4c21-4509-9ca6-8e95817c379b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47547", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113607199605552746", "content": "", "creation_timestamp": "2024-12-06T18:04:55.181534Z"}, {"uuid": "dbfeca84-d6ae-42ae-8d2e-bc0e7ebd5fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47133", "type": "seen", "source": "MISP/406edb2f-5422-460a-a72d-2e6c6a7e4b16", "content": "", "creation_timestamp": "2024-12-09T15:07:12.000000Z"}, {"uuid": "cce64e5d-87e0-43a7-8991-a73d2b2744e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47576", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625723156824001", "content": "", "creation_timestamp": "2024-12-10T00:35:42.405905Z"}, {"uuid": "3b2dbba2-2f8b-488a-b2b6-968a1fc360fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47577", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625723170573536", "content": "", "creation_timestamp": "2024-12-10T00:35:42.495663Z"}, {"uuid": "81a0aa46-a1fb-4e60-9799-d353fe77a5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47578", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625723184500080", "content": "", "creation_timestamp": "2024-12-10T00:35:42.720844Z"}, {"uuid": "8e225ce2-e1d4-4923-a33f-73dff1ec07b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47579", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625782187601217", "content": "", "creation_timestamp": "2024-12-10T00:50:42.936005Z"}, {"uuid": "5730534f-6b78-4a91-8b9f-77cf1bc6ba9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47580", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625782201988792", "content": "", "creation_timestamp": "2024-12-10T00:50:43.364946Z"}, {"uuid": "cb895de8-d8bd-4fe5-a813-e2aab425308d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47581", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625782216105904", "content": "", "creation_timestamp": "2024-12-10T00:50:43.511015Z"}, {"uuid": "91c1a38c-6a89-49df-a9ab-e565aba7629c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625782230765278", "content": "", "creation_timestamp": "2024-12-10T00:50:43.859813Z"}, {"uuid": "771a928f-0073-47b5-b57c-4d8f63fd751b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47585", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625841230792878", "content": "", "creation_timestamp": "2024-12-10T01:05:43.895461Z"}, {"uuid": "ef24d952-6d83-4595-8e31-b3fd51fabd0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47946", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113627436345378507", "content": "", "creation_timestamp": "2024-12-10T07:51:23.485471Z"}, {"uuid": "6c216143-b5da-4ef9-99a5-77e703a6fbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47484", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113628075982373757", "content": "", "creation_timestamp": "2024-12-10T10:34:03.512581Z"}, {"uuid": "16b28606-21ee-4690-b35d-2c67eba7ffdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47977", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113628075998358996", "content": "", "creation_timestamp": "2024-12-10T10:34:03.879017Z"}, {"uuid": "7a77da23-4968-4c45-b5dd-414e8a1011e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47810", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldq37hqcsv2b", "content": "", "creation_timestamp": "2024-12-20T09:30:08.623259Z"}, {"uuid": "1deb43c2-17ff-4464-88d5-33f65d0e1a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47093", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo62shuoy2t", "content": "", "creation_timestamp": "2024-12-19T15:15:53.810278Z"}, {"uuid": "60e2a2d5-88d6-481f-a006-b91331210866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47578", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113631501437013901", "content": "", "creation_timestamp": "2024-12-11T01:05:11.587154Z"}, {"uuid": "5b569ce7-d829-4362-8b92-a59468947492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47758", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635001277155546", "content": "", "creation_timestamp": "2024-12-11T15:55:15.418042Z"}, {"uuid": "8a48d430-fa0b-48b0-8f5b-4a0cb11f1a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47760", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635262751522479", "content": "", "creation_timestamp": "2024-12-11T17:01:44.840035Z"}, {"uuid": "d623e614-0787-4fac-9df9-47fe535fa15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47761", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635295248950416", "content": "", "creation_timestamp": "2024-12-11T17:10:00.650418Z"}, {"uuid": "d0da2064-b867-4243-9a64-ce6730a8e328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47538", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635795641973970", "content": "", "creation_timestamp": "2024-12-11T19:17:16.754972Z"}, {"uuid": "b09d8d1b-fcef-434a-bd9e-ff289c5acccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47539", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635795675032476", "content": "", "creation_timestamp": "2024-12-11T19:17:17.182858Z"}, {"uuid": "408de2be-2d38-47f5-be4e-e2a65648cac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47537", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635795606704493", "content": "", "creation_timestamp": "2024-12-11T19:17:18.062263Z"}, {"uuid": "3a77f351-608c-470c-a6aa-e8486e6ad1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47540", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635795690699377", "content": "", "creation_timestamp": "2024-12-11T19:17:19.102221Z"}, {"uuid": "c268f80c-4a25-422b-9ad0-13e0d4c2590c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47541", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635854689772694", "content": "", "creation_timestamp": "2024-12-11T19:32:17.103061Z"}, {"uuid": "dc4171a1-cab1-4bf0-b769-19be0a4ecbf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47542", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635854706009967", "content": "", "creation_timestamp": "2024-12-11T19:32:17.371584Z"}, {"uuid": "970ba0c5-664e-4875-8f25-927af7be63de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47543", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635854720381016", "content": "", "creation_timestamp": "2024-12-11T19:32:17.596981Z"}, {"uuid": "6967eb70-5190-4b4a-97b1-c3a0ebc7b447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47964", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1656/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "bdbf1d30-982e-403a-9f02-358e4e6afff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639929963039545", "content": "", "creation_timestamp": "2024-12-12T12:48:40.926346Z"}, {"uuid": "2003f6d0-4a8c-4f7e-8893-75fc6eaef803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47238", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641100240609984", "content": "", "creation_timestamp": "2024-12-12T17:46:18.312622Z"}, {"uuid": "806219f0-d0ce-4ec8-b5bb-7be1d9368416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47046", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-06", "content": "", "creation_timestamp": "2024-12-12T11:00:00.000000Z"}, {"uuid": "ec4bc9ac-453b-49c7-927b-305b136f0d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47984", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113645944289173572", "content": "", "creation_timestamp": "2024-12-13T14:18:12.229242Z"}, {"uuid": "1a132bbf-3b5a-4ae6-ad27-e29c5e762982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47039", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675414286324728", "content": "", "creation_timestamp": "2024-12-18T19:12:48.806182Z"}, {"uuid": "461b2dda-3232-4579-9704-c8801953e84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47040", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675414301396811", "content": "", "creation_timestamp": "2024-12-18T19:12:48.923997Z"}, {"uuid": "e8edfa81-e08b-4008-8469-9ffe7fb2da1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldrllwvk7s2n", "content": "", "creation_timestamp": "2024-12-20T23:56:06.450820Z"}, {"uuid": "e9ea5f57-b085-4f63-8817-d7ebf446d64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47093", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679923361204297", "content": "", "creation_timestamp": "2024-12-19T14:19:31.730152Z"}, {"uuid": "5bcd887e-c6b2-47bc-83d8-f9f8a1b4f802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47810", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ldpon4kwqk24", "content": "", "creation_timestamp": "2024-12-20T05:45:07.671517Z"}, {"uuid": "4e2596ac-3bc7-410b-8ecb-a299f073517d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47484", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1693/", "content": "", "creation_timestamp": "2024-12-16T05:00:00.000000Z"}, {"uuid": "c53598ea-c266-4072-b5a6-a57301b7052d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47977", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1692/", "content": "", "creation_timestamp": "2024-12-16T05:00:00.000000Z"}, {"uuid": "343154f6-a02e-4367-b50d-18fae4b66767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47977", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1690/", "content": "", "creation_timestamp": "2024-12-16T05:00:00.000000Z"}, {"uuid": "65bc0864-69a6-4e61-9878-652df6d709c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47977", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1689/", "content": "", "creation_timestamp": "2024-12-16T05:00:00.000000Z"}, {"uuid": "1cc1c834-cefe-43b0-a176-9b44c94efb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47537", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "93e0beec-d2db-4c87-bbd8-228e90940fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47538", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "c8868c1a-16d2-44ef-a305-dca3885a8fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47607", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "d943795b-eb7b-4253-93a8-609aad26ef46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47615", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "99a49cf6-d4df-4062-abd3-2c8dfebdf77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47613", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "be7a3a6e-c04e-4826-b99e-caa5e544b99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47606", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "c436cf60-6ab3-4f56-97ea-8e374c27519b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47539", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "76e93647-b55b-4e2b-aaae-e68f8eba1975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47540", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "d01cc9f0-593e-403e-9f7a-4544e3bc5620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47541", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "06b12e73-0262-4259-80c6-ac4b6a9fdef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47542", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "34a344dc-3d57-4f91-abe5-7b41bc55a1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47543", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "16fe6291-4bb1-444c-89a3-d286c93a2fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47544", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "8a698a15-11d2-41e6-826f-8024a987c056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47545", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "45f7a085-036a-42c8-aba6-eb955c0172c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47546", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "ed03725d-b008-444d-b8f8-2ec47448d1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47596", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "07ffbbfe-717f-49b5-b747-5c07ce0d253d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47597", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "844d4c4a-3542-4c1b-a668-91a2022bf8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47598", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "4f51e055-34eb-4d72-a862-61a87f8c7e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47599", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "0787f236-7d13-49e8-9cc1-6be8e29f4550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47600", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "2779f1de-cf1d-4b8d-9a91-2a0420d1c40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47601", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "7390fb23-b7c6-4e6a-8cb0-03a2b40d2d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47776", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "39e6ab89-f069-4c66-8faf-11abe9dcdd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47775", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "0cf3456a-8561-4fe9-91f6-54a033d3693e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47774", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "c4268af9-15a1-414a-b375-1c322e90c3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47119", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674546694813988", "content": "", "creation_timestamp": "2024-12-18T15:32:10.324418Z"}, {"uuid": "685df6f1-5b31-4e1e-8030-ee202ce5fd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47810", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ldpw7sx65222", "content": "", "creation_timestamp": "2024-12-20T08:00:56.726534Z"}, {"uuid": "40c0e7a6-953d-42b1-b8c0-4d99382d9dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47602", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "ab0a91a1-5207-4453-9b43-48496e7bf1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47834", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "98536966-8841-49c8-8fd0-9ae4ce7f4b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47603", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "006ec1fa-5526-415f-8965-9e3872421f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47778", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "a5819679-b6fa-409f-89a4-f706e441d78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47777", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "0cd6bec2-6428-4b70-a9be-4328beb85426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47835", "type": "seen", "source": "https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/", "content": "", "creation_timestamp": "2024-12-17T12:51:51.000000Z"}, {"uuid": "2b249d9a-002e-4ee3-8bcf-6dad768be506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47480", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671575124643235", "content": "", "creation_timestamp": "2024-12-18T02:56:27.933441Z"}, {"uuid": "f6b46fa4-0ded-4b51-a50d-13bdf0f96d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47480", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113672448469366378", "content": "", "creation_timestamp": "2024-12-18T06:38:33.816779Z"}, {"uuid": "e63683db-c69e-4221-8ee9-1f1fe49c486d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47810", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674653378844954", "content": "", "creation_timestamp": "2024-12-18T15:59:18.192703Z"}, {"uuid": "de9ca4a9-4720-4a8b-8a60-eace31b8fac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47104", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673455791138448", "content": "", "creation_timestamp": "2024-12-18T10:54:44.546145Z"}, {"uuid": "b02f7ab3-f09a-4002-8163-53ead6637aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47864", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699339312969404", "content": "", "creation_timestamp": "2024-12-23T00:37:15.631487Z"}, {"uuid": "c0400dcf-6319-4d37-a5b3-28626d824ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47864", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699351923604048", "content": "", "creation_timestamp": "2024-12-23T00:40:28.659352Z"}, {"uuid": "b97b5520-19ad-4a63-9cc3-3fb25dcf5a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47864", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwqxz55r52a", "content": "", "creation_timestamp": "2024-12-23T01:15:38.471194Z"}, {"uuid": "5de33d96-d0d7-44be-9668-6442a97f8615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705709023822903", "content": "", "creation_timestamp": "2024-12-24T03:37:09.758315Z"}, {"uuid": "cd50f6b0-39cb-47bd-b69d-d72f20895266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47515", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzlic67db2f", "content": "", "creation_timestamp": "2024-12-24T04:15:21.949679Z"}, {"uuid": "0e071b4c-a172-4c4e-b07b-3e37eff7e3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47140", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113832984115511197", "content": "", "creation_timestamp": "2025-01-15T15:04:53.414530Z"}, {"uuid": "e4686b7e-ad56-437d-a897-5ef2fe33a019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47897", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113822538784013448", "content": "", "creation_timestamp": "2025-01-13T18:48:37.190748Z"}, {"uuid": "85396a8f-6d0e-4108-b65b-3211a9144fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47002", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs2nlhiie2j", "content": "", "creation_timestamp": "2025-01-15T15:15:50.605596Z"}, {"uuid": "efbced00-db0b-4f25-aa7e-cfb33d0e0f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47140", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs2nnpjqp2n", "content": "", "creation_timestamp": "2025-01-15T15:15:52.829425Z"}, {"uuid": "9cbeda58-9bd8-463f-83e8-855cac85466d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47002", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113833155363032627", "content": "", "creation_timestamp": "2025-01-15T15:48:29.681070Z"}, {"uuid": "156edec3-d67a-41c4-b309-bebe06cd5637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47011", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpquypfex2f", "content": "", "creation_timestamp": "2025-01-14T17:15:42.514634Z"}, {"uuid": "bd6a0fb9-ae04-434f-8a5a-c44cd9410725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47140", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113833155428158974", "content": "", "creation_timestamp": "2025-01-15T15:48:30.269739Z"}, {"uuid": "96563f5d-4135-4587-a183-b49bb7b3d915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47010", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpqv32avd2c", "content": "", "creation_timestamp": "2025-01-14T17:15:44.810501Z"}, {"uuid": "e9163dc4-5e6f-45a7-b6c6-c46398f35c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pwxkx52q", "content": "", "creation_timestamp": "2025-01-15T15:53:00.461533Z"}, {"uuid": "b914c8ad-96cc-4eba-afc4-e263f95a551c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pwg5eo2u", "content": "", "creation_timestamp": "2025-01-15T15:52:57.997265Z"}, {"uuid": "0631b4ef-d278-416c-987c-e4b6e490afb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pwkhur2g", "content": "", "creation_timestamp": "2025-01-15T15:52:58.613376Z"}, {"uuid": "429e8e1c-1955-42bc-8064-5004ee1bcfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pwo36j2h", "content": "", "creation_timestamp": "2025-01-15T15:52:59.240529Z"}, {"uuid": "095bdf4f-ef71-43f6-bc14-85824071763a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47571", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113827257100178968", "content": "", "creation_timestamp": "2025-01-14T14:48:26.354532Z"}, {"uuid": "ed285735-016d-419a-b9e5-cbfaa6b055d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47572", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113827257157226994", "content": "", "creation_timestamp": "2025-01-14T14:48:28.947697Z"}, {"uuid": "7de8c3cf-549f-4dd2-b355-3c59f5a19002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47100", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113826249846900286", "content": "", "creation_timestamp": "2025-01-14T10:32:16.799727Z"}, {"uuid": "773eb516-61d8-45df-bd28-e0b62d148da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47398", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113786024577853273", "content": "", "creation_timestamp": "2025-01-07T08:02:28.007940Z"}, {"uuid": "764b1ed0-f19b-41a9-bc6c-c384b6a70066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47100", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113826265635967477", "content": "", "creation_timestamp": "2025-01-14T10:36:18.636501Z"}, {"uuid": "8a693b09-3fff-4504-9921-d0a6f13eaec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47571", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:33.686972Z"}, {"uuid": "379a794d-f5fa-462a-84bd-5304bf78f378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47102", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113714015336154746", "content": "", "creation_timestamp": "2024-12-25T14:49:34.102163Z"}, {"uuid": "8c69e02d-626f-408b-a597-0d406f1d70f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47978", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113714061135749680", "content": "", "creation_timestamp": "2024-12-25T15:01:12.784265Z"}, {"uuid": "bcc5c2f1-070e-4af0-8021-887d37767bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47102", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le5atjwt3a2f", "content": "", "creation_timestamp": "2024-12-25T15:15:27.204072Z"}, {"uuid": "065384dd-bea5-4a6a-a7b3-4b89127f52be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47978", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le5atmty4z2m", "content": "", "creation_timestamp": "2024-12-25T15:15:30.273502Z"}, {"uuid": "d6c9acb6-e4de-4b65-989e-5c06fbef841b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47978", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113715810481603401", "content": "", "creation_timestamp": "2024-12-25T22:26:05.681513Z"}, {"uuid": "bf3cf0d1-4dfc-4100-bc22-ca070c34805c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47151", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dvb4two2i", "content": "", "creation_timestamp": "2024-12-26T11:15:25.073192Z"}, {"uuid": "f9de4127-641c-4e08-9fba-1c9151f989ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47156", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dvdiqsp25", "content": "", "creation_timestamp": "2024-12-26T11:15:27.910389Z"}, {"uuid": "68c32bb0-77c1-413d-b5d4-a6216af00159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47153", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718906452610528", "content": "", "creation_timestamp": "2024-12-26T11:33:26.879967Z"}, {"uuid": "37431e15-ff14-468b-8159-4cbc5e0f4a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47154", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718953840018311", "content": "", "creation_timestamp": "2024-12-26T11:45:29.622465Z"}, {"uuid": "27ab5e79-3386-421c-aa0b-a8b86d9b337e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47155", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718977839760199", "content": "", "creation_timestamp": "2024-12-26T11:51:35.723881Z"}, {"uuid": "0c1044b6-2901-4c65-94f8-fef68839ab0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47148", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719038894686088", "content": "", "creation_timestamp": "2024-12-26T12:07:07.480420Z"}, {"uuid": "c87e820b-e4f7-4cb3-a042-baf47515cac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47148", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7halueoj2i", "content": "", "creation_timestamp": "2024-12-26T12:15:26.730563Z"}, {"uuid": "3fe2d068-7400-49d8-8f22-c2f5b8ecc898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47153", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7hao3mhi25", "content": "", "creation_timestamp": "2024-12-26T12:15:29.340361Z"}, {"uuid": "13076fa5-27b1-40dc-8ab5-c056f18c75ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47154", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7harirzw2a", "content": "", "creation_timestamp": "2024-12-26T12:15:32.626659Z"}, {"uuid": "c11eede0-41c5-44fc-9c6d-388cc44b77e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47155", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7hau332j2m", "content": "", "creation_timestamp": "2024-12-26T12:15:35.493403Z"}, {"uuid": "827170fb-5fd9-4082-8ab8-947b37da1f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47157", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7hax7cur22", "content": "", "creation_timestamp": "2024-12-26T12:15:38.587267Z"}, {"uuid": "050c4b19-36ee-4a08-ab48-4980194c9761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47149", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719081504646983", "content": "", "creation_timestamp": "2024-12-26T12:17:57.627415Z"}, {"uuid": "353e6061-974e-42e9-aa82-4ce29121c67a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47150", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719081521665982", "content": "", "creation_timestamp": "2024-12-26T12:17:57.904598Z"}, {"uuid": "368ea070-4015-4698-8f7f-4cde9652e47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47149", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7klwpa7n2e", "content": "", "creation_timestamp": "2024-12-26T13:15:28.447703Z"}, {"uuid": "4be79df9-42c9-4c88-884c-d445d615b89e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47150", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7klyw6zb2i", "content": "", "creation_timestamp": "2024-12-26T13:15:31.112452Z"}, {"uuid": "7d867d22-6fbf-4553-ada5-6e590c7419b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47572", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:34.294944Z"}, {"uuid": "24bb100c-b10c-4320-a5a1-2248a80c98cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113828003758066396", "content": "", "creation_timestamp": "2025-01-14T17:58:19.596456Z"}, {"uuid": "30c0c3e5-945f-4bf2-80f6-e833a11f8c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47398", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hlrnae22", "content": "", "creation_timestamp": "2025-01-07T08:16:03.835371Z"}, {"uuid": "f1375b17-9208-4b25-8bbd-a6bd2ca91dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47894", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113820600810317629", "content": "", "creation_timestamp": "2025-01-13T10:35:39.168194Z"}, {"uuid": "ab03098e-4fe6-460a-adf7-af7e37bf7e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47895", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113820600825337992", "content": "", "creation_timestamp": "2025-01-13T10:35:39.570482Z"}, {"uuid": "8033ec12-57c3-4dca-8abd-52f890c3ca6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47897", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113820600839220167", "content": "", "creation_timestamp": "2025-01-13T10:35:39.809922Z"}, {"uuid": "93c5fd33-8e46-4a1c-a401-bd432e1cbdaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47894", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmmc2zhcf2t", "content": "", "creation_timestamp": "2025-01-13T11:15:33.597732Z"}, {"uuid": "ec1bef27-e72a-454b-818f-909a424d6409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47895", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmmc6cs7m2n", "content": "", "creation_timestamp": "2025-01-13T11:15:36.581163Z"}, {"uuid": "64d397f5-6d83-467c-9ab9-dc8884e87ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47100", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfp4rqrn2z2n", "content": "", "creation_timestamp": "2025-01-14T11:15:58.517752Z"}, {"uuid": "80e8a2ba-8b5e-4c0a-a973-034aee3c8ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47897", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmmcaon5s2e", "content": "", "creation_timestamp": "2025-01-13T11:15:38.980351Z"}, {"uuid": "c77362a3-e073-4c49-85e1-18f76b9c3401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47398", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113786206198889937", "content": "", "creation_timestamp": "2025-01-07T08:48:39.185764Z"}, {"uuid": "23a23190-ae38-4ae2-8c33-637e650ce465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47895", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfmo37gelk2q", "content": "", "creation_timestamp": "2025-01-13T11:47:30.372894Z"}, {"uuid": "ea1a273a-ddd6-471a-8df1-84172c42bdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47894", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfmo37pylt2y", "content": "", "creation_timestamp": "2025-01-13T11:47:31.064541Z"}, {"uuid": "5749b52b-810e-4a96-8b2e-92e8d63a9a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfmo37zr3b2u", "content": "", "creation_timestamp": "2025-01-13T11:47:32.220304Z"}, {"uuid": "9c716c0b-1b5d-44cf-9145-3cc645893bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47517", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806267094662222", "content": "", "creation_timestamp": "2025-01-10T21:50:24.081154Z"}, {"uuid": "88b0a7ff-0c5f-4ab9-b3b8-e4bd01359e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47518", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806288778790959", "content": "", "creation_timestamp": "2025-01-10T21:55:56.973503Z"}, {"uuid": "b23c6bd4-6bc2-4667-b470-dbcf75e8f87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47519", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806310607622726", "content": "", "creation_timestamp": "2025-01-10T22:01:28.044623Z"}, {"uuid": "a25d7ebf-babf-41ba-8c40-446d3bb22bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47520", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806310622838977", "content": "", "creation_timestamp": "2025-01-10T22:01:28.434527Z"}, {"uuid": "46a23661-d8a4-44d1-be94-5b00a131886c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfp6u34ojc2e", "content": "", "creation_timestamp": "2025-01-14T11:53:06.079435Z"}, {"uuid": "f7ed1dff-405f-4d54-bb14-e24f8ca4db45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47517", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7s7kbfe22", "content": "", "creation_timestamp": "2025-01-10T22:15:57.795948Z"}, {"uuid": "ff84b585-f8de-48b2-8743-332a149169bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47518", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7sbn4g725", "content": "", "creation_timestamp": "2025-01-10T22:15:59.821500Z"}, {"uuid": "f256f7a7-3211-4aa5-b8d8-c847f9066d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "content": "", "creation_timestamp": "2025-01-15T07:23:10.284856Z"}, {"uuid": "2c1be45c-81f7-4047-b13f-a156165caab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47519", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7sdvzgf2a", "content": "", "creation_timestamp": "2025-01-10T22:16:02.252413Z"}, {"uuid": "68a2053b-0594-4fc5-a3bc-c1033a602685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47520", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7sg5omq22", "content": "", "creation_timestamp": "2025-01-10T22:16:04.539346Z"}, {"uuid": "94120067-d4b5-48ef-902d-58814c2c3779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47917", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741122448834980", "content": "", "creation_timestamp": "2024-12-30T09:43:15.682998Z"}, {"uuid": "ac11cad7-e1ef-49ec-8dc3-f88e98511707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47918", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741144315266362", "content": "", "creation_timestamp": "2024-12-30T09:48:49.334015Z"}, {"uuid": "ff9a74f5-778f-4a88-82c1-5ddb39fa5721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47919", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741144332445433", "content": "", "creation_timestamp": "2024-12-30T09:48:49.588912Z"}, {"uuid": "b103ad23-584f-4d09-ada9-114b26db6c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47920", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741144346756465", "content": "", "creation_timestamp": "2024-12-30T09:48:49.822237Z"}, {"uuid": "507f123f-4012-4fd3-99ab-470c44c3e252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47921", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741144360603224", "content": "", "creation_timestamp": "2024-12-30T09:48:50.336440Z"}, {"uuid": "ff41b502-6e2b-4422-89d2-383caed86d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47924", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741225473173440", "content": "", "creation_timestamp": "2024-12-30T10:09:27.758577Z"}, {"uuid": "509c90a7-eb9c-425d-b660-96df5cf1fb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47925", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741225489049783", "content": "", "creation_timestamp": "2024-12-30T10:09:27.901063Z"}, {"uuid": "7e785368-fba7-4141-8ba2-53071e3f092f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47926", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741225504237649", "content": "", "creation_timestamp": "2024-12-30T10:09:28.431083Z"}, {"uuid": "2a874382-eecd-4882-a441-167b4cc2ac00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47919", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113741754718676919", "content": "", "creation_timestamp": "2024-12-30T12:24:03.264579Z"}, {"uuid": "80fe0f3e-e8b8-434f-85ee-27926d4cbdd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47141", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113809778423025957", "content": "", "creation_timestamp": "2025-01-11T12:43:22.728409Z"}, {"uuid": "40a3ca52-9879-4723-a8c5-f1b0cfe686da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47794", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113809778453452872", "content": "", "creation_timestamp": "2025-01-11T12:43:23.352152Z"}, {"uuid": "0c7b3522-9e85-4594-87b7-575ad5c159c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47143", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113809778438830203", "content": "", "creation_timestamp": "2025-01-11T12:43:22.956478Z"}, {"uuid": "f5d8a76a-b1c4-456e-bdc6-e1fa9b2ba5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47809", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113809778468587858", "content": "", "creation_timestamp": "2025-01-11T12:43:23.556219Z"}, {"uuid": "48b60c24-843c-4f5b-aad1-6ae1f4ebfcda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47143", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3id2jf2e", "content": "", "creation_timestamp": "2025-01-11T13:15:55.971191Z"}, {"uuid": "5331a7dc-5155-4817-bdf6-6c71f21d21ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbdc7wy42i", "content": "", "creation_timestamp": "2025-01-10T22:43:24.741634Z"}, {"uuid": "d9ffcfdd-faec-4734-a4b8-7a9067d8ef05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47408", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3kejje2i", "content": "", "creation_timestamp": "2025-01-11T13:15:58.217525Z"}, {"uuid": "5859caae-58ce-46f2-b690-e695f668ab44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47809", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3p43tk2x", "content": "", "creation_timestamp": "2025-01-11T13:16:03.065835Z"}, {"uuid": "dfdc29df-371d-4956-a43a-0ea1df24f55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbdclscw2w", "content": "", "creation_timestamp": "2025-01-10T22:43:25.534584Z"}, {"uuid": "fe1beb06-0252-4606-82bb-9511a327c09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47794", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3mhmzd2f", "content": "", "creation_timestamp": "2025-01-11T13:16:00.201055Z"}, {"uuid": "3f7aaad5-a4f2-430c-ab3b-57841171a670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47141", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3frmdu2i", "content": "", "creation_timestamp": "2025-01-11T13:15:53.223969Z"}, {"uuid": "8010e7e9-ab94-4972-8066-fd21afb8f3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47796", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113821491815579060", "content": "", "creation_timestamp": "2025-01-13T14:22:14.888114Z"}, {"uuid": "4f1bca83-76dc-4392-97ee-50bc0019fa7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47895", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113821648880947589", "content": "", "creation_timestamp": "2025-01-13T15:02:11.779228Z"}, {"uuid": "c8b9827c-159a-400c-9c47-caac7ef78b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47894", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113821648880947589", "content": "", "creation_timestamp": "2025-01-13T15:02:11.811292Z"}, {"uuid": "aa6a14a8-d4ea-488a-b536-c6ee369e69d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47897", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113821648880947589", "content": "", "creation_timestamp": "2025-01-13T15:02:11.843619Z"}, {"uuid": "a4298f00-8069-45e8-b666-4ccd6ae4a2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47796", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmzows6tw2h", "content": "", "creation_timestamp": "2025-01-13T15:15:23.764787Z"}, {"uuid": "5be5778c-cc13-403b-aca7-abf64e434567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbde2vel2b", "content": "", "creation_timestamp": "2025-01-10T22:43:32.313713Z"}, {"uuid": "67807d7a-9e0f-4718-855d-11f7c152aedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfn37uwysw2w", "content": "", "creation_timestamp": "2025-01-13T15:42:46.126121Z"}, {"uuid": "72e125e1-a9a8-45e1-8f40-3daa26dabefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47032", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113762339342651507", "content": "", "creation_timestamp": "2025-01-03T03:38:59.771787Z"}, {"uuid": "23229cb1-e7bf-4d30-981d-46a0195650f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47032", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq5swuk42m", "content": "", "creation_timestamp": "2025-01-03T04:15:32.263277Z"}, {"uuid": "dedf4894-ef69-418b-8101-f82af68b0c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lesroeh4kb25", "content": "", "creation_timestamp": "2025-01-03T04:42:42.018107Z"}, {"uuid": "d8fb130c-b60f-423a-b127-9f1a0f4599af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47475", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782530450480818", "content": "", "creation_timestamp": "2025-01-06T17:13:51.573683Z"}, {"uuid": "e4d5ce5c-70cc-48fa-9434-4e85036de78b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47475", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3n64ijdo22", "content": "", "creation_timestamp": "2025-01-06T17:15:58.636024Z"}, {"uuid": "ea516633-0ba2-4066-8999-2f897da0f255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbf35ncj2q", "content": "", "creation_timestamp": "2025-01-10T22:44:24.273167Z"}, {"uuid": "c6149272-f92f-4726-81f0-5ea2f08ddab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47519", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113806495808641277", "content": "", "creation_timestamp": "2025-01-10T22:48:34.160166Z"}, {"uuid": "35fd2207-01c0-48c3-935b-e8aae79483b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47571", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwnq6iw2t", "content": "", "creation_timestamp": "2025-01-14T14:17:40.482797Z"}, {"uuid": "e1556ea3-ddbc-464f-b8d8-150a4c9e91c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwlc2hf2f", "content": "", "creation_timestamp": "2025-01-14T14:17:38.022503Z"}, {"uuid": "9261f051-ee51-4ba2-bf7b-e99e2f4c31c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47191", "type": "seen", "source": "https://t.me/ZerodayAlert/350", "content": "", "creation_timestamp": "2026-07-07T00:00:06.308032Z"}, {"uuid": "3837b8a7-0bdc-44d0-a28b-00c322164617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47796", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113821831125882012", "content": "", "creation_timestamp": "2025-01-13T15:48:32.848281Z"}, {"uuid": "f15d669e-0456-41fb-9655-6eeb2a430beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47572", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwq6yll2s", "content": "", "creation_timestamp": "2025-01-14T14:17:43.174925Z"}, {"uuid": "9a8d3d5a-606c-4426-94bf-7f322cd24e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827532350823639", "content": "", "creation_timestamp": "2025-01-14T15:58:26.135976Z"}, {"uuid": "898cece7-254b-49b1-a65d-f665ef9320bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "", "creation_timestamp": "2026-07-07T00:00:06.268470Z"}, {"uuid": "7cabfa94-06e0-4dae-a493-fc4d09152769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47571", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827591355003271", "content": "", "creation_timestamp": "2025-01-14T16:13:26.534813Z"}, {"uuid": "5eea6406-cf06-4f67-9557-faf0eb92c9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47572", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827591369914313", "content": "", "creation_timestamp": "2025-01-14T16:13:26.843549Z"}, {"uuid": "481e36b2-3f64-4233-80f2-ea3a24c8b32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47796", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfq4m2bww42z", "content": "", "creation_timestamp": "2025-01-14T20:45:27.115877Z"}, {"uuid": "365ad18c-4fb5-49de-ac11-62e396c4a17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47002", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113832984101239506", "content": "", "creation_timestamp": "2025-01-15T15:04:53.308111Z"}, {"uuid": "069c311e-164d-4bc3-8427-788afad95a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47239", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790328178187253", "content": "", "creation_timestamp": "2025-01-08T02:16:55.476399Z"}, {"uuid": "dbca1eac-d2fd-4128-86d5-656f50598439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47934", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790537383900815", "content": "", "creation_timestamp": "2025-01-08T03:10:07.879896Z"}, {"uuid": "f65254d4-8857-46aa-bbad-2816a4e0bc9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47239", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7752lyuq2d", "content": "", "creation_timestamp": "2025-01-08T03:15:29.626357Z"}, {"uuid": "11161577-6725-4de9-b714-a64025475733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47934", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf77553t2n2i", "content": "", "creation_timestamp": "2025-01-08T03:15:32.333037Z"}, {"uuid": "69f1440c-bc5c-42c5-96d3-954e5751aea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7bapouyn2e", "content": "", "creation_timestamp": "2025-01-08T03:53:20.747358Z"}, {"uuid": "09be79ac-97f6-408c-a504-5f8f5e971919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47934", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7baqn47l2w", "content": "", "creation_timestamp": "2025-01-08T03:53:25.346217Z"}, {"uuid": "b36c1cd8-b5e2-4a9f-ba98-d032b7e58d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47113", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113850086550006285", "content": "", "creation_timestamp": "2025-01-18T15:34:15.954660Z"}, {"uuid": "a2d2fe5e-0c37-4109-ad96-d2566053dea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47106", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113850239137768638", "content": "", "creation_timestamp": "2025-01-18T16:13:04.204937Z"}, {"uuid": "32bdbd5c-cdd5-4a93-8fd1-5af8407e72ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47106", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfzpfrev2e2t", "content": "", "creation_timestamp": "2025-01-18T16:15:55.054820Z"}, {"uuid": "69dce60b-a773-4f26-883a-12355492f7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47113", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfzpftzzun2p", "content": "", "creation_timestamp": "2025-01-18T16:15:57.781451Z"}, {"uuid": "0b311545-a9bb-4bde-9315-055e1be71e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47113", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113850379047664974", "content": "", "creation_timestamp": "2025-01-18T16:48:40.342930Z"}, {"uuid": "29d4d025-b94d-486a-9ade-1883aba857e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfzuczauqx2y", "content": "", "creation_timestamp": "2025-01-18T17:43:51.383172Z"}, {"uuid": "d72bc6b3-ae10-4d42-b256-9c0d70b77c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47113", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfzues3yxe2g", "content": "", "creation_timestamp": "2025-01-18T17:44:52.004468Z"}, {"uuid": "8f4ea344-3a8b-40fe-861e-f2e0032e07ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47113", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfzues7j752g", "content": "", "creation_timestamp": "2025-01-18T17:44:52.592085Z"}, {"uuid": "a3f64217-c6f2-4394-9352-cad7ef81efba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47100", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-02", "content": "", "creation_timestamp": "2025-01-21T11:00:00.000000Z"}, {"uuid": "22c3b041-535b-4a34-b5b4-a0269846b25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47764", "type": "seen", "source": "https://gist.github.com/ton77v/932a3f8b5d57d2625b31328796a3cf30", "content": "", "creation_timestamp": "2025-02-01T06:22:08.000000Z"}, {"uuid": "36dacbca-f76c-4335-ba09-d3c08149a963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhkdkgyjc52a", "content": "", "creation_timestamp": "2025-02-07T00:24:16.112826Z"}, {"uuid": "9329d136-0f3d-45de-9247-c3aab402ad9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47072", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113869714895593544", "content": "", "creation_timestamp": "2025-01-22T02:46:01.165201Z"}, {"uuid": "28452f01-ae56-45d3-b78d-230490d2014d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113869714895593544", "content": "", "creation_timestamp": "2025-01-22T02:46:01.199945Z"}, {"uuid": "9df7cbd4-bb2f-43fc-92ca-236277114757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47857", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113941446938271087", "content": "", "creation_timestamp": "2025-02-03T18:48:41.233896Z"}, {"uuid": "d24546af-0f57-4791-a582-bcf4782f98c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "03d09f31-e2d7-4e56-bb96-4d0815c50440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3lgv7zeaayy2p", "content": "", "creation_timestamp": "2025-01-29T14:55:05.386067Z"}, {"uuid": "af139d0f-629b-493e-9f97-2c8f1b399824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3lgvcssau4m2o", "content": "", "creation_timestamp": "2025-01-29T15:45:06.592654Z"}, {"uuid": "f22415d0-0ef9-4ce7-884d-14a1c83c5b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47256", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958559487031600", "content": "", "creation_timestamp": "2025-02-06T19:20:21.530666Z"}, {"uuid": "7dc61f59-f2cf-48c3-a9d1-072a61579a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47258", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958559501650306", "content": "", "creation_timestamp": "2025-02-06T19:20:21.865250Z"}, {"uuid": "ab096465-2967-42f6-988c-ec37533335f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3lgwwisdstf25", "content": "", "creation_timestamp": "2025-01-30T07:10:05.632679Z"}, {"uuid": "418a6304-c044-4902-ad94-9a035505bbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47256", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvoszcyn27", "content": "", "creation_timestamp": "2025-02-06T20:16:08.610623Z"}, {"uuid": "dc9b4ef7-6528-4858-9bf8-40b33fbafa60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47258", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvowds5w26", "content": "", "creation_timestamp": "2025-02-06T20:16:12.057272Z"}, {"uuid": "ab1d0522-eeab-4910-8056-a9b1aafe8d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47770", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113942353419505369", "content": "", "creation_timestamp": "2025-02-03T22:38:56.774965Z"}, {"uuid": "f0f132ca-4f02-4111-90f4-a28fcbc462b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "2cf9931d-fe4c-40dd-9c1f-6dba14698d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhcxybcipi2e", "content": "", "creation_timestamp": "2025-02-04T02:08:35.004772Z"}, {"uuid": "5b95619d-58f8-4641-ae0f-383ba76436ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "5f06b749-b012-43c9-a120-e4b4a8347222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47103", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2fi3n4qc2t", "content": "", "creation_timestamp": "2025-01-31T16:16:06.864732Z"}, {"uuid": "38e4c071-1912-486a-84c8-86f86cfb7999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47116", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2fi5saud2t", "content": "", "creation_timestamp": "2025-01-31T16:16:09.034983Z"}, {"uuid": "38f272a0-8d95-4b35-b07b-195b15e9a85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47258", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113958906267481273", "content": "", "creation_timestamp": "2025-02-06T20:48:33.296122Z"}, {"uuid": "862b3517-2491-4e0a-a73d-dcd3c0a779c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "2efb7836-7278-4502-976e-6380041edbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "cfb483de-016b-49a9-937d-01e8e13752b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47857", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhd4f3u3v22r", "content": "", "creation_timestamp": "2025-02-04T03:27:21.620989Z"}, {"uuid": "c5a86aad-e981-445c-92d6-cf8ba2605112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47857", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2isfxgb22h", "content": "", "creation_timestamp": "2025-01-31T17:15:34.443642Z"}, {"uuid": "8f2673e2-9a65-459a-85fb-2b9aa5002937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47891", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113924461046134312", "content": "", "creation_timestamp": "2025-01-31T18:48:46.942004Z"}, {"uuid": "675a1c3f-550a-433e-9f12-8afcf4256ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2qmh2csu2i", "content": "", "creation_timestamp": "2025-01-31T19:35:27.981875Z"}, {"uuid": "19a93cf6-b794-46c7-9b75-e7f935f24c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47103", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2qmgtc3o2b", "content": "", "creation_timestamp": "2025-01-31T19:35:26.954823Z"}, {"uuid": "d5cb6429-c26c-4be1-be9d-87ad4548475f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2xd6emyl2k", "content": "", "creation_timestamp": "2025-01-31T21:35:29.183164Z"}, {"uuid": "fa5c23c6-046c-4ae5-95a3-fa3a9522121b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2xd7ecju2e", "content": "", "creation_timestamp": "2025-01-31T21:35:33.199112Z"}, {"uuid": "58ced2d8-2e5c-4540-9aba-6fea23f2c912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47891", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920808266719706", "content": "", "creation_timestamp": "2025-01-31T03:19:43.698052Z"}, {"uuid": "e5dfc2ce-b432-488a-8692-a14c234ef0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47898", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920808283477970", "content": "", "creation_timestamp": "2025-01-31T03:19:44.076296Z"}, {"uuid": "6729a3df-de97-4974-a29d-cdd57a39d5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47899", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920808297804037", "content": "", "creation_timestamp": "2025-01-31T03:19:44.285415Z"}, {"uuid": "d911bef8-51a1-47cd-9ca7-0687ac06b181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47900", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920848404764905", "content": "", "creation_timestamp": "2025-01-31T03:29:56.404499Z"}, {"uuid": "8abb1d76-2947-46e0-a1c2-73b326bff785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://t.me/brutsecurity/1597", "content": "", "creation_timestamp": "2026-07-09T03:00:09.361383Z"}, {"uuid": "ed726548-6ba4-4947-ac9d-2e70a8a4d342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47891", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgz5afde6a2b", "content": "", "creation_timestamp": "2025-01-31T04:15:58.987436Z"}, {"uuid": "11fefb1a-4429-48de-91e6-e4872412a1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47898", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgz5ahmy5c2c", "content": "", "creation_timestamp": "2025-01-31T04:16:01.273419Z"}, {"uuid": "4a9da9bc-f7b0-486a-9ece-5b359263533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47899", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgz5ak3kpf2h", "content": "", "creation_timestamp": "2025-01-31T04:16:03.880312Z"}, {"uuid": "ea6f6689-39a6-468e-a75e-3c40610b90d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47900", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgz5amge4n2e", "content": "", "creation_timestamp": "2025-01-31T04:16:06.284719Z"}, {"uuid": "895d2cbc-22d0-43cc-bc0e-2950128f542b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47407", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:06.000000Z"}, {"uuid": "177c47b0-7ee9-42f2-bb31-4a7f65de661d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114071918573609938", "content": "", "creation_timestamp": "2025-02-26T19:49:10.464068Z"}, {"uuid": "ab0dc43d-d259-4771-b080-13473763b81a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981856193211167", "content": "", "creation_timestamp": "2025-02-10T22:05:01.156179Z"}, {"uuid": "5e373716-49dd-4a16-a0fd-0c8d4778593c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4epoaebp26", "content": "", "creation_timestamp": "2025-02-26T21:58:10.493446Z"}, {"uuid": "6fe1a1d5-7491-477b-9a5b-15f129b44c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:04.000000Z"}, {"uuid": "545f819e-5443-4fc3-a594-732da893266f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113985939700497507", "content": "", "creation_timestamp": "2025-02-11T15:23:30.642181Z"}, {"uuid": "0041be87-26c0-4aba-8fce-262562b21ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113985946487899400", "content": "", "creation_timestamp": "2025-02-11T15:25:14.193156Z"}, {"uuid": "059477ea-e022-4774-bb6b-c63c243b213f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986005516389449", "content": "", "creation_timestamp": "2025-02-11T15:40:14.778151Z"}, {"uuid": "41ab4bfc-a63a-4806-82dd-31a7fff75d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mtguw22s", "content": "", "creation_timestamp": "2025-02-11T16:16:27.463992Z"}, {"uuid": "e00db3ea-ba67-4550-81fa-e77fa01db7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113986273945119595", "content": "", "creation_timestamp": "2025-02-11T16:48:31.147200Z"}, {"uuid": "9aafc965-7328-4ef7-bb0c-795404a78d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhw5dyb7fz2w", "content": "", "creation_timestamp": "2025-02-11T17:05:13.204086Z"}, {"uuid": "8ed08e69-e977-422b-b2c8-a0f189311f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47552", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114194852293996029", "content": "", "creation_timestamp": "2025-03-20T12:52:43.856907Z"}, {"uuid": "cf341d94-08f7-400e-abb5-716c84fdb040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhwbqsi7vc2o", "content": "", "creation_timestamp": "2025-02-11T18:23:58.626715Z"}, {"uuid": "e5b53261-eb56-4b27-83ea-076e5eab727a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3lkrdxvogpt22", "content": "", "creation_timestamp": "2025-03-19T23:35:58.906707Z"}, {"uuid": "411b603b-6334-4d06-bc59-fc7f14883acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj4ljq7wuj2z", "content": "", "creation_timestamp": "2025-02-27T00:00:11.211587Z"}, {"uuid": "93bc381b-a2b2-492b-93f8-0daf03cf9813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3lkrdxzj5sv24", "content": "", "creation_timestamp": "2025-03-19T23:36:02.835716Z"}, {"uuid": "3303ee09-48d2-4691-a813-19ad10b62099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwek3xmgt2i", "content": "", "creation_timestamp": "2025-02-11T19:13:54.805099Z"}, {"uuid": "6f612282-11d6-4d3c-832b-6dfc69d42b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwek3xmgu2i", "content": "", "creation_timestamp": "2025-02-11T19:13:55.319816Z"}, {"uuid": "b428f711-402f-4d37-a63c-d6b59ed9f194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47407", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhwkli4wkw2k", "content": "", "creation_timestamp": "2025-02-11T21:02:02.612670Z"}, {"uuid": "b2d819e5-df55-4886-b1f2-80626a3487a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljfjw3obys2f", "content": "", "creation_timestamp": "2025-03-02T13:25:12.432591Z"}, {"uuid": "15bc618a-cc08-4986-b69d-ca0d207fa56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:04.000000Z"}, {"uuid": "7c65f052-2e46-4d57-8177-0e742ea6c438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:04.000000Z"}, {"uuid": "2af18124-441b-4216-8342-9015aa2a6227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:04.000000Z"}, {"uuid": "6c57b234-0c0b-4090-b293-cc9ecfab6aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:04.000000Z"}, {"uuid": "88d67b3f-8b4c-4131-a01e-adf38579ab00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lhypiivg5y2l", "content": "", "creation_timestamp": "2025-02-12T17:35:11.117633Z"}, {"uuid": "db776177-3ede-4bcc-aec4-1501bbefa0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47006", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7dtrh7b2x", "content": "", "creation_timestamp": "2025-02-12T22:18:53.816333Z"}, {"uuid": "0a0f4594-dddd-4878-82e4-df8003aca3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47006", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113993921369561488", "content": "", "creation_timestamp": "2025-02-13T01:13:21.128751Z"}, {"uuid": "a1ba17ca-a507-4d93-9268-8ee00ee2ba0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn3zv62d2z", "content": "", "creation_timestamp": "2025-02-13T02:25:08.080870Z"}, {"uuid": "2470e446-fb24-4f4f-b23c-c64f6446ccab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47264", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995183819751639", "content": "", "creation_timestamp": "2025-02-13T06:34:24.567252Z"}, {"uuid": "1cef27ba-7af8-4091-be16-4bfd157b9028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47265", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995183835162222", "content": "", "creation_timestamp": "2025-02-13T06:34:24.883174Z"}, {"uuid": "062eb971-0e6d-4f9b-ade4-2baba4bd50c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47266", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995183849315810", "content": "", "creation_timestamp": "2025-02-13T06:34:25.028064Z"}, {"uuid": "d147f193-39c8-4e8d-99c8-9139a2d32b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6c3cfb92-62b4327e96b9e56e", "content": "", "creation_timestamp": "2025-02-13T07:09:22.134139Z"}, {"uuid": "ee303696-c990-450c-affa-938e541f9b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47265", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7x2xfi2y", "content": "", "creation_timestamp": "2025-02-13T10:30:26.359176Z"}, {"uuid": "5628b6c8-cf5d-429a-830b-9c3b3718169e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7xdza62h", "content": "", "creation_timestamp": "2025-02-13T10:30:26.977108Z"}, {"uuid": "d7b5128f-3cd0-4f05-ba4b-c856b26b8b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7xrnu426", "content": "", "creation_timestamp": "2025-02-13T10:30:29.199604Z"}, {"uuid": "b20543a2-f05b-4da1-a9db-11f482b1e24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47262", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114104471150686454", "content": "", "creation_timestamp": "2025-03-04T13:47:37.386197Z"}, {"uuid": "e915bb7d-f673-4b37-a0a1-782dd994b9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47259", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114104471150686454", "content": "", "creation_timestamp": "2025-03-04T13:47:37.518949Z"}, {"uuid": "23cb0a15-ce65-4c75-a26f-76e7576534e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47260", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114104471150686454", "content": "", "creation_timestamp": "2025-03-04T13:47:37.452887Z"}, {"uuid": "ecc785c4-3d40-4f02-b464-dd7ca4a7bb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7", "content": "", "creation_timestamp": "2025-03-19T15:49:04.000000Z"}, {"uuid": "9c88aa5a-bf8b-402f-ba77-a9d0c54bd6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4741", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "91cb0fdc-9f28-4f34-963a-2a19ed1585cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj5tr5zh4p27", "content": "", "creation_timestamp": "2025-02-27T12:00:06.868602Z"}, {"uuid": "9010488f-4d3a-4a2a-a423-80d704878bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47935", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3uj5vqd27", "content": "", "creation_timestamp": "2025-02-17T06:15:55.856001Z"}, {"uuid": "a5340b3d-d31d-41d5-be7c-bb92145184be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47935", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liefcteqfj26", "content": "", "creation_timestamp": "2025-02-17T09:04:59.518716Z"}, {"uuid": "e9f94128-80da-414c-8d17-b36f32c18ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lirvei2x4m2t", "content": "", "creation_timestamp": "2025-02-22T17:56:51.191701Z"}, {"uuid": "0adca997-ef89-4338-8353-68e1927307eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47552", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkqoxbbpo32m", "content": "", "creation_timestamp": "2025-03-19T17:19:48.916478Z"}, {"uuid": "88b28976-0c3d-4581-9f6f-93e83fdf3fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:54.000000Z"}, {"uuid": "8434359e-1813-439c-9626-176e244ad8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:00.000000Z"}, {"uuid": "c41103ac-2afd-4780-820f-ff1ecbdd596a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhdnux2x", "content": "", "creation_timestamp": "2025-03-14T16:46:16.431194Z"}, {"uuid": "aed05c89-61b0-4a9e-961f-ade01286677f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47053", "type": "seen", "source": "https://bsky.app/profile/druid.fi/post/3lj33ptmzfc2z", "content": "", "creation_timestamp": "2025-02-26T09:44:34.885847Z"}, {"uuid": "ef36acd0-718e-45e0-92e0-74762901620a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://bsky.app/profile/druid.fi/post/3lj33ptmzfc2z", "content": "", "creation_timestamp": "2025-02-26T09:44:35.019146Z"}, {"uuid": "ed882cb5-d6cc-43f0-a4f3-bd70e73aaa82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47573", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114162103566286961", "content": "", "creation_timestamp": "2025-03-14T18:04:18.221989Z"}, {"uuid": "2e5a2688-af9a-48b9-8144-b9b25b61b26a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cw24ikh2f", "content": "", "creation_timestamp": "2025-03-10T19:45:51.190849Z"}, {"uuid": "b42f4530-29d8-4f78-b4e3-aa3af0d187d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lt7ukfgxgs2l", "content": "", "creation_timestamp": "2025-07-05T13:31:30.493398Z"}, {"uuid": "fdcc4eb8-984e-4b76-b0cb-ad60bd9938a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47056", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaq7z7pjnp2", "content": "", "creation_timestamp": "2025-05-28T17:32:11.010453Z"}, {"uuid": "deb41a62-197d-4ed7-8c89-87c8f97812b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/204", "content": "", "creation_timestamp": "2025-06-03T15:12:21.000000Z"}, {"uuid": "803fd997-a473-451f-9bef-19261070a092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "a669db45-0f4e-4557-88b7-7c911e801954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47212", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:38.757618Z"}, {"uuid": "1f8a74b8-b1da-44eb-8243-682ec237bb53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47212", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:38.756004Z"}, {"uuid": "7e942eaf-a2d0-455f-91fb-f2938bee9c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47214", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:38.818945Z"}, {"uuid": "9ccb60a8-4e47-4825-9d3f-62774a06b6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47214", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:38.829553Z"}, {"uuid": "2d5e715f-7258-4c5b-9bc6-3ffb83e9ec65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47217", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:38.892850Z"}, {"uuid": "e842700d-fc3c-4445-9772-8fb0f52949de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47217", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:38.897830Z"}, {"uuid": "81f61a7f-dbb1-472c-a8e7-ef4fe053dbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47213", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:39.025851Z"}, {"uuid": "c7ae9f55-de2a-4d37-8c58-d8eecba0ba4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47213", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:39.034052Z"}, {"uuid": "34043c2e-4346-4173-9e83-6e9d5c3b4a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47215", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:39.098008Z"}, {"uuid": "73d00e4c-e7c2-4ae7-a21c-49107cdb9a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47215", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114276298770722682", "content": "", "creation_timestamp": "2025-04-03T22:05:39.102244Z"}, {"uuid": "c4b6c0c0-2cb0-4c2b-b1a1-491934901550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxacsijl62x", "content": "", "creation_timestamp": "2025-04-04T01:11:39.733079Z"}, {"uuid": "7c3207c5-747f-42d2-a65a-5a6a3911c7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxacsrpoj2k", "content": "", "creation_timestamp": "2025-04-04T01:11:40.444025Z"}, {"uuid": "e5dfa7c2-d827-48bb-b4a8-fc8802ca9f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxacsyhxi2c", "content": "", "creation_timestamp": "2025-04-04T01:11:41.638539Z"}, {"uuid": "db196bca-f39a-452a-91e0-c6cca1e16212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxacsyhxi2c", "content": "", "creation_timestamp": "2025-04-04T01:11:41.727498Z"}, {"uuid": "39185e17-602b-404c-838c-bf37897dce3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxact43xb2r", "content": "", "creation_timestamp": "2025-04-04T01:11:42.320408Z"}, {"uuid": "52586d8d-772f-4abe-ac26-da4aefcf36f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxact43xb2r", "content": "", "creation_timestamp": "2025-04-04T01:11:42.406401Z"}, {"uuid": "287ba73a-c92c-447c-ba40-06f1c5b82b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxactdbul2h", "content": "", "creation_timestamp": "2025-04-04T01:11:43.607882Z"}, {"uuid": "98b6bb91-870b-4dcf-b0ee-1f90aefa8804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqqhsmkhe52s", "content": "", "creation_timestamp": "2025-06-03T23:43:07.151818Z"}, {"uuid": "629c18a3-ebb8-478e-aad9-d2f019573815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47055", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat6o76wyp2", "content": "", "creation_timestamp": "2025-05-28T18:24:14.070809Z"}, {"uuid": "97debc43-e112-4806-a2b5-b76851c30f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47057", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat6w3aezt2", "content": "", "creation_timestamp": "2025-05-28T18:24:23.768503Z"}, {"uuid": "27308d7b-75c3-421b-b445-299ce3b64f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47072", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq43lzc3bc23", "content": "", "creation_timestamp": "2025-05-26T21:11:25.982385Z"}, {"uuid": "cdf07585-f80c-404d-8d17-af11954cbd8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqqq5dgirf2a", "content": "", "creation_timestamp": "2025-06-04T02:12:15.976278Z"}, {"uuid": "6d00feee-1647-4347-ae7f-ad31a6655b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "5898174a-0da8-4a47-96ac-1be807aa6ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "b8b180e4-c7f6-4e51-8612-86058ee6e27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/206", "content": "", "creation_timestamp": "2025-06-03T21:21:02.000000Z"}, {"uuid": "fafb3da3-790b-4eb3-9539-eb77faa07bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3lqqwzkvoz72l", "content": "", "creation_timestamp": "2025-06-04T04:15:26.483254Z"}, {"uuid": "332af9b7-8284-48a1-a96e-92d8d070ab83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3lqqxzizrqj2i", "content": "", "creation_timestamp": "2025-06-04T04:33:18.845031Z"}, {"uuid": "c60c3d20-26c2-4e07-bda1-aa802fcc4858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "49f93283-9a99-473f-ba8c-9e024f1cd61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47552", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/285", "content": "", "creation_timestamp": "2025-06-28T15:19:03.000000Z"}, {"uuid": "9b4087aa-6a5c-4a8e-8599-f2a1016ebba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47552", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltfogaxk2c2e", "content": "", "creation_timestamp": "2025-07-07T20:57:46.470135Z"}, {"uuid": "dcde9e4f-0656-492f-afde-c3b423d7095d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/24", "content": "", "creation_timestamp": "2025-07-10T15:46:04.000000Z"}, {"uuid": "0a7bf02b-97d5-407a-be27-8d22e8bb46c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "217d4088-d84d-4aa7-8d36-d07e17e9f5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqrc7uy3wc2h", "content": "", "creation_timestamp": "2025-06-04T07:35:49.048146Z"}, {"uuid": "dff193a8-a252-4f75-9fd3-7752a79a6099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3ltnpxyrxfk2s", "content": "", "creation_timestamp": "2025-07-11T01:46:56.259248Z"}, {"uuid": "aaae938b-0341-46c0-bc7e-a6da29cf38c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://gist.github.com/xaolanx/4c88d0cbc0dee90764bae767006103f8", "content": "", "creation_timestamp": "2025-07-11T02:03:34.000000Z"}, {"uuid": "c8b68c36-5eed-45bb-8d03-09541993165d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47090", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq57xkpkq562", "content": "", "creation_timestamp": "2025-05-27T08:02:52.675633Z"}, {"uuid": "3ae5db58-9646-4358-8b03-e2235d1e9e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqgabtmflb2e", "content": "", "creation_timestamp": "2025-05-30T22:01:49.831757Z"}, {"uuid": "d8ee5618-fd3c-4180-8ac7-1de275a53a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47057", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqgagqgdxs2r", "content": "", "creation_timestamp": "2025-05-30T22:04:34.523840Z"}, {"uuid": "8aef9f1e-54e6-4038-a16d-cf932827a6bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqgam4t2os2m", "content": "", "creation_timestamp": "2025-05-30T22:07:35.305227Z"}, {"uuid": "20edc7b0-fabc-407e-a2ce-514d710aaa32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "cbee95bf-a300-4d27-98fa-1c17dfb3929a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47764", "type": "seen", "source": "https://gist.github.com/animesh-1121/c5f18322202fe7ce4b456e08d21dc4d7", "content": "", "creation_timestamp": "2025-06-23T12:01:38.000000Z"}, {"uuid": "ca329f00-ad92-4b53-9d0a-b48df63e0287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq5fahlivg2o", "content": "", "creation_timestamp": "2025-05-27T09:36:34.886317Z"}, {"uuid": "4a8b92eb-7872-46ad-8f14-6fc98df3c444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3lqrl52ec3s2l", "content": "", "creation_timestamp": "2025-06-04T10:15:18.033331Z"}, {"uuid": "64093e93-4371-4f93-9742-ea0098aaa890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47773", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltkpmaz65o22", "content": "", "creation_timestamp": "2025-07-09T21:02:21.089780Z"}, {"uuid": "ba73c739-1abc-48d7-b5d6-50e4d6e21e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47073", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-47073.yaml", "content": "", "creation_timestamp": "2025-06-12T10:36:32.000000Z"}, {"uuid": "c7a345c5-5120-4ebb-8c39-2fe6354bc1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47814", "type": "seen", "source": "https://gist.github.com/jamincollins/eeeaa5b5a021f181d02cd557edf76515", "content": "", "creation_timestamp": "2025-07-09T21:28:20.000000Z"}, {"uuid": "04587b1d-7603-4e30-b03b-f64f0b164e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpdrl2nsho2p", "content": "", "creation_timestamp": "2025-05-17T05:08:02.144992Z"}, {"uuid": "61bb09e5-10b3-4799-bd17-743be07ef2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ltckutjk7c27", "content": "", "creation_timestamp": "2025-07-06T15:16:24.306451Z"}, {"uuid": "a3a07440-84f7-4129-a74b-94421f2c2475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "1457bb5f-9975-47c8-8fa7-8c5a037b6964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47829", "type": "seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3lnijr22bms2h", "content": "", "creation_timestamp": "2025-04-23T15:41:08.127257Z"}, {"uuid": "b7d061ce-41eb-4ee5-9d29-1bd4e22a0af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqz3vk2y", "content": "", "creation_timestamp": "2025-04-23T17:19:29.415743Z"}, {"uuid": "a62d28e7-4e59-47dc-810c-1df6f3272c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "d3701617-2261-4998-adf4-8d22d85b3155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lnr43365uv2t", "content": "", "creation_timestamp": "2025-04-27T01:30:10.430238Z"}, {"uuid": "fd557415-4c4f-45c3-85a9-d781824c709f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lntp6yc5vi2o", "content": "", "creation_timestamp": "2025-04-28T02:17:42.608327Z"}, {"uuid": "03942be7-e45a-419e-9ef6-a0b9ac555c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqse5pynuo2u", "content": "", "creation_timestamp": "2025-06-04T17:43:06.124648Z"}, {"uuid": "57a08078-a0e3-4059-9af7-05e4d3a72fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "b91b799e-31c0-45eb-8018-6ce14253206a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/212", "content": "", "creation_timestamp": "2025-06-04T15:21:18.000000Z"}, {"uuid": "b99033a3-654f-4da6-bf27-499e7efb36ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "8f805d38-e42c-4aec-8f12-0f71f804a557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47829", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lobo4p5i3s2i", "content": "", "creation_timestamp": "2025-05-03T15:35:52.288760Z"}, {"uuid": "d18ac864-3561-4477-be4e-6fc0f85bcefc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47829", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lobpccqaqs2i", "content": "", "creation_timestamp": "2025-05-03T15:56:53.939223Z"}, {"uuid": "474106c2-1fe3-45bc-b7fa-57476d471032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://schleuss.online/users/vulnbot/statuses/114619684333161709", "content": "", "creation_timestamp": "2025-06-03T13:33:06.498964Z"}, {"uuid": "c2efc55c-79d9-42f7-b58c-7f5c5aa2ad6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lqphkawc2e22", "content": "", "creation_timestamp": "2025-06-03T14:05:46.841880Z"}, {"uuid": "687054e7-547e-4da7-8213-59697644cb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "31de0a2f-9d2c-4e0c-9828-103bbc629983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47065", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114835715205263599", "content": "", "creation_timestamp": "2025-07-11T17:12:35.786888Z"}, {"uuid": "afb4d773-2297-4107-88ae-6afeda367967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqpkpiimav2d", "content": "", "creation_timestamp": "2025-06-03T15:02:23.110259Z"}, {"uuid": "573156f4-b581-49d8-bc08-95e21716f912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "cf9c3745-f33b-45fa-93c8-62c97ca364e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467343284596625", "content": "", "creation_timestamp": "2025-05-07T15:50:46.492903Z"}, {"uuid": "1442b9d7-0851-4105-84c3-3d46284f4f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkdsgfb2p", "content": "", "creation_timestamp": "2025-05-07T18:26:58.226294Z"}, {"uuid": "1c86954b-628f-4d43-9415-70c7699c3eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "234a6c28-2374-469c-b1bb-5f5127f4a2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47773", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lthtj6c3yl2t", "content": "", "creation_timestamp": "2025-07-08T17:34:12.251116Z"}, {"uuid": "a93bcffd-78e5-43c7-a11a-b9de233bce83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://t.me/brutsecurity/1597", "content": "", "creation_timestamp": "2026-07-10T00:00:32.990597Z"}, {"uuid": "478a9ccc-95f5-41b5-9c38-1742c763d8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lphg7icdpc2c", "content": "", "creation_timestamp": "2025-05-18T15:55:22.956886Z"}, {"uuid": "16bcc200-e5bb-433c-8021-3ecfa672203d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqpub5eaov2z", "content": "", "creation_timestamp": "2025-06-03T17:53:19.262489Z"}, {"uuid": "b9bb9c16-ca2c-41af-8f1f-488ba7b7ad89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47606", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls5klj3xvc2x", "content": "", "creation_timestamp": "2025-06-21T22:02:40.519640Z"}, {"uuid": "32a62899-23c6-4665-bbf6-f4295febc5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47800", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hoe6x6x42", "content": "", "creation_timestamp": "2025-05-13T22:08:55.881318Z"}, {"uuid": "f2f34c10-5672-4831-af19-3832381ca32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47795", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hof7mmhy2", "content": "", "creation_timestamp": "2025-05-13T22:08:56.380766Z"}, {"uuid": "6de6ca8b-7a1d-405d-be93-7ddf16ed599d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47550", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hohh4csy2", "content": "", "creation_timestamp": "2025-05-13T22:08:57.463237Z"}, {"uuid": "a04b1269-6d02-4fe9-b2f4-e29ee058bc45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/207", "content": "", "creation_timestamp": "2025-06-03T23:46:48.000000Z"}, {"uuid": "2c54fe79-8139-4c03-a477-906204b11d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3lqq34o4mcp2k", "content": "", "creation_timestamp": "2025-06-03T19:56:06.717686Z"}, {"uuid": "3185082c-b78a-4065-b42a-48eefb3cd53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3lqq37wqizg2j", "content": "", "creation_timestamp": "2025-06-03T19:57:54.925963Z"}, {"uuid": "0738b5c5-55ee-45ac-a50e-4e16056e5c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lqq3do2qdk2f", "content": "", "creation_timestamp": "2025-06-03T20:00:03.985711Z"}, {"uuid": "49708c0d-9fd2-4df9-9307-67ba67ffee38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3lqq3dt2kls2z", "content": "", "creation_timestamp": "2025-06-03T20:00:05.343650Z"}, {"uuid": "14a7a379-4394-4356-b724-eb4a960d1a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114830011674092966", "content": "", "creation_timestamp": "2025-07-10T17:02:07.488227Z"}, {"uuid": "c2f7e018-e404-43d7-85a0-63077ec5335f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hnews.southla.social/post/3lqq4zn224k2o", "content": "", "creation_timestamp": "2025-06-03T20:30:11.270877Z"}, {"uuid": "6f46825e-b134-4bdd-bd38-5d4eb69ef539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3lqq5lek45r2i", "content": "", "creation_timestamp": "2025-06-03T20:40:05.835673Z"}, {"uuid": "9eab71b8-386d-40f0-b893-b1fa5fc9cbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3lqq5mtoji423", "content": "", "creation_timestamp": "2025-06-03T20:40:55.100121Z"}, {"uuid": "ec6c88f3-5ab5-4588-b5e2-23b7aea35da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3lqq6giqtol2z", "content": "", "creation_timestamp": "2025-06-03T20:55:16.141294Z"}, {"uuid": "86f9afc2-8f01-4abc-a037-17ce70070915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47073", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrjdibnr3s2e", "content": "", "creation_timestamp": "2025-06-13T21:02:20.156426Z"}, {"uuid": "a42956f5-a761-4f57-a501-1dba084f5941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltmx2ptdqv2h", "content": "", "creation_timestamp": "2025-07-10T18:21:00.416844Z"}, {"uuid": "24378934-8d65-44e8-b3a0-100430acb483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47075", "type": "seen", "source": "https://gist.github.com/Wbaker7702/53198661ba029cb1af08a9ce551dbeb5", "content": "", "creation_timestamp": "2025-10-14T05:07:38.000000Z"}, {"uuid": "2286885a-c619-4d37-a1d7-187acfb34853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "463cf5e3-0756-48a3-b00d-0db7a708f4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "d972400a-70a9-4fe2-9938-80fce0ca7d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "8aebc1cd-369b-44ac-976a-cfb29475ba39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47827", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:29.000000Z"}, {"uuid": "988bb048-1cce-464e-a1ac-9c250e9a7533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47407", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/mypro_mgr_cmd.rb", "content": "", "creation_timestamp": "2025-02-11T08:32:04.000000Z"}, {"uuid": "2f46240d-8c2d-45e0-a7ff-84433ec2e939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "9f5f80c1-1db5-4606-9c5a-58be81797b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "5042ca6e-f66f-42c9-9a58-6d0b423c2d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47407", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "4864e399-29dd-4585-8b66-24336e8384d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://gist.github.com/Token-Eater/a4d1d6ce67e8450e1a8f456b468e3599", "content": "", "creation_timestamp": "2025-11-05T11:48:09.000000Z"}, {"uuid": "a2e115a0-4861-40c1-9d02-ded622da810c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://gist.github.com/Token-Eater/3d3edb1aabe326b71377581a9ce3b805", "content": "", "creation_timestamp": "2025-11-05T11:55:10.000000Z"}, {"uuid": "144db571-2c77-4ed8-b674-fa3ac38bda3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-47575", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/10/kritische-zero-day-schwachstelle-in-fortimanager-wird-aktiv-ausgenutzt-update-verfugbar", "content": "", "creation_timestamp": "2024-10-24T07:11:27.000000Z"}, {"uuid": "9c63678c-f61f-406c-80e4-50afdfe33b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47308", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6ztowsmht2a", "content": "", "creation_timestamp": "2025-12-02T21:02:31.700766Z"}, {"uuid": "a30f2291-5e29-4fdc-81a8-535a8de316c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lvuzndgdw42x", "content": "", "creation_timestamp": "2025-08-08T10:18:53.516585Z"}, {"uuid": "5cd1c4ec-ecde-427b-b8f1-e873db530782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lvuznkhrsfq2", "content": "", "creation_timestamp": "2025-08-08T10:19:18.209139Z"}, {"uuid": "f955d9f2-f29f-4a04-8d49-c30688dec62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvvwaan7k22t", "content": "", "creation_timestamp": "2025-08-08T18:50:34.995906Z"}, {"uuid": "b052f3ce-3bc9-450a-bc6b-05c395df6a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47866", "type": "seen", "source": "https://bsky.app/profile/teenigma.bsky.social/post/3m5ga2yjbrc2c", "content": "", "creation_timestamp": "2025-11-12T08:25:49.472965Z"}, {"uuid": "18d6c69a-90b6-4d5a-9985-58183b40fc72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47856", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115606956710100159", "content": "", "creation_timestamp": "2025-11-24T22:09:27.120631Z"}, {"uuid": "b041055a-7dd6-4b0c-bc1b-5b12063b536f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lz3cho2gs426", "content": "", "creation_timestamp": "2025-09-18T02:28:20.693535Z"}, {"uuid": "81dad3cd-4e59-4e7b-a88b-719ab34debf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4755", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m3so5a4ipk2b", "content": "", "creation_timestamp": "2025-10-22T20:18:55.596277Z"}, {"uuid": "9644e1b6-dfb4-40fc-bed5-544cc1a36a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "4fd41509-2955-46fa-9387-fd999b6b278e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47745", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbhky6biw2y", "content": "", "creation_timestamp": "2025-08-13T09:00:04.482750Z"}, {"uuid": "b876bdba-4d6a-46ee-a438-e656821f07d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6gad4i6zk2u", "content": "", "creation_timestamp": "2025-11-25T01:55:15.689283Z"}, {"uuid": "d74bf8b6-6128-4693-9204-6761bd18ce07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47668", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2e35c375-2ec0-4d40-a225-b13c8cff953a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47663", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ecaba171-3ce4-4bae-898b-14f1272c45d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47667", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d664baa3-e587-4435-800e-b020fe6658c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47718", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "50d82d42-a412-4531-ad26-b20ef2686c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47735", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ee157c72-9e8b-4844-881d-b50b1fba12a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47748", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2e624d51-aabf-4074-8177-479588d9fa37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47696", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "263f51bd-3b39-4c42-9d56-4b6dd7ac9575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47697", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "125b23b0-3dd3-4e15-ba5c-701018e07857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47659", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0eada181-1d9e-4b02-a076-db90040896d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47701", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "bdcdbe84-e371-452d-93ab-1ca399fd62dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47705", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "09fcb534-e182-4356-a430-ca78bbb8ae06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47712", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "3aa699c3-a292-4bef-a54a-8bd3026b7ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47737", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "1fa58bb6-37f4-4685-b8e7-6661c0640537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47742", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "37ca2dc0-65c3-4eef-94a8-4464247ad930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47749", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0c3fb0d9-2c36-42de-ac0b-aa5c1d3da7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47669", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0ffa59ed-9311-41b4-a1f5-e312a5aed01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47679", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "540554ac-63ea-4c0b-95c9-47eb8ffb769f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47692", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "34a92ab2-b8b9-46c6-a5d8-c40f46b6e14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47698", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ee39fc4b-d669-4a32-a358-e8488b4e6371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47710", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d646cdae-33cb-406a-8ecc-2711d1496769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47740", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0d86176e-ef7c-4107-ac61-a110a7141793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47747", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "393acc85-367f-488d-93ff-161f97be4174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47756", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "637820a2-7e60-40ea-bc11-fa2e331ecced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47757", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a2655b5f-d71b-4a07-adcf-5d37ecafa66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47709", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2e0acf76-5808-4461-a527-2724e2fd74ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47143", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "22b5027f-553b-4267-b31c-bd643d9d63e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47685", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a9e503db-ce40-4b6d-a1e8-f1f896cf97cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47699", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "3c9f5a05-e2e0-47a9-82e0-b3b955e554c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47723", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "432a0b11-d09f-41fa-9b54-ce37c4b9de85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47660", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f33ba62b-8a04-4d97-8bd9-0983f763889e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47684", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "8cd153af-938c-4966-924b-8cac8936b5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47706", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "47581dac-1ef6-4676-97b1-00b5c4e0ea1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47713", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "fc717c10-0d8f-4ecd-8b6f-99d72e9414b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47739", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "23d4a53c-f1ba-4d67-8e50-af63e85ea351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47554", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwaoi422", "content": "", "creation_timestamp": "2025-09-30T01:31:25.071764Z"}, {"uuid": "ea64a12e-14fa-4a05-88ba-76dd39de1b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47554", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeux6e4m24", "content": "", "creation_timestamp": "2025-09-30T01:31:29.044195Z"}, {"uuid": "564aa8c3-3e46-4a6f-94ad-82d5b3a293c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeux6e4m24", "content": "", "creation_timestamp": "2025-09-30T01:31:29.147842Z"}, {"uuid": "f3bffa83-a729-4ea1-aed8-926022b5d844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47119", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "dc67e18a-689b-4079-965e-753ef7c97f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47039", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "595e536f-6c8e-4fcf-bbee-927450196e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47092", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "55f76555-af65-42dd-a2a9-9d04f7967c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:27.000000Z"}, {"uuid": "f7c6a525-ffa8-4a97-b8eb-eb1452914a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://gist.github.com/Darkcrai86/10e2a9b182784760a5a157eea1f1001d", "content": "", "creation_timestamp": "2025-09-11T18:20:52.000000Z"}, {"uuid": "9700cca6-fabb-47dd-a1c8-bca2224aac32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47039", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}, {"uuid": "cb0e110a-cc09-49c2-bb0f-74a3008601d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47119", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:06.000000Z"}, {"uuid": "18eca003-d40a-4e71-90a0-c6d6ac3c0be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://gist.github.com/Darkcrai86/43cb7575459ddae3fd84494950558e5a", "content": "", "creation_timestamp": "2025-09-23T15:00:33.000000Z"}, {"uuid": "16069a47-901d-41a6-9cdd-5ef53515b30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47554", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m326cbqdaj24", "content": "", "creation_timestamp": "2025-10-13T02:31:30.751230Z"}, {"uuid": "130d984e-29d9-4360-a1fb-4d8328a28067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m326cbqdaj24", "content": "", "creation_timestamp": "2025-10-13T02:31:30.816047Z"}, {"uuid": "77464a76-c4ee-418f-a6ca-410c2ffc7462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m5y3zaqi622o", "content": "", "creation_timestamp": "2025-11-19T11:00:55.666368Z"}, {"uuid": "ed0d773f-1146-4050-bca4-80f6295544f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/cups_browsed_info_disclosure.rb", "content": "", "creation_timestamp": "2024-10-02T19:05:07.000000Z"}, {"uuid": "26673750-24c6-4a25-9c3d-b07766b9b59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/fortimanager_rce_cve_2024_47575.rb", "content": "", "creation_timestamp": "2024-12-03T02:39:10.000000Z"}, {"uuid": "e4638878-bdb4-4fc9-8174-c694cfa208eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47264", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "7952a661-3ef7-4437-b1d6-09a8b791cd0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47265", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "13da345f-972e-4071-93f4-658c5df232fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47266", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "eb51421a-457f-4030-a5b4-f2746d6cabe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47866", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m5evlvu3ci2i", "content": "", "creation_timestamp": "2025-11-11T19:45:27.997503Z"}, {"uuid": "798032ef-8886-4290-be74-d3c0af3a4d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5hi7cowhz2a", "content": "", "creation_timestamp": "2025-11-12T20:23:45.925625Z"}, {"uuid": "217f0143-edbd-4fa9-8638-5b012e32368a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:26.000000Z"}, {"uuid": "5ea013f3-fc96-4622-91c8-263eef9abfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lyxjkkappc22", "content": "", "creation_timestamp": "2025-09-16T14:24:37.231220Z"}, {"uuid": "2e464011-89eb-4cf3-8598-73381d67ea97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47866", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q4/164", "content": "", "creation_timestamp": "2025-11-11T17:50:55.000000Z"}, {"uuid": "d101afce-505d-43b6-8779-589c5f0ca32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47208", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "bf558d39-1f2c-45b1-9217-982e772770c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb", "content": "", "creation_timestamp": "2024-11-22T14:28:34.000000Z"}, {"uuid": "a8773817-572d-4b9d-9ea4-6344c84bb9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6ti2rf2d", "content": "", "creation_timestamp": "2025-09-19T21:02:36.804807Z"}, {"uuid": "4da577f0-b2ae-4a6c-bf1a-988b61570831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47873", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "f45a5bd1-524f-4d6f-86b7-532fe6a93d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb", "content": "", "creation_timestamp": "2024-11-22T14:28:34.000000Z"}, {"uuid": "02bfcea4-52d5-4b4c-83a7-dd53acf597ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47827", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "83df4b48-b961-4a3f-866e-30940a5ddd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}, {"uuid": "ba89ce8b-113b-4e37-8d8a-84112d53f89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxz62klhk72v", "content": "", "creation_timestamp": "2025-09-04T12:38:55.272992Z"}, {"uuid": "5f1675fe-8538-4f14-9f20-ca03de65e1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47875", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly226ri5cl2t", "content": "", "creation_timestamp": "2025-09-04T21:02:28.442448Z"}, {"uuid": "6b215485-3750-42f3-b7b6-ab7f4b529ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb", "content": "", "creation_timestamp": "2024-11-22T14:28:34.000000Z"}, {"uuid": "591a48dd-cff9-4d0c-84c5-3bdee68b07ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb", "content": "", "creation_timestamp": "2024-11-22T14:28:34.000000Z"}, {"uuid": "b1dba3c6-8fc1-4100-b781-eb5d93269c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-47374.yaml", "content": "", "creation_timestamp": "2025-12-08T10:22:20.000000Z"}, {"uuid": "6094aba1-d33c-42a8-bd21-091e4a9e9837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m7lgxeh6xg23", "content": "", "creation_timestamp": "2025-12-09T21:02:32.793062Z"}, {"uuid": "230a71be-a894-4f5a-92a7-bf530f14df1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47850", "type": "seen", "source": "https://gist.github.com/svepodd/d1ac09f633c19ca7c9c6f6de12caf96b", "content": "", "creation_timestamp": "2025-12-16T07:58:46.000000Z"}, {"uuid": "b164b206-7f44-4b0c-bb1a-472ca90f0524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47293", "type": "seen", "source": "https://gist.github.com/takitakirumbawoo-netizen/ef7c36cab2564f42de111008f87ff7db", "content": "", "creation_timestamp": "2025-12-31T02:24:12.000000Z"}, {"uuid": "146e834f-6cdc-4460-ad0d-12c51fcae526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47691", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mbynkk7rzk2z", "content": "", "creation_timestamp": "2026-01-09T13:55:33.892935Z"}, {"uuid": "c597d88f-ac62-4bc2-84ad-c46a64db0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://gist.github.com/developerfred/31dd05c34ea92dfff7a845a6d56bd25d", "content": "", "creation_timestamp": "2026-01-11T21:52:01.000000Z"}, {"uuid": "b02236be-1b8a-4c1a-b5cb-78446fdc7765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://gist.github.com/developerfred/1fd4258aa5c8d5c56cfadf9115b844a4", "content": "", "creation_timestamp": "2026-01-11T21:54:25.000000Z"}, {"uuid": "6ce7963e-0a01-490f-959e-93c798bab791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47262", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcaa2oeoq72z", "content": "", "creation_timestamp": "2026-01-12T14:15:20.515187Z"}, {"uuid": "8a41011c-fd79-44e4-b1f4-df0867a8e9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-12T22:00:10.033153Z"}, {"uuid": "5a725b46-fc6b-44ce-8205-8aa50d41b05e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-12T22:00:10.004890Z"}, {"uuid": "e8d41ead-4b93-4497-bf7f-87a4f86ee975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47554", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3j6ayro2o", "content": "", "creation_timestamp": "2026-01-21T16:25:12.771214Z"}, {"uuid": "1711b18f-4e1d-4d79-a3b0-20fdf4e1190f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-12T22:00:09.924749Z"}, {"uuid": "7d91cab2-7ae5-495f-925c-e0772465e337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-12T22:00:09.893390Z"}, {"uuid": "7403a437-3153-4868-a8ef-2abd98c40f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47193", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdl6omhgqv2j", "content": "", "creation_timestamp": "2026-01-29T16:15:11.115863Z"}, {"uuid": "57bd63fa-a46a-4c33-8b3f-649fd74ff66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/securixy_kz/1044", "content": "", "creation_timestamp": "2026-07-12T22:00:09.628450Z"}, {"uuid": "2c290c29-bd88-4ede-8b54-e3e737c94a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/securixy_kz/1055", "content": "", "creation_timestamp": "2026-07-12T22:00:09.504718Z"}, {"uuid": "4e8dde7d-0401-4826-abf3-82a0c81d2301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4741", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdilysiwez2q", "content": "", "creation_timestamp": "2026-01-28T15:35:31.943270Z"}, {"uuid": "d241385e-73a1-4d8b-bf9b-3ca7560f77c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me4niaiey32j", "content": "", "creation_timestamp": "2026-02-05T14:55:18.506324Z"}, {"uuid": "429c97d8-da69-40db-b547-4e8b6c8ea877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/346930313ada772d78a7279f1ab1bd08", "content": "", "creation_timestamp": "2026-04-19T12:47:41.000000Z"}, {"uuid": "8dcae339-5872-415f-8138-305000c4d741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/b9432d60d00ca372cc2cfc88f4bff31b", "content": "", "creation_timestamp": "2026-04-19T14:35:21.000000Z"}, {"uuid": "c25ea8a0-6f12-466b-8859-8efbc226ad81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/GithubRedTeam/88926", "content": "", "creation_timestamp": "2026-07-13T22:00:42.723526Z"}, {"uuid": "8c9e263a-e5dc-434c-82c8-f5169a4c104c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/bbac7fc0cdd8d4b9e30419a14d192f0e", "content": "", "creation_timestamp": "2026-04-19T16:07:53.000000Z"}, {"uuid": "37ed8ce5-4e1d-462f-8bad-21e8a789d281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47866", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f1fd0daf-7d3b-40c0-b5c3-eaadcbd88912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47809", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f3e80a1c-2d37-43cd-b99f-e929d559076b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47683", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e3cb6cce-bf74-4d63-9ccc-1c9a90de2ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47738", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "6d684d9a-f02f-4f37-808c-7c51f640c42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "79f91101-f7ee-4597-9065-eafb09ffc748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47141", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "01b71762-4f2f-48b7-9097-43f660140486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4741", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "89bba50d-00d6-4d25-a54c-77f35c040e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47658", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "110a0708-b5b3-4519-9093-8160ab6c0cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47661", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "56eefd77-2fb0-47f1-90fb-78297c683503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47662", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f63ea773-6637-445e-a414-c5cdb02b4872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47745", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "29566d5f-1aa6-4b19-9801-86d615ec4664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47664", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "2445cc1c-cc30-409a-a940-dfb8f71c98c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47666", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "008c90cb-c6f6-407d-a677-4e34f3859e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47678", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "88b4ce26-9de0-4781-a3c9-113b18369e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47689", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4ff45177-86d2-4134-8927-f9aecb4cd6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47703", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "777ad639-b4f7-48ac-8e49-d0e6374f6f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47704", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "940ac310-0517-4d67-acde-5b4725a40f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47728", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "fd032f58-4a45-4353-a2ce-8d43ac51a71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47736", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d237f75f-2e0c-4d44-afd2-bb524c0e2f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47794", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "285a158b-5828-4b1a-8947-e6194c2152ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/565c352e-b9bd-4547-9741-be031a761c39", "content": "", "creation_timestamp": "2026-02-02T12:26:36.723711Z"}, {"uuid": "b96b8f23-0632-4451-8738-cf1cf0634df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ad025cf1-0a97-4d4c-8f90-53a16064d812", "content": "", "creation_timestamp": "2026-02-02T12:26:25.541692Z"}, {"uuid": "429d46d3-855f-4815-915c-232537049adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/56e4f7f7ddeea4834f49ef60dafd3eb0", "content": "", "creation_timestamp": "2026-04-14T17:02:31.000000Z"}, {"uuid": "7644bd17-ac86-4d2b-a521-b86e8a3c65d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/f1eecd7ed798506a268661c2be536136", "content": "", "creation_timestamp": "2026-04-14T18:32:12.000000Z"}, {"uuid": "9a57dd23-1544-40bb-90b1-12e06e0e9e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "b8898f63-11a7-4796-be4b-c0f9cb0ee93c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47875", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-03", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "6c8b31d4-12d5-45c7-91c4-dedfac12b895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47662", "type": "seen", "source": "https://gist.github.com/stephdl/b118f1f8ba1c82cec1720ff4b164baaa", "content": "", "creation_timestamp": "2026-02-23T16:07:24.000000Z"}, {"uuid": "7c72d66f-6efb-4aed-a8fd-2162ac28aace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47764", "type": "seen", "source": "https://gist.github.com/jrvssingh-cpu/5ca4be6b05f749c6962d84fae197cdc9", "content": "", "creation_timestamp": "2026-02-25T10:55:46.000000Z"}, {"uuid": "4356d39a-f943-4f25-860c-9711795faf72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47183", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfrjrrcv3m2w", "content": "", "creation_timestamp": "2026-02-26T15:40:10.069587Z"}, {"uuid": "e7b7e62d-054a-48f7-a7fa-c95f8cbe861a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47886", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3tjoz2xl2n", "content": "", "creation_timestamp": "2026-03-02T18:01:13.278893Z"}, {"uuid": "e4840f64-f43b-4567-9077-5ca1a45e0902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/9c1b6c8cb546658ba97b0f661fddf7f9", "content": "", "creation_timestamp": "2026-04-18T17:28:14.000000Z"}, {"uuid": "26411234-64de-460b-bb01-66386776354b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/308dc15c19dd64e8379269614a768afb", "content": "", "creation_timestamp": "2026-04-18T17:45:51.000000Z"}, {"uuid": "ee9af6e7-1697-4d3d-b200-44eed610d6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://gist.github.com/stanibaj/0c272d06ca7cc073f1d673642e2e3e93", "content": "", "creation_timestamp": "2026-04-18T18:19:31.000000Z"}, {"uuid": "957dda8e-4e9f-42d4-9779-34d9b4054fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47778", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mhr63cyqys2q", "content": "", "creation_timestamp": "2026-03-23T23:01:08.531982Z"}, {"uuid": "f2148c90-c42a-494b-a2df-3d920b9b4c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4762", "type": "seen", "source": "https://bsky.app/profile/neodyme.io/post/3mhsejlbgdk2p", "content": "", "creation_timestamp": "2026-03-24T10:29:09.847154Z"}, {"uuid": "e83bbee7-2fbc-4390-8d9a-adf4c9953e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47727", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0290/", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "a3bb8f44-f82f-4e3f-83af-a43eabfea7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47611", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "dc4e2569-d898-46bc-9933-2a4e60b0e665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1288", "content": "", "creation_timestamp": "2024-05-14T04:00:00.000000Z"}, {"uuid": "5c5d880e-1daa-4ded-940d-e01986abf253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_25/2024", "content": "", "creation_timestamp": "2024-10-23T16:28:14.000000Z"}, {"uuid": "d5cee55f-ced0-4aff-959e-70573ec0a38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1405", "content": "", "creation_timestamp": "2024-10-24T04:00:00.000000Z"}, {"uuid": "b35e9ed8-7d40-4ee9-ac94-38dd4d638510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1291", "content": "", "creation_timestamp": "2024-05-16T04:00:00.000000Z"}, {"uuid": "aa3424c2-7088-437b-a6f5-a7e146742e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1763", "content": "", "creation_timestamp": "2026-02-13T04:00:00.000000Z"}, {"uuid": "100b3b46-b532-451f-a952-e2fcf757b1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ad025cf1-0a97-4d4c-8f90-53a16064d812", "content": "", "creation_timestamp": "2026-02-02T12:26:25.541692Z"}, {"uuid": "35e92a9c-5491-4730-a9c5-5a11ad49dc97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://vulnerability.circl.lu/comment/55eb3309-c5c3-4f89-bdbd-e3ffa97ab779", "content": "", "creation_timestamp": "2024-10-24T08:04:32.724240Z"}, {"uuid": "03d3013b-c2e2-46b2-915e-783abacc2def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://vulnerability.circl.lu/comment/9baa9351-dc32-4f7d-b01d-eeb3a51e50be", "content": "", "creation_timestamp": "2024-10-25T07:11:40.672278Z"}, {"uuid": "df043938-729f-4829-a970-fb96f260f779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://vulnerability.circl.lu/comment/e147bc02-1352-4685-8d0a-692e2fe98072", "content": "", "creation_timestamp": "2024-10-25T07:18:54.820316Z"}, {"uuid": "d8c8b5dd-de2f-4554-9b87-99109e45b476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://vulnerability.circl.lu/comment/fc8919b9-2200-4953-9752-83a8d586e76e", "content": "", "creation_timestamp": "2024-11-05T13:43:12.294048Z"}, {"uuid": "fcb68d28-6bc4-4411-b25f-58cfb20c8010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://vulnerability.circl.lu/comment/9579afd1-e7a6-4754-8574-5acaed28e11d", "content": "", "creation_timestamp": "2024-11-14T08:13:33.806989Z"}, {"uuid": "ccdb618d-6aba-404a-a7c7-d2acdb4453b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "seen", "source": "https://vulnerability.circl.lu/comment/a5ae6fa3-504b-4d03-a153-b9f12f911f71", "content": "", "creation_timestamp": "2025-06-04T05:03:44.190775Z"}, {"uuid": "073f5147-28b1-484b-8aa6-38df085ac548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47693", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "dd3a70ef-1de0-4193-989d-f96a693b6ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47690", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "330b671e-05a4-468b-986b-b37706ff9b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47735", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8d804658-54c6-430f-9d0e-bdf0a1c60bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47678", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b29814d7-3af8-49f1-ab9a-c7fe3983afe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47809", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d0dccf8e-919d-4df7-97e7-a2c56d1ecae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47143", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0f79d71c-4e86-4cfc-873c-e7ba08c0bfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47141", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e8869a41-a3ea-4ee7-b645-04dc4176dfac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47704", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a439e9fb-a221-4447-b19f-86a014a7121a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47726", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "09ffb03e-a6e1-49af-971e-034359051498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47665", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "70d3b0c0-f303-47cf-bcad-54791c645e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47660", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "2246f4a4-786d-4dce-8c20-1d9d3ffcc5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47683", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9da539fd-da14-415a-aad4-7da020fc6587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47658", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1e4f28a8-7201-4a0e-9a5d-385b0700ead7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47661", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6faf88ee-1b2e-4b2b-809b-addf9b656b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47691", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0b095f3d-f129-43cb-9096-2230d22355e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47745", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "edd4ac6a-8fd0-4698-bb30-fe7372359fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47728", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "740c34e0-2cb2-49b1-aacb-d27cb4e32b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47673", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b8ee4e71-04ff-40b2-a370-f86656c7bd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47739", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "90bc2d53-c5f5-40ff-940a-65514e067c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47666", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0444069b-f099-4706-bbac-9291ed1c31f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/3eaf0fde-67ad-4326-a84a-2e4ff201a8e9", "content": "", "creation_timestamp": "2024-09-27T04:15:35.899736Z"}, {"uuid": "02b91129-d503-4afa-a3f1-4eab122db5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/3eaf0fde-67ad-4326-a84a-2e4ff201a8e9", "content": "", "creation_timestamp": "2024-09-27T04:15:35.899736Z"}, {"uuid": "bef94816-c257-4e82-ad76-f654e645166f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/3eaf0fde-67ad-4326-a84a-2e4ff201a8e9", "content": "", "creation_timestamp": "2024-09-27T04:15:35.899736Z"}, {"uuid": "e762ba37-9dbd-41f7-ab2a-3b8422ffb9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/3eaf0fde-67ad-4326-a84a-2e4ff201a8e9", "content": "", "creation_timestamp": "2024-09-27T04:15:35.899736Z"}, {"uuid": "3d520ad5-d47e-44b3-a312-a84e15d867c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/19c15eba-7fb7-4f1e-8fdd-f5871d05e797", "content": "", "creation_timestamp": "2024-09-30T07:31:43.981846Z"}, {"uuid": "9e95fed4-2459-4109-a0c0-a6a4f4bda119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47850", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/19c15eba-7fb7-4f1e-8fdd-f5871d05e797", "content": "", "creation_timestamp": "2024-09-30T07:31:43.981846Z"}, {"uuid": "1b33b4ea-5c89-4398-b57b-f100a6d88ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/19c15eba-7fb7-4f1e-8fdd-f5871d05e797", "content": "", "creation_timestamp": "2024-09-30T07:31:43.981846Z"}, {"uuid": "0d800768-da5f-4b52-bbba-ffc8b49a38a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/19c15eba-7fb7-4f1e-8fdd-f5871d05e797", "content": "", "creation_timestamp": "2024-09-30T07:31:43.981846Z"}, {"uuid": "cccfefe0-e70a-443d-9a27-a66e82b1d2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/19c15eba-7fb7-4f1e-8fdd-f5871d05e797", "content": "", "creation_timestamp": "2024-09-30T07:31:43.981846Z"}, {"uuid": "bae7d759-4cf4-4427-bb0e-baa637f780f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47462", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/07fca93b-c28d-44e4-8497-18f4bbbd16f9", "content": "", "creation_timestamp": "2024-11-06T16:21:22.653622Z"}, {"uuid": "c180bb8d-fd95-4ba0-986a-746ab226023a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47460", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/07fca93b-c28d-44e4-8497-18f4bbbd16f9", "content": "", "creation_timestamp": "2024-11-06T16:21:22.653622Z"}, {"uuid": "24133922-94bf-478b-a9ae-85d4f24358a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47464", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/07fca93b-c28d-44e4-8497-18f4bbbd16f9", "content": "", "creation_timestamp": "2024-11-06T16:21:22.653622Z"}, {"uuid": "aa6f2ec2-bfc1-43a8-8eba-fcd3eadffe1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47461", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/07fca93b-c28d-44e4-8497-18f4bbbd16f9", "content": "", "creation_timestamp": "2024-11-06T16:21:22.653622Z"}, {"uuid": "ba1969a5-1f5e-40f9-9395-6daceec04ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47463", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/07fca93b-c28d-44e4-8497-18f4bbbd16f9", "content": "", "creation_timestamp": "2024-11-06T16:21:22.653622Z"}, {"uuid": "d1015235-9301-43b4-a42f-bb9866b4b147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47892", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c", "content": "", "creation_timestamp": "2025-02-03T19:33:09.293698Z"}, {"uuid": "c3ed0f5c-4c62-4534-8680-f9450ae71ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823", "content": "", "creation_timestamp": "2025-03-11T20:37:58.600981Z"}, {"uuid": "e22c2bb3-0289-4a11-8dcc-2fa92b6447de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47554", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "7b7ebc4e-bed7-46cd-9879-157b37a51f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47252", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "9a85d5f9-d4e5-46df-b096-7141bfef9461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/565c352e-b9bd-4547-9741-be031a761c39", "content": "", "creation_timestamp": "2026-02-02T12:26:36.723711Z"}, {"uuid": "49b8ab1c-8673-452c-8baa-a47453e85f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47359", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihfwgvtck2u", "content": "", "creation_timestamp": "2026-04-01T19:20:09.167448Z"}, {"uuid": "76ab7451-57e4-460c-b7d9-5e85570d6f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47321", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihh27yhrv2d", "content": "", "creation_timestamp": "2026-04-01T19:40:09.879423Z"}, {"uuid": "604cbbcf-c41c-4691-8b81-f7dcdce41689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47302", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihljfy6rw23", "content": "", "creation_timestamp": "2026-04-01T21:00:13.960966Z"}, {"uuid": "11805942-cf8d-4b2e-951c-bb626eac8fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47311", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihmmzh2aj2v", "content": "", "creation_timestamp": "2026-04-01T21:20:08.894850Z"}, {"uuid": "15ab66d8-8a0a-4d61-986c-fb97e37a2a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47634", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mii4bujvia2c", "content": "", "creation_timestamp": "2026-04-02T02:00:14.542476Z"}, {"uuid": "e4afd89a-bed1-4c94-9095-6ec51baa78e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47636", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miiksryddb2v", "content": "", "creation_timestamp": "2026-04-02T06:20:15.653421Z"}, {"uuid": "94ac0732-e050-4ac1-a739-6b4221b69617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47361", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mij4otem3b2w", "content": "", "creation_timestamp": "2026-04-02T11:40:09.173058Z"}, {"uuid": "1a7c3e2a-442a-4cf1-b831-17a92b31cca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47362", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mij5sqpaae2c", "content": "", "creation_timestamp": "2026-04-02T12:00:14.310221Z"}, {"uuid": "b750a32c-f3f1-4673-aa3b-293cc7ed8e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47314", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mij6wdoaqk2r", "content": "", "creation_timestamp": "2026-04-02T12:20:09.922931Z"}, {"uuid": "98950df8-d659-4c2f-895e-e4c249586265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47325", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mil5ja3nqv2c", "content": "", "creation_timestamp": "2026-04-03T07:00:15.382319Z"}, {"uuid": "e0ff4cc9-3419-4500-b834-f6fd685a6c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mir4r4g6gm2f", "content": "", "creation_timestamp": "2026-04-05T16:02:43.947780Z"}, {"uuid": "32f58233-e3e0-4708-8fe1-27c6006f957b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47637", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3misvmlenyp2f", "content": "", "creation_timestamp": "2026-04-06T09:00:15.029348Z"}, {"uuid": "49135e56-5ca2-497d-99ca-5a8c1155a35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47606", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12556", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47606\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10.\n\ud83d\udccf Published: 2024-12-11T19:12:40.186Z\n\ud83d\udccf Modified: 2025-04-19T00:11:05.863Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/\n2. https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch\n3. https://gstreamer.freedesktop.org/security/sa-2024-0014.html", "creation_timestamp": "2025-04-19T00:59:45.000000Z"}, {"uuid": "229c1f31-7590-4a85-8093-9f695b7f153c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47554", "type": "published-proof-of-concept", "source": "Telegram/kGaS8pU6npBl2aNcoQ81lKVUDEIfYGVLNjbwFXeAAPh3QQk", "content": "", "creation_timestamp": "2025-12-24T03:00:07.000000Z"}, {"uuid": "bb63288f-c988-4742-98ac-4b2bea5c9ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/lt5SkCQY6NzFttgTqheKTtx7TlAn90m-tSSHeRo10pnEExI", "content": "", "creation_timestamp": "2024-10-04T03:19:46.000000Z"}, {"uuid": "f3e97f49-4f4e-406d-9c6f-1e4da7f2ee41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/81760", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #Remote\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-47176\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a deancooreman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-26 20:56:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAutomated VirtualBox lab environment to exploit CVE-2024-47176 \u2014 an unauthenticated RCE vulnerability in CUPS \u2014 using a custom Python exploit and Kali Linux.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-26T21:00:39.000000Z"}, {"uuid": "fa07bfb8-5fc2-48d7-a8ea-2e11d0a35f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47073", "type": "seen", "source": "Telegram/lGGINmA58hMfEiLj7mFjBsIisf1G-zr65QomxYwB9aZ268Hl", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "1b79b6e9-9f9d-4e7e-853c-9f4c72ba63a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47262", "type": "seen", "source": "https://t.me/cvedetector/19468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47262 - Axis VAPIX API Param.cgi Race Condition Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47262 \nPublished : March 4, 2025, 6:15 a.m. | 23\u00a0minutes ago \nDescription : Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not affected.   \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T08:18:27.000000Z"}, {"uuid": "ed5b8aae-dd3a-4990-9eb2-408ec36ced34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47260", "type": "seen", "source": "https://t.me/cvedetector/19467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47260 - Axis VAPIX API Mediaclip CGI Memory Exhaustion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47260 \nPublished : March 4, 2025, 6:15 a.m. | 23\u00a0minutes ago \nDescription : 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading more audio clips then designed resulting in the Axis device running out of memory.\u00a0  \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T08:18:26.000000Z"}, {"uuid": "eb7d0835-a80d-4921-a6fb-63df4de98c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47259", "type": "seen", "source": "https://t.me/cvedetector/19466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47259 - Axis VAPIX API Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47259 \nPublished : March 4, 2025, 6:15 a.m. | 23\u00a0minutes ago \nDescription : Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files to the Axis device with the purpose to exhaust system resources.   \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T08:18:25.000000Z"}, {"uuid": "7fe57c86-c76c-4267-aedc-5b5c2fe0a99c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47666", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260408", "content": "", "creation_timestamp": "2026-04-07T18:00:00.000000Z"}, {"uuid": "536e6c7e-07f2-4ced-9a59-b2ce364b9063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47666", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "09578b9d-f127-4854-817f-113b48f35c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47066", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/436", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/l8BL/CVE-2024-47066\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-25T05:16:47.000000Z"}, {"uuid": "762af5b8-34ea-45de-af90-efd26601bc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4785", "type": "seen", "source": "Telegram/4UX6kyzbOTCwTMTvMlRcy1AiAF2V_abjJPs9jMTImj0gbjPB", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "3c668142-2641-4453-a40a-ad7439f46b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "Telegram/c93m7xCSwb6iKPJnQ7Z4oxzLyO9CSqXEgThymG0zgD8j3ZE", "content": "", "creation_timestamp": "2024-05-14T17:09:31.000000Z"}, {"uuid": "f576be34-f4a6-40f5-9965-ba779392477a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/47515", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC of CVE-2025-47533 Clobber RCE\nURL\uff1ahttps://github.com/zs1n/CVE-2024-47533\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-13T01:27:05.000000Z"}, {"uuid": "dba20322-1110-4a28-a5b3-19de09469d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47109", "type": "seen", "source": "https://t.me/cvedetector/19966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47109 - IBM Sterling File Gateway Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47109 \nPublished : March 10, 2025, 4:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:31.000000Z"}, {"uuid": "0e289b8c-d8ee-4dd8-876b-0975fd44415a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8997", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47062 PoC\nURL\uff1ahttps://github.com/saisathvik1/CVE-2024-47062\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-11T18:20:33.000000Z"}, {"uuid": "29d4bb5a-34fd-4dde-9b88-4f70fee7aca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47875", "type": "published-proof-of-concept", "source": "Telegram/WY-9Xxj10-yIxNz5etQKEpBxWDUt-r9BmVVxJ6woOOCN4dI", "content": "", "creation_timestamp": "2025-09-02T19:00:08.000000Z"}, {"uuid": "68cc2ca7-d783-4b7c-a267-d8581c6b5262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4716", "type": "seen", "source": "Telegram/nf0C1nz4sRxuEV75Jt8yUSMmQEC4FKfOFViBwKsf9PzlFXWf", "content": "", "creation_timestamp": "2025-02-19T22:21:30.000000Z"}, {"uuid": "c24017cd-8744-4b55-a0f8-6c57a7db371d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4715", "type": "seen", "source": "Telegram/lPixziKDW1iEaoX0rFqEq9BKsINl4JAfXcHPt9N5hMKG1ZDy", "content": "", "creation_timestamp": "2025-02-19T22:21:30.000000Z"}, {"uuid": "a095ff97-2236-43cf-b9d1-bfe301b6c2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4714", "type": "seen", "source": "Telegram/hegy9-Rk1VRFPMT5SJdX7dSJR1aDnPWoXDcufUZWMz5jemqg", "content": "", "creation_timestamp": "2025-02-19T22:21:29.000000Z"}, {"uuid": "ba2e60c3-63bb-428f-bdf3-63674ff47122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4713", "type": "seen", "source": "Telegram/6ciUY0LlbOrlKSsV2WfjBdwHeR3tQas5W6kRC4-R_u6OnlO-", "content": "", "creation_timestamp": "2025-02-19T22:21:29.000000Z"}, {"uuid": "933940d2-d7b8-4f6d-90a5-4db6d4c7a308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/cKure/13803", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 Mandiant tracking wild exploitation of CVE-2024-47575 (FortiManager) wild exploitation due to missing authentication on 'fgfmd' daemon ( dubbed FortiJump).\n\nhttps://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575", "creation_timestamp": "2024-10-28T00:05:25.000000Z"}, {"uuid": "d87c4361-5131-4eb9-a535-8312eef7b109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/BleepingComputer/20901", "content": "\u200aMandiant says new Fortinet flaw has been exploited since June\n\nA new Fortinet FortiManager flaw dubbed \"FortiJump\" and tracked as CVE-2024-47575 has been exploited since June 2024 in zero-day attacks on over 50 servers, according to a new report by Mandiant. [...]\n\nhttps://www.bleepingcomputer.com/news/security/mandiant-says-new-fortinet-fortimanager-flaw-has-been-exploited-since-june/", "creation_timestamp": "2024-10-25T16:57:45.000000Z"}, {"uuid": "2accbb1d-a290-4596-9b71-facdfb882674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4799", "type": "seen", "source": "Telegram/L5e6hQrmdUNTIVQm6XqNblK0GKK9YKp5y6bqvBR6kuE-X4WL", "content": "", "creation_timestamp": "2025-02-14T10:03:11.000000Z"}, {"uuid": "c7e6197b-e791-44ba-a8c0-9b54f6a662fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/BleepingComputer/20826", "content": "\u200aNew scanner finds Linux, UNIX servers exposed to CUPS RCE attacks\n\nAn automated scanner has been released to help security professionals scan environments for devices vulnerable to the Common Unix Printing System (CUPS) RCE flaw tracked as CVE-2024-47176. [...]\n\nhttps://www.bleepingcomputer.com/news/software/new-scanner-finds-linux-unix-servers-exposed-to-cups-rce-attacks/", "creation_timestamp": "2024-10-09T22:19:35.000000Z"}, {"uuid": "4063a53d-10ad-41d9-a756-f37005ef7973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47875", "type": "published-proof-of-concept", "source": "Telegram/ZajECAXxVemPspodPVVRmSZ4HkKXIVfRoYTrMcXgDznCg3c", "content": "", "creation_timestamp": "2025-09-02T21:00:05.000000Z"}, {"uuid": "b1c992a1-24f7-4b5b-953f-1d408bffe8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47896", "type": "seen", "source": "https://t.me/cvedetector/18731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47896 - VMware ESXi GPU Firmware Out-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2024-47896 \nPublished : Feb. 22, 2025, 3:15 p.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T19:10:22.000000Z"}, {"uuid": "aa49307d-56eb-49a2-9df9-58271df4b611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "published-proof-of-concept", "source": "Telegram/qP4ATtXqVjZ2NQNBpFxFUpCqNtRkP8nG37QRNXEozXO3oQg", "content": "", "creation_timestamp": "2025-08-13T11:00:09.000000Z"}, {"uuid": "e771bbf8-868c-400c-a580-cbf1e8b91a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "published-proof-of-concept", "source": "Telegram/qrqNXy-LFnDqpCptstXdyMweXak-lAcnoZbxdT5gTxXk4Dg", "content": "", "creation_timestamp": "2025-08-13T09:00:04.000000Z"}, {"uuid": "63643ba6-ba70-44bf-a5ee-f32079b90f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "published-proof-of-concept", "source": "Telegram/8q0G2XoGgrXP8O-oMiUuoKtzfH3vGd_RQiplze-y2V_UL3MF", "content": "", "creation_timestamp": "2025-07-13T02:12:02.000000Z"}, {"uuid": "271ab7f8-3cff-44fe-9781-5cbf9561bdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8611", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC scanner for CVE-2024-47176\nURL\uff1ahttps://github.com/GO0dspeed/spill\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-27T01:33:24.000000Z"}, {"uuid": "872b64e5-c1c2-4c0b-8fb7-2bc1dcdc5f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "Telegram/Si59L7B2mOOUAr8_144HFqGZOWLjbuFEGSaFRpGyejiLY0E", "content": "", "creation_timestamp": "2025-07-20T03:00:05.000000Z"}, {"uuid": "e6862e99-f7d3-4bfa-9235-d7fd2e73032a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13696", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 The CUPS POC analysis\nCVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177.\n\nhttps://www.elastic.co/security-labs/cups-overflow", "creation_timestamp": "2024-09-29T07:13:53.000000Z"}, {"uuid": "baa5944c-8922-401a-a1d6-8b09e65ea1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13696", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 The CUPS POC analysis\nCVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177.\n\nhttps://www.elastic.co/security-labs/cups-overflow", "creation_timestamp": "2024-09-29T07:13:53.000000Z"}, {"uuid": "913e5bfd-81b3-4be4-8ad4-93156993901a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13696", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 The CUPS POC analysis\nCVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177.\n\nhttps://www.elastic.co/security-labs/cups-overflow", "creation_timestamp": "2024-09-29T07:13:53.000000Z"}, {"uuid": "652263e5-ba0f-4e97-886a-c0bd25d9efe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13696", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 The CUPS POC analysis\nCVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177.\n\nhttps://www.elastic.co/security-labs/cups-overflow", "creation_timestamp": "2024-09-29T07:13:53.000000Z"}, {"uuid": "46c637f6-0427-4c24-ac80-30c8c2495932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8645", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUltrafast CUPS-browsed scanner (CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177)\nURL\uff1ahttps://github.com/lkarlslund/jugular\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-30T07:22:12.000000Z"}, {"uuid": "21a0a565-2f7a-4a53-a4de-13808f73e562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8667", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUnauthenticated RCE on cups-browsed (exploit)\nURL\uff1ahttps://github.com/l0n3m4n/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-03T15:58:50.000000Z"}, {"uuid": "674fc5e2-6024-4700-ac34-46d407e389f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8622", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aScanner for the CUPS vulnerability CVE-2024-47176\nURL\uff1ahttps://github.com/tonyarris/CVE-2024-47176-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-27T20:12:52.000000Z"}, {"uuid": "bb63b6fd-ba80-4f81-b178-ffdd883376bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8619", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCUPS Browsd Check_CVE-2024-47176\nURL\uff1ahttps://github.com/workabhiwin09/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-27T18:27:15.000000Z"}, {"uuid": "317fe724-5838-4896-8636-826aa232c13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8614", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC honeypot for detecting exploit attempts against CVE-2024-47177\nURL\uff1ahttps://github.com/referefref/cupspot-2024-47177\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-27T05:20:47.000000Z"}, {"uuid": "24efc2fb-8965-4bd6-9177-e0c64614290d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8639", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aLinux ve Unix sistemlerinizin CVE-2024-47076 a\u00e7\u0131\u011f\u0131ndan etkilenip etkilenmedi\u011fini bu script ile \u00f6\u011frenebilirsiniz.\nURL\uff1ahttps://github.com/mutkus/CVE-2024-47076\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-29T15:19:58.000000Z"}, {"uuid": "8a210de9-2a4d-460f-92ee-7d8a0becf488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8629", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aVulnerability Scanner for CUPS: CVE-2024-47176\nURL\uff1ahttps://github.com/aytackalinci/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-28T19:05:33.000000Z"}, {"uuid": "20f74e81-6a5e-470e-931a-55886b206217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8640", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA simple CVE-2024-47176 (cups_browsed) check tool written in go. \nURL\uff1ahttps://github.com/nma-io/CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-29T17:55:20.000000Z"}, {"uuid": "d647b01b-dfc1-4f57-b662-06a9e221e09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8645", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUltrafast CUPS-browsed scanner (CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177)\nURL\uff1ahttps://github.com/lkarlslund/jugular\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-30T07:22:12.000000Z"}, {"uuid": "27b16822-0003-4d4e-a7e6-be28158cbdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8645", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUltrafast CUPS-browsed scanner (CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177)\nURL\uff1ahttps://github.com/lkarlslund/jugular\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-30T07:22:12.000000Z"}, {"uuid": "b81626a1-e538-42a1-a7bd-496bcdbedbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8645", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUltrafast CUPS-browsed scanner (CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177)\nURL\uff1ahttps://github.com/lkarlslund/jugular\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-30T07:22:12.000000Z"}, {"uuid": "bd28f07b-d339-46d2-9b05-d0ced02f41b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7308", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aHigh CVE-2024-4761 Exploit \nURL\uff1ahttps://github.com/michredteam/CVE-2024-4761\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-14T17:48:08.000000Z"}, {"uuid": "9f5a42e5-3f50-4cf3-8446-ef7c17be9f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8768", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running the Common Unix Printing System (CUPS). \nURL\uff1ahttps://github.com/gianlu335/CUPS-CVE-2024-47176\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-17T18:24:59.000000Z"}, {"uuid": "cae3197d-927b-4eae-9b1d-2302460e2b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9084", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47533: Improper Authentication (CWE-287)\nURL\uff1ahttps://github.com/zetraxz/CVE-2024-47533\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-19T09:36:54.000000Z"}, {"uuid": "34611cb2-923e-4221-b8fc-b3f8c918b62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8868", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: Critical Remote Code Execution (RCE) Vulnerability in VMware Horizon\nURL\uff1ahttps://github.com/groshi/CVE-2024-47575-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-28T17:38:16.000000Z"}, {"uuid": "236aa8ce-a782-4000-9c53-b558efb12776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47823", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/15668", "content": "\u200aExploiting Livewire: CVE-2024-47823 Puts Laravel Apps at Risk\n\nhttps://securityonline.info/exploiting-livewire-cve-2024-47823-puts-laravel-apps-at-risk/", "creation_timestamp": "2024-10-10T09:20:30.000000Z"}, {"uuid": "e0bf5e7e-4ec6-497d-9cb8-ea7fbe3f5fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://t.me/cvedetector/15264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47566 - Fortinet FortiRecorder Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47566 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:52.000000Z"}, {"uuid": "bdecaa17-05e3-4e14-bf97-a9bf63b58d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9124", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575\u662fFortinet\u7684FortiManager\u548cFortiManager Cloud\u4ea7\u54c1\u4e2d\u7684\u4e00\u4e2a\u4e25\u91cd\u6f0f\u6d1e\uff0c\u6e90\u4e8efgfmsd\u5b88\u62a4\u8fdb\u7a0b\u7f3a\u4e4f\u5bf9\u5173\u952e\u529f\u80fd\u7684\u8eab\u4efd\u9a8c\u8bc1\u3002\nURL\uff1ahttps://github.com/XiaomingX/cve-2024-47575-poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-22T03:14:52.000000Z"}, {"uuid": "b72f740f-6a6c-4b8f-962a-512bfc4d1191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8882", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575 POC\nURL\uff1ahttps://github.com/zgimszhd61/CVE-2024-47575-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-29T15:51:10.000000Z"}, {"uuid": "40ab8f65-825f-473c-a0ec-c2ddf9195b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8916", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/Fruktolzzz/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-01T13:10:19.000000Z"}, {"uuid": "6578d1a0-e1f8-455a-ae24-701f27af1de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8935", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/LayNMR/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-02T19:22:42.000000Z"}, {"uuid": "187b9f3d-69d9-4bbf-a12f-b8c948650730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8931", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/groshi324/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-02T18:53:35.000000Z"}, {"uuid": "ff60905c-80eb-4722-8701-d6c5cca32611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8936", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a CVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/DaresNone/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-02T19:31:04.000000Z"}, {"uuid": "169bd8e9-59ef-4970-8220-b358fd382ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9034", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aFortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\nURL\uff1ahttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-14T16:25:30.000000Z"}, {"uuid": "3965318c-37ee-4123-83f3-989b08c943eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/GithubRedTeam/9033", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aFortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\nURL\uff1ahttps://github.com/kac89/CVE-2024-7124\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-14T16:12:27.000000Z"}, {"uuid": "8b7c1870-a582-43ef-b1ef-830303414b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://t.me/cvedetector/17614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25193 - Netty Windows Environment File Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2025-25193 \nPublished : Feb. 10, 2025, 10:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T01:27:23.000000Z"}, {"uuid": "e2519c67-2aaf-4604-bba4-fedfd5c835de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47258", "type": "seen", "source": "https://t.me/cvedetector/17423", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47258 - 2N Access Commander TLS Certificate Verification Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-47258 \nPublished : Feb. 6, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:29.000000Z"}, {"uuid": "a9922606-ea34-42e4-9d79-f2bfcdff2299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/itsec_news/4426", "content": "\u200b\u26a1\ufe0f\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 0day: Google \u0437\u0430\u0449\u0438\u0442\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome \u043e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445\n\n\ud83d\udcac Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-4761 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0433\u0440\u0430\u043d\u0438\u0446 (out-of-bounds) \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 V8, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0438\u043b\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. Google \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2024-4761.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Chrome 124.0.6367.207/.208 \u0434\u043b\u044f Mac \u0438 Windows \u0438 124.0.6367.207 \u0434\u043b\u044f Linux. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0441\u0440\u0435\u0434\u0438 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0434\u043d\u0438 \u0438 \u043d\u0435\u0434\u0435\u043b\u0438. \u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u043d\u0430\u043b\u0430 Extended Stable \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 124.0.6367.207 \u0434\u043b\u044f Mac \u0438 Windows.\n\nChrome \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u043f\u0435\u0440\u0435\u0439\u0434\u044f \u0432 \u0440\u0430\u0437\u0434\u0435\u043b \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 > \u041e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0434\u043e\u0436\u0434\u0430\u0432\u0448\u0438\u0441\u044c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u0430\u0436\u0430\u0432 \u043d\u0430 \u043a\u043d\u043e\u043f\u043a\u0443 \u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T11:47:02.000000Z"}, {"uuid": "234b523d-1005-4ee1-9cf7-ee23d460c58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47133", "type": "exploited", "source": "https://t.me/itsec_news/4902", "content": "\u200b\u26a1\ufe0fI-O Data: \u0442\u0440\u0438 Zero Day \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0432 \u043a\u0430\u043f\u043a\u0430\u043d\n\n\ud83d\udcac \u042f\u043f\u043e\u043d\u0441\u043a\u0438\u0439 CERT \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 I-O Data \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 13 \u043d\u043e\u044f\u0431\u0440\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442:\n\nCVE-2024-45841 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6.5): \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0444\u0430\u0439\u043b\u0430\u043c. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0442\u0440\u0435\u0442\u044c\u0438 \u043b\u0438\u0446\u0430, \u0437\u043d\u0430\u044e\u0449\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\nCVE-2024-47133 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7.2): \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432\u0432\u043e\u0434\u0430 \u043f\u0440\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439.\nCVE-2024-52564 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7.5): \u043d\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438\u043b\u0438 \u0431\u0435\u043a\u0434\u043e\u0440\u044b \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0435\u043b\u044c UD-LT1 (\u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0439 LTE-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440) \u0438 \u0435\u0451 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e UD-LT1/EX. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 v2.1.9 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e CVE-2024-52564. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u044e v2.2.0, \u0432\u044b\u043f\u0443\u0441\u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043d\u0430 18 \u0434\u0435\u043a\u0430\u0431\u0440\u044f.\n\n\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0443\u0436\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u0412 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u0438 \u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f VPN. \u0412 \u0440\u044f\u0434\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n\u0414\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432:\n\n\u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f WAN-\u043f\u043e\u0440\u0442, \u043c\u043e\u0434\u0435\u043c \u0438 VPN-\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438.\n\n\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0439, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 VPN, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435.\n\n\u0418\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u0439, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0438\u0437 \u043c\u0438\u043d\u0438\u043c\u0443\u043c 10 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432.\n\n\u0420\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u041c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b UD-LT1 \u0438 UD-LT1/EX \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u044f\u043f\u043e\u043d\u0441\u043a\u0438\u0439 \u0440\u044b\u043d\u043e\u043a \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 NTT Docomo \u0438 KDDI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441 SIM-\u043a\u0430\u0440\u0442\u0430\u043c\u0438 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 (MVNO) \u0432 \u0441\u0442\u0440\u0430\u043d\u0435.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-05T11:21:47.000000Z"}, {"uuid": "b48313de-cd4c-4048-8fd5-8d885e56a899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/itsec_news/4434", "content": "\u200b\u26a1\ufe0fCVE-2024-4947: Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 0day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0432\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-4947 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 Type Confusion \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0438 WebAssembly.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u2014 \u0412\u0430\u0441\u0438\u043b\u0438\u0435\u043c \u0411\u0435\u0440\u0434\u043d\u0438\u043a\u043e\u0432\u044b\u043c \u0438 \u0411\u043e\u0440\u0438\u0441\u043e\u043c \u041b\u0430\u0440\u0438\u043d\u044b\u043c 13 \u043c\u0430\u044f 2024 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Type Confusion \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0441 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0442\u0438\u043f\u043e\u043c. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 (Memory Out-of-bounds), \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u042d\u0442\u043e\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441\u0442\u0430\u043b \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Google \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e, \u043f\u043e\u0441\u043b\u0435 CVE-2024-4671 \u0438 CVE-2024-4761. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2024-4947 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0421 \u0443\u0447\u0451\u0442\u043e\u043c CVE-2024-4947, \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome:\n\nCVE-2024-0519 \u2014 \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 V8;\nCVE-2024-2886 \u2014 Use-After-Free \u0432 WebCodecs;\nCVE-2024-2887 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0442\u0438\u043f\u0430 confusion \u0432 WebAssembly;\nCVE-2024-3159 \u2014 \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 V8;\nCVE-2024-4671 \u2014 Use-After-Free \u0432 Visuals;\nCVE-2024-4761 \u2014 \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0432 V8.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 125.0.6422.60/.61, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f, \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Edge, Brave, Opera \u0438 Vivaldi \u2014 \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0430\u0437\u0443, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-16T15:41:15.000000Z"}, {"uuid": "3dd54f7a-0bf3-4f5b-9be7-d43c108c28f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/itsec_news/4777", "content": "\u200b\u26a1\ufe0f\u041f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 Linux \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\n\n\ud83d\udcac \u041d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Unix-\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BSD, \u0430 \u0442\u0430\u043a\u0436\u0435, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, ChromeOS \u0438 Solaris. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 CUPS \u043d\u0430 \u043f\u043e\u0440\u0442\u0435 631 \u0438 \u0434\u043e\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0434\u043c\u0435\u043d\u044b zeroconf, mDNS \u0438\u043b\u0438 DNS-SD \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-47176 (cups-browsed \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631.\n\nCVE-2024-47076 (libcupsfilters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.1b1): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IPP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\nCVE-2024-47175 (libppd): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 PPD-\u0444\u0430\u0439\u043b.\n\nCVE-2024-47177 (cups-filters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 PPD-\u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 \u043d\u0430 \u043f\u043e\u0440\u0442 631, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438, \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0435\u0447\u0430\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 9.9 \u0438\u0437 10 \u043f\u043e CVSS, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0411\u0435\u043d\u0434\u0436\u0430\u043c\u0438\u043d\u0430 \u0425\u0430\u0440\u0440\u0438\u0441\u0430, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 Linux-\u0441\u0438\u0441\u0442\u0435\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043e\u043d \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0448\u0430\u0433\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b:\n\n\u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 cups-browsed;\n\u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631 \u0438 DNS-SD;\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS \u043f\u0440\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0440\u044f\u0434\u043e\u043c \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CUPS. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Canonical \u0438 Red Hat, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CUPS \u043d\u0435\u043e\u0445\u043e\u0442\u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u043b\u0438 \u0441\u043f\u043e\u0440\u0438\u0442\u044c \u043e \u0442\u043e\u043c, \u0432\u043b\u0438\u044f\u044e\u0442 \u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0438 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u043b\u0438 \u0441\u043d\u0438\u0441\u0445\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u044d\u0442\u0443 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 20 \u043b\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-09-27T16:16:01.000000Z"}, {"uuid": "955a1b9b-0f36-45fb-a7f2-5548f9865491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/itsec_news/4777", "content": "\u200b\u26a1\ufe0f\u041f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 Linux \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\n\n\ud83d\udcac \u041d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Unix-\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BSD, \u0430 \u0442\u0430\u043a\u0436\u0435, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, ChromeOS \u0438 Solaris. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 CUPS \u043d\u0430 \u043f\u043e\u0440\u0442\u0435 631 \u0438 \u0434\u043e\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0434\u043c\u0435\u043d\u044b zeroconf, mDNS \u0438\u043b\u0438 DNS-SD \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-47176 (cups-browsed \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631.\n\nCVE-2024-47076 (libcupsfilters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.1b1): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IPP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\nCVE-2024-47175 (libppd): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 PPD-\u0444\u0430\u0439\u043b.\n\nCVE-2024-47177 (cups-filters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 PPD-\u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 \u043d\u0430 \u043f\u043e\u0440\u0442 631, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438, \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0435\u0447\u0430\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 9.9 \u0438\u0437 10 \u043f\u043e CVSS, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0411\u0435\u043d\u0434\u0436\u0430\u043c\u0438\u043d\u0430 \u0425\u0430\u0440\u0440\u0438\u0441\u0430, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 Linux-\u0441\u0438\u0441\u0442\u0435\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043e\u043d \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0448\u0430\u0433\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b:\n\n\u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 cups-browsed;\n\u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631 \u0438 DNS-SD;\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS \u043f\u0440\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0440\u044f\u0434\u043e\u043c \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CUPS. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Canonical \u0438 Red Hat, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CUPS \u043d\u0435\u043e\u0445\u043e\u0442\u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u043b\u0438 \u0441\u043f\u043e\u0440\u0438\u0442\u044c \u043e \u0442\u043e\u043c, \u0432\u043b\u0438\u044f\u044e\u0442 \u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0438 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u043b\u0438 \u0441\u043d\u0438\u0441\u0445\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u044d\u0442\u0443 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 20 \u043b\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-09-27T16:16:01.000000Z"}, {"uuid": "724ab926-67ee-431c-82ad-9082e7d127a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/itsec_news/4777", "content": "\u200b\u26a1\ufe0f\u041f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 Linux \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\n\n\ud83d\udcac \u041d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Unix-\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BSD, \u0430 \u0442\u0430\u043a\u0436\u0435, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, ChromeOS \u0438 Solaris. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 CUPS \u043d\u0430 \u043f\u043e\u0440\u0442\u0435 631 \u0438 \u0434\u043e\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0434\u043c\u0435\u043d\u044b zeroconf, mDNS \u0438\u043b\u0438 DNS-SD \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-47176 (cups-browsed \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631.\n\nCVE-2024-47076 (libcupsfilters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.1b1): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IPP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\nCVE-2024-47175 (libppd): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 PPD-\u0444\u0430\u0439\u043b.\n\nCVE-2024-47177 (cups-filters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 PPD-\u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 \u043d\u0430 \u043f\u043e\u0440\u0442 631, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438, \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0435\u0447\u0430\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 9.9 \u0438\u0437 10 \u043f\u043e CVSS, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0411\u0435\u043d\u0434\u0436\u0430\u043c\u0438\u043d\u0430 \u0425\u0430\u0440\u0440\u0438\u0441\u0430, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 Linux-\u0441\u0438\u0441\u0442\u0435\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043e\u043d \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0448\u0430\u0433\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b:\n\n\u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 cups-browsed;\n\u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631 \u0438 DNS-SD;\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS \u043f\u0440\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0440\u044f\u0434\u043e\u043c \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CUPS. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Canonical \u0438 Red Hat, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CUPS \u043d\u0435\u043e\u0445\u043e\u0442\u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u043b\u0438 \u0441\u043f\u043e\u0440\u0438\u0442\u044c \u043e \u0442\u043e\u043c, \u0432\u043b\u0438\u044f\u044e\u0442 \u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0438 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u043b\u0438 \u0441\u043d\u0438\u0441\u0445\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u044d\u0442\u0443 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 20 \u043b\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-09-27T16:16:01.000000Z"}, {"uuid": "5fb1e356-e8bf-496d-910f-f55dfdf864fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/itsec_news/4777", "content": "\u200b\u26a1\ufe0f\u041f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 Linux \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\n\n\ud83d\udcac \u041d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Unix-\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BSD, \u0430 \u0442\u0430\u043a\u0436\u0435, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, ChromeOS \u0438 Solaris. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 cups-browsed, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 CUPS \u043d\u0430 \u043f\u043e\u0440\u0442\u0435 631 \u0438 \u0434\u043e\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0434\u043c\u0435\u043d\u044b zeroconf, mDNS \u0438\u043b\u0438 DNS-SD \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-47176 (cups-browsed \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631.\n\nCVE-2024-47076 (libcupsfilters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.1b1): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IPP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\nCVE-2024-47175 (libppd): \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 PPD-\u0444\u0430\u0439\u043b.\n\nCVE-2024-47177 (cups-filters \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.1): \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 PPD-\u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 \u043d\u0430 \u043f\u043e\u0440\u0442 631, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438, \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0435\u0447\u0430\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 9.9 \u0438\u0437 10 \u043f\u043e CVSS, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0411\u0435\u043d\u0434\u0436\u0430\u043c\u0438\u043d\u0430 \u0425\u0430\u0440\u0440\u0438\u0441\u0430, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 Linux-\u0441\u0438\u0441\u0442\u0435\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043e\u043d \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0448\u0430\u0433\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b:\n\n\u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 cups-browsed;\n\u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 631 \u0438 DNS-SD;\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS \u043f\u0440\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0440\u044f\u0434\u043e\u043c \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CUPS. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Canonical \u0438 Red Hat, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CUPS \u043d\u0435\u043e\u0445\u043e\u0442\u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u043b\u0438 \u0441\u043f\u043e\u0440\u0438\u0442\u044c \u043e \u0442\u043e\u043c, \u0432\u043b\u0438\u044f\u044e\u0442 \u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0438 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u043b\u0438 \u0441\u043d\u0438\u0441\u0445\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u044d\u0442\u0443 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 20 \u043b\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-09-27T16:16:01.000000Z"}, {"uuid": "302bc1d0-d71a-44d1-8c06-03625836ca27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47256", "type": "seen", "source": "https://t.me/cvedetector/17422", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47256 - 2N Access Commander AES Passphrase Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47256 \nPublished : Feb. 6, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:28.000000Z"}, {"uuid": "d34430e9-b748-4293-8ff3-06ffb8cdd6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47969", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47969\n\ud83d\udd39 Description: Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.\n\ud83d\udccf Published: 2024-10-07T21:41:24.430Z\n\ud83d\udccf Modified: 2025-01-09T17:31:50.208Z\n\ud83d\udd17 References:\n1. https://www.solidigm.com/support-page/support-security.htmlhttps://", "creation_timestamp": "2025-01-09T18:21:23.000000Z"}, {"uuid": "5a8d0237-2c97-4a9e-9599-b62fdbbbc4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47934", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/633", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47934\n\ud83d\udd39 Description: Improper Input Validation vulnerability in Management Program in TXOne Networks Portable Inspector and Portable Inspector Pro Edition allows remote attacker to crash management service. The Denial of Service situation can be resolved by restarting the management service.\nThis issue affects Portable Inspector: through 1.0.0; Portable Inspector Pro Edition: through 1.0.0.\n\ud83d\udccf Published: 2025-01-08T03:00:31.170Z\n\ud83d\udccf Modified: 2025-01-08T03:00:31.170Z\n\ud83d\udd17 References:\n1. https://www.txone.com/psirt/advisories/cve-2024-47934/", "creation_timestamp": "2025-01-08T03:40:32.000000Z"}, {"uuid": "6e5cedec-19d6-4507-91ff-d185126da221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47398", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/381", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47398\n\ud83d\udd39 Description: in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write.\n\ud83d\udccf Published: 2025-01-07T07:57:02.974Z\n\ud83d\udccf Modified: 2025-01-07T07:57:02.974Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-01.md", "creation_timestamp": "2025-01-07T08:39:03.000000Z"}, {"uuid": "f5b8221f-cfc9-44f7-98da-e225dc69f03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47239", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/608", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47239\n\ud83d\udd39 Description: Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service.\n\ud83d\udccf Published: 2025-01-08T02:00:15.883Z\n\ud83d\udccf Modified: 2025-01-08T02:00:15.883Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000269590/dsa-2024-480-security-update-for-dell-powerscale-onefs-security-vulnerability", "creation_timestamp": "2025-01-08T02:38:25.000000Z"}, {"uuid": "8fe20bbe-d1b3-4654-b57a-b6e085b04fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47520", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1245", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47520\n\ud83d\udd39 Description: A user with advanced report application access rights can perform actions for which they are not authorized\n\ud83d\udccf Published: 2025-01-10T22:00:56.183Z\n\ud83d\udccf Modified: 2025-01-10T22:00:56.183Z\n\ud83d\udd17 References:\n1. https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105", "creation_timestamp": "2025-01-10T22:04:21.000000Z"}, {"uuid": "d7fae363-4241-4f3b-9730-d5b682be8e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47566\n\ud83d\udd39 Description: A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests.\n\ud83d\udccf Published: 2025-01-14T14:09:35.726Z\n\ud83d\udccf Modified: 2025-01-14T20:54:34.253Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-401", "creation_timestamp": "2025-01-14T21:12:00.000000Z"}, {"uuid": "9567b758-3030-4e89-b3d6-30245fdc08b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47517", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1252", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47517\n\ud83d\udd39 Description: Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access\n\ud83d\udccf Published: 2025-01-10T21:47:30.950Z\n\ud83d\udccf Modified: 2025-01-10T21:47:30.950Z\n\ud83d\udd17 References:\n1. https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105", "creation_timestamp": "2025-01-10T22:05:02.000000Z"}, {"uuid": "2235a471-07c2-4850-b1dd-76de706fc317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47518", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1251", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47518\n\ud83d\udd39 Description: Specially constructed queries targeting ETM could discover active remote access sessions\n\ud83d\udccf Published: 2025-01-10T21:52:19.808Z\n\ud83d\udccf Modified: 2025-01-10T21:52:19.808Z\n\ud83d\udd17 References:\n1. https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105", "creation_timestamp": "2025-01-10T22:04:59.000000Z"}, {"uuid": "674767b6-4adf-41f7-943e-6ca75f976c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47519\n\ud83d\udd39 Description: Backup uploads to ETM subject to man-in-the-middle interception\n\ud83d\udccf Published: 2025-01-10T21:56:54.553Z\n\ud83d\udccf Modified: 2025-01-10T21:56:54.553Z\n\ud83d\udd17 References:\n1. https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105", "creation_timestamp": "2025-01-10T22:04:54.000000Z"}, {"uuid": "25148556-df6a-455f-b658-0e4e9367b35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47066", "type": "seen", "source": "https://t.me/GithubRedTeam/8585", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/l8BL/CVE-2024-47066\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-24T10:01:15.000000Z"}, {"uuid": "70e1c954-3dd5-4233-b10a-b7694e003c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47220", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47220\n\ud83d\udd39 Description: An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., \"GET /admin HTTP/1.1\\r\\n\" inside of a \"POST /user HTTP/1.1\\r\\n\" request. NOTE: the supplier's position is \"Webrick should not be used in production.\"\n\ud83d\udccf Published: 2024-09-22T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:33:17.696Z\n\ud83d\udd17 References:\n1. https://github.com/ruby/webrick/issues/145\n2. https://github.com/ruby/webrick/pull/146/commits/d88321da45dcd230ac2b4585cad4833d6d5e8841\n3. https://github.com/ruby/webrick/issues/145#issuecomment-2369994610\n4. https://github.com/ruby/webrick/issues/145#issuecomment-2372838285", "creation_timestamp": "2025-01-09T18:21:15.000000Z"}, {"uuid": "dd158ef2-b108-4e9e-a8bd-47c3d4c10df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47408", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47408\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check smcd_v2_ext_offset when receiving proposal msg\n\nWhen receiving proposal msg in server, the field smcd_v2_ext_offset in\nproposal msg is from the remote client and can not be fully trusted.\nOnce the value of smcd_v2_ext_offset exceed the max value, there has\nthe chance to access wrong address, and crash may happen.\n\nThis patch checks the value of smcd_v2_ext_offset before using it.\n\ud83d\udccf Published: 2025-01-11T12:35:35.284Z\n\ud83d\udccf Modified: 2025-01-11T12:35:35.284Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/a36364d8d4fabb105001f992fb8ff2d3546203d6\n2. https://git.kernel.org/stable/c/e1cc8be2a785a8f1ce1f597f3e608602c5fccd46\n3. https://git.kernel.org/stable/c/935caf324b445fe73d7708fae6f7176fb243f357\n4. https://git.kernel.org/stable/c/48d5a8a304a643613dab376a278f29d3e22f7c34\n5. https://git.kernel.org/stable/c/9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad", "creation_timestamp": "2025-01-11T13:06:50.000000Z"}, {"uuid": "d2463466-3269-42af-af38-71a6f135d309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47011", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1532", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13180\n\ud83d\udd39 Description: Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011.\n\ud83d\udccf Published: 2025-01-14T16:52:41.501Z\n\ud83d\udccf Modified: 2025-01-14T16:52:41.501Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs", "creation_timestamp": "2025-01-14T17:21:13.000000Z"}, {"uuid": "57932910-f574-4cd2-8964-f01347589c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47002", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1763", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47002\n\ud83d\udd39 Description: A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would need to click a malicious link provided by the attacker.\n\ud83d\udccf Published: 2025-01-15T14:59:29.089Z\n\ud83d\udccf Modified: 2025-01-15T14:59:29.089Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2024-2091", "creation_timestamp": "2025-01-15T15:10:33.000000Z"}, {"uuid": "1c013cf1-80cb-4eed-8930-0f766b102c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1762", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47140\n\ud83d\udd39 Description: A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker.\n\ud83d\udccf Published: 2025-01-15T14:59:29.896Z\n\ud83d\udccf Modified: 2025-01-15T14:59:29.896Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2024-2090", "creation_timestamp": "2025-01-15T15:10:30.000000Z"}, {"uuid": "e5ff23c2-7319-46f1-9d40-7e909eee254b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47100", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1473", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47100\n\ud83d\udd39 Description: A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0). The web interface of the affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change the CPU mode by tricking a legitimate and authenticated user with sufficient permissions on the target CPU to click on a malicious link.\n\ud83d\udccf Published: 2025-01-14T10:30:11.506Z\n\ud83d\udccf Modified: 2025-01-14T10:30:11.506Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-717113.html", "creation_timestamp": "2025-01-14T11:08:20.000000Z"}, {"uuid": "3cd0f09b-9957-42ee-9980-78d7ac3544a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47010", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1529", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13181\n\ud83d\udd39 Description: Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.\n\ud83d\udccf Published: 2025-01-14T16:53:36.325Z\n\ud83d\udccf Modified: 2025-01-14T16:53:36.325Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs", "creation_timestamp": "2025-01-14T17:21:04.000000Z"}, {"uuid": "10413b20-88a3-43c3-bc7e-a93184586ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47605", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1634", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47605\n\ud83d\udd39 Description: silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the \"insert media\" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on both the CMS and the front-end of the website. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T22:42:31.153Z\n\ud83d\udccf Modified: 2025-01-14T22:45:00.758Z\n\ud83d\udd17 References:\n1. https://github.com/silverstripe/silverstripe-asset-admin/security/advisories/GHSA-7cmp-cgg8-4c82\n2. https://github.com/silverstripe/silverstripe-framework/commit/09b5052c86932f273e0d733428c9aade70ff2a4a\n3. https://www.silverstripe.org/download/security-releases/cve-2024-47605", "creation_timestamp": "2025-01-14T23:09:18.000000Z"}, {"uuid": "bfcda1e4-e454-4142-8840-8fba63f4559c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47106", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2303", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47106\n\ud83d\udd39 Description: IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access restrictions that could aid in further attacks against the system.\n\ud83d\udccf Published: 2025-01-18T16:09:47.381Z\n\ud83d\udccf Modified: 2025-01-18T16:09:47.381Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7178507", "creation_timestamp": "2025-01-18T16:57:47.000000Z"}, {"uuid": "006da7fc-5cc2-47f9-82e4-c6f77db4d2af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47736", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47736\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: handle overlapped pclusters out of crafted images properly\n\nsyzbot reported a task hang issue due to a deadlock case where it is\nwaiting for the folio lock of a cached folio that will be used for\ncache I/Os.\n\nAfter looking into the crafted fuzzed image, I found it's formed with\nseveral overlapped big pclusters as below:\n\n Ext:   logical offset   |  length :     physical offset    |  length\n   0:        0..   16384 |   16384 :     151552..    167936 |   16384\n   1:    16384..   32768 |   16384 :     155648..    172032 |   16384\n   2:    32768..   49152 |   16384 :  537223168.. 537239552 |   16384\n...\n\nHere, extent 0/1 are physically overlapped although it's entirely\n_impossible_ for normal filesystem images generated by mkfs.\n\nFirst, managed folios containing compressed data will be marked as\nup-to-date and then unlocked immediately (unlike in-place folios) when\ncompressed I/Os are complete.  If physical blocks are not submitted in\nthe incremental order, there should be separate BIOs to avoid dependency\nissues.  However, the current code mis-arranges z_erofs_fill_bio_vec()\nand BIO submission which causes unexpected BIO waits.\n\nSecond, managed folios will be connected to their own pclusters for\nefficient inter-queries.  However, this is somewhat hard to implement\neasily if overlapped big pclusters exist.  Again, these only appear in\nfuzzed images so let's simply fall back to temporary short-lived pages\nfor correctness.\n\nAdditionally, it justifies that referenced managed folios cannot be\ntruncated for now and reverts part of commit 2080ca1ed3e4 (\"erofs: tidy\nup `struct z_erofs_bvec`\") for simplicity although it shouldn't be any\ndifference.\n\ud83d\udccf Published: 2024-10-21T12:14:06.530Z\n\ud83d\udccf Modified: 2025-01-17T13:26:59.000Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/1bf7e414cac303c9aec1be67872e19be8b64980c\n2. https://git.kernel.org/stable/c/b9b30af0e86ffb485301ecd83b9129c9dfb7ebf8\n3. https://git.kernel.org/stable/c/9cfa199bcbbbba31cbf97b2786f44f4464f3f29a\n4. https://git.kernel.org/stable/c/9e2f9d34dd12e6e5b244ec488bcebd0c2d566c50", "creation_timestamp": "2025-01-17T13:56:47.000000Z"}, {"uuid": "ef9cf948-af4b-4dfe-8b59-2d69604ab657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47113", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47113\n\ud83d\udd39 Description: IBM ICP - Voice Gateway\u00a01.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.\n\ud83d\udccf Published: 2025-01-18T15:29:40.728Z\n\ud83d\udccf Modified: 2025-01-18T15:29:40.728Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7175791", "creation_timestamp": "2025-01-18T15:58:00.000000Z"}, {"uuid": "d5a40dbd-4f15-4473-83b2-a9d0d1f9a6a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "published-proof-of-concept", "source": "Telegram/51t8UUBcVa-x2wjoRIM2mT2i7yna57J_B3bG-USYfuPX_VI", "content": "", "creation_timestamp": "2025-07-13T02:12:01.000000Z"}, {"uuid": "99255ec9-3116-4783-8647-cc740e03127d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4712", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3490", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4712\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-05-14T15:44:27.660\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/\n2. https://www.papercut.com/kb/Main/security-bulletin-may-2024/", "creation_timestamp": "2025-01-30T15:18:59.000000Z"}, {"uuid": "d94adc4a-8bdf-4e66-8940-58fff29ef5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47899", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3579", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47899\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T04:15:08.800\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-01-31T05:24:35.000000Z"}, {"uuid": "a220cff5-27fc-4731-b90d-8fa5f5c3b190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47900", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47900\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T04:15:08.930\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-01-31T05:24:35.000000Z"}, {"uuid": "ca45f69b-abc3-4165-bcf4-fd430868e4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47891", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3581", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47891\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T04:15:08.553\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-01-31T05:24:37.000000Z"}, {"uuid": "71aa6d95-8493-4092-9c69-73f6d98c2c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47898", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3580", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47898\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T04:15:08.683\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-01-31T05:24:36.000000Z"}, {"uuid": "3ad4fed1-0c5e-49af-8f34-1f7c668c13e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47006", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4182", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47006\n\ud83d\udd25 CVSS Score: 6.6 (CVSS_V3)\n\ud83d\udd39 Description: Uncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-47006\n2. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01240.html", "creation_timestamp": "2025-02-13T01:09:05.000000Z"}, {"uuid": "43cc1a23-063a-49be-81b6-ab5466254377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47006", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47006\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:39.453\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01240.html", "creation_timestamp": "2025-02-12T23:09:59.000000Z"}, {"uuid": "1c0a8aad-15cd-4b1c-a450-c9dd214f0eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47264", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4231", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47264\n\ud83d\udd25 CVSS Score: 4.8 (CVSS_V3)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to delete arbitrary files via unspecified vectors.\n\ud83d\udccf Published: 2025-02-13T09:31:25Z\n\ud83d\udccf Modified: 2025-02-13T09:31:25Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-47264\n2. https://www.synology.com/en-global/security/advisory/Synology_SA_25_02", "creation_timestamp": "2025-02-13T10:09:29.000000Z"}, {"uuid": "23dcca26-10c5-4d32-a01c-cfdef2800c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47266", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4229", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47266\n\ud83d\udd25 CVSS Score: 2.6 (CVSS_V3)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to read specific files containing non-sensitive information via unspecified vectors.\n\ud83d\udccf Published: 2025-02-13T09:31:25Z\n\ud83d\udccf Modified: 2025-02-13T09:31:25Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-47266\n2. https://www.synology.com/en-global/security/advisory/Synology_SA_25_02", "creation_timestamp": "2025-02-13T10:09:20.000000Z"}, {"uuid": "643e2afd-14ad-459e-96da-b0a1a47d8816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47265", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47265\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users to write specific files via unspecified vectors.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-47265\n2. https://www.synology.com/en-global/security/advisory/Synology_SA_25_02", "creation_timestamp": "2025-02-13T10:09:14.000000Z"}, {"uuid": "34a00cff-00c9-4d2b-b799-2e32093629cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47896", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.\n\ud83d\udccf Published: 2025-02-22T14:50:58.213Z\n\ud83d\udccf Modified: 2025-02-22T14:50:58.213Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-02-22T15:20:14.000000Z"}, {"uuid": "bd60e91f-1cb7-4ac6-bbf0-945c4720e954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix.\n\ud83d\udccf Published: 2025-02-10T22:02:17.197Z\n\ud83d\udccf Modified: 2025-02-21T18:03:38.211Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386", "creation_timestamp": "2025-02-21T18:18:54.000000Z"}, {"uuid": "881cdf35-ee8e-4799-8b01-03e87f96a387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47258", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4886", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47258\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. \n\n\n\n\n\n2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2 of 2N Access Commander (released in February 2022) it is also possible to enforce TLS certificate validation.It is recommended that all customers update 2N Access Commander to the latest version and use one of two mentioned practices.\n\ud83d\udccf Published: 2025-02-06T19:10:40.660Z\n\ud83d\udccf Modified: 2025-02-21T12:20:21.019Z\n\ud83d\udd17 References:\n1. https://www.2n.com/en-GB/download/cve_2024_47258_acom_3_3_v1pdf", "creation_timestamp": "2025-02-21T13:18:13.000000Z"}, {"uuid": "2aae334c-4ab8-49ec-b530-8733fa80be35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47726", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47726\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to wait dio completion\n\nIt should wait all existing dio write IOs before block removal,\notherwise, previous direct write IO may overwrite data in the\nblock which may be reused by other inode.\n\ud83d\udccf Published: 2024-10-21T12:13:59.615Z\n\ud83d\udccf Modified: 2025-02-21T13:45:09.147Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f81302decd64245bb1bd154ecae0f65a9ee21f04\n2. https://git.kernel.org/stable/c/c2a7fc514637f640ff55c3f3e3ed879970814a3f\n3. https://git.kernel.org/stable/c/e3db757ff9b7101ae68650ac5f6dd5743b68164e\n4. https://git.kernel.org/stable/c/96cfeb0389530ae32ade8a48ae3ae1ac3b6c009d", "creation_timestamp": "2025-02-21T14:18:34.000000Z"}, {"uuid": "85d808e9-65aa-4d39-8bd5-4c3bcca24604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47256", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4887", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47256\n\ud83d\udd25 CVSS Score: 6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older.\n\n\n\n\n\n\n2N has released an updated version 3.3 of 2N Access Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the latest version.\n\ud83d\udccf Published: 2025-02-06T19:10:03.820Z\n\ud83d\udccf Modified: 2025-02-21T12:19:43.180Z\n\ud83d\udd17 References:\n1. https://www.2n.com/en-GB/download/cve_2024_47256_acom_3_3_v1pdf", "creation_timestamp": "2025-02-21T13:18:14.000000Z"}, {"uuid": "a1da915d-c030-4321-aaa7-b902f391494f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4722", "type": "seen", "source": "Telegram/Ot0jOcOtHY2ebdwSyudH5HvJrDFau5a8JyKDJF4-qlJC-M-k", "content": "", "creation_timestamp": "2025-02-20T23:26:57.000000Z"}, {"uuid": "934be22e-5264-4526-a78b-ceefa3451235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47053", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5487", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47053\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data.\n\n  *  Improper Authorization:\u00a0An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated user, regardless of assigned roles or permissions, can access all reports and their associated data via the API. This bypasses the intended access controls governed by the \"Reporting Permissions > View Own\" and \"Reporting Permissions > View Others\" permissions, which should restrict access to non-System Reports.\n\ud83d\udccf Published: 2025-02-26T11:54:17.219Z\n\ud83d\udccf Modified: 2025-02-26T11:55:28.089Z\n\ud83d\udd17 References:\n1. https://github.com/mautic/mautic/security/advisories/GHSA-8xv7-g2q3-fqgc\n2. https://cwe.mitre.org/data/definitions/287.html\n3. https://docs.mautic.org/en/5.2/configuration/settings.html#api-settings", "creation_timestamp": "2025-02-26T12:31:56.000000Z"}, {"uuid": "b54a7708-6e8d-4e4f-9be7-22a43be2b0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5484", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47051\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L)\n\ud83d\udd39 Description: This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticated users.\n\n  *  Remote Code Execution (RCE) via Asset Upload:\u00a0A Remote Code Execution vulnerability has been identified in the asset upload functionality. Insufficient enforcement of allowed file extensions allows an attacker to bypass restrictions and upload executable files, such as PHP scripts.\n\n\n  *  Path Traversal File Deletion:\u00a0A Path Traversal vulnerability exists in the upload validation process. Due to improper handling of path components, an authenticated user can manipulate the file deletion process to delete arbitrary files on the host system.\n\ud83d\udccf Published: 2025-02-26T12:01:26.374Z\n\ud83d\udccf Modified: 2025-02-26T12:01:26.374Z\n\ud83d\udd17 References:\n1. https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2\n2. https://owasp.org/www-community/attacks/Code_Injection\n3. https://owasp.org/www-community/attacks/Path_Traversal", "creation_timestamp": "2025-02-26T12:31:53.000000Z"}, {"uuid": "955f2fa7-961a-443d-a5ec-b311055d2cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4701", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7291", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC for CVE-2024-4701\nURL\uff1ahttps://github.com/JoeBeeton/CVE-2024-4701-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-13T12:01:15.000000Z"}, {"uuid": "2168e36b-669c-4401-8b5c-be05da9caea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47784", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14141", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47784\n\ud83d\udd25 CVSS Score: 2.1 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/R:U)\n\ud83d\udd39 Description: Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI\nThis issue affects ANC software version 1.1.4 and earlier.\n\ud83d\udccf Published: 2025-04-30T18:17:02.648Z\n\ud83d\udccf Modified: 2025-04-30T20:04:47.051Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch", "creation_timestamp": "2025-04-30T20:14:14.000000Z"}, {"uuid": "224fbeb0-6788-445b-961a-2a172100909a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47266", "type": "seen", "source": "Telegram/8CtsKI1GsYQ4LLxk54lVQERghUEbveNUbshyieGhThHXpPbU", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "896d5735-7e03-452a-b433-9b873dcaec56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47265", "type": "seen", "source": "Telegram/UbaCCa1FReXSqxMd5_ol7kFpQlRbnOIOXFXpfuqxs1eHKmA7", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "9f6ce4a1-852a-43ff-bdc8-2779c0b16930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47092", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6211", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47092\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api prior to 5.8.1\n\ud83d\udccf Published: 2025-03-03T13:47:18.887Z\n\ud83d\udccf Modified: 2025-03-03T13:47:18.887Z\n\ud83d\udd17 References:\n1. https://exchange.checkmk.com/p/check-mk-api\n2. https://github.com/HeinleinSupport/check_mk_extensions/commit/b5a2a7529e3367d7a643e66f05da4f2a27013904", "creation_timestamp": "2025-03-03T14:30:03.000000Z"}, {"uuid": "3a7b5a44-f848-4b24-a81f-bf6d65559a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47264", "type": "seen", "source": "Telegram/SWxUhZYU4bJYwJ2QVnVEaFrpA4FpHYbeHzPWV-KcoAiOfqIJ", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "7c9965e7-04cb-4860-9320-3eb826225df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47259", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47259\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files to the Axis device with the purpose to exhaust system resources. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:15:16.499Z\n\ud83d\udccf Modified: 2025-03-04T05:15:16.499Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/13/cd/4a/cve-2024-47259pdf-en-US-466882.pdf", "creation_timestamp": "2025-03-04T05:30:27.000000Z"}, {"uuid": "8aff3b5a-80b2-46d8-9547-0da626d2d33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47260", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6338", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47260\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading more audio clips then designed resulting in the Axis device running out of memory.\u00a0\nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:17:35.063Z\n\ud83d\udccf Modified: 2025-03-04T05:17:35.063Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/1d/d3/ef/cve-2024-47260pdf-en-US-466883.pdf", "creation_timestamp": "2025-03-04T05:30:27.000000Z"}, {"uuid": "e0f9e9a2-5bf6-429f-9971-644ac2631820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47262", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47262\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not affected. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:19:09.007Z\n\ud83d\udccf Modified: 2025-03-04T05:19:09.007Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf", "creation_timestamp": "2025-03-04T05:30:26.000000Z"}, {"uuid": "f98071b2-1be5-448b-a675-8e7a7d41d207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47896", "type": "seen", "source": "Telegram/TZO5BFs2iOGjSTZA4LYTak3hEQEQyff43cfdH2mpfic2ElSy", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "de7821af-1c84-49a5-9022-426072a43523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-13T00:00:34.529436Z"}, {"uuid": "c6e5c00a-7ec4-4f9e-8c23-7fa47a58053a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8933", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/VIRKiss/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-02T19:10:12.000000Z"}, {"uuid": "e2dfc2e6-b5e6-4857-8df0-ba091ae3f84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-13T00:00:34.507697Z"}, {"uuid": "dca871a2-abbb-45ff-95cf-3397333443b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47109", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47109\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system.\n\ud83d\udccf Published: 2025-03-10T16:01:42.848Z\n\ud83d\udccf Modified: 2025-03-10T16:01:42.848Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7185259", "creation_timestamp": "2025-03-10T16:38:04.000000Z"}, {"uuid": "e2b67ba7-f28a-43b4-8cbe-da94158f1286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-13T00:00:34.443292Z"}, {"uuid": "091232e8-4b91-4be4-bcd3-103e2c588097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-13T00:00:34.416005Z"}, {"uuid": "379ae3fb-d715-46a7-aab6-b82ea560d793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47049", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7973", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47049\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.\n\ud83d\udccf Published: 2024-09-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T19:37:41.688Z\n\ud83d\udd17 References:\n1. https://github.com/czim/file-handling/blob/2.3.0/SECURITY.md", "creation_timestamp": "2025-03-18T19:48:42.000000Z"}, {"uuid": "03b9a86d-3cbb-474b-bc21-c7d4c945fef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47197", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47197\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin.\n\nThis issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0.\n\nUsers are recommended to upgrade to version 3.3.0, which fixes the issue.\n\nArchetype integration testing creates a file\ncalled ./target/classes/archetype-it/archetype-settings.xml\nThis file contains all the content from the users ~/.m2/settings.xml file,\nwhich often contains information they do not want to publish. We expect that on many developer machines, this also contains\ncredentials.\n\nWhen the user runs mvn verify again (without a mvn clean), this file becomes part of\nthe final artifact.\n\nIf a developer were to publish this into Maven Central or any other remote repository (whether as a release\nor a snapshot) their credentials would be published without them knowing.\n\ud83d\udccf Published: 2024-09-26T08:01:24.486Z\n\ud83d\udccf Modified: 2025-03-17T17:36:10.410Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/ftg81np183wnyk0kg4ks95dvgxdrof96", "creation_timestamp": "2025-03-17T18:31:35.000000Z"}, {"uuid": "fb419e5c-29f9-4ebb-b3c7-7a47b732a085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/securixy_kz/1044", "content": "", "creation_timestamp": "2026-07-13T00:00:34.122612Z"}, {"uuid": "224935f1-b8f4-4c90-8d12-8d68c2e2e256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9220", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4750\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request\n\ud83d\udccf Published: 2024-06-04T06:00:02.993Z\n\ud83d\udccf Modified: 2025-03-27T21:11:34.672Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ffbe4034-842b-43b0-97d1-208811376dea/", "creation_timestamp": "2025-03-27T21:27:45.000000Z"}, {"uuid": "127a451c-e766-437e-a7da-952e052a08b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/securixy_kz/1055", "content": "", "creation_timestamp": "2026-07-13T00:00:33.998731Z"}, {"uuid": "a7b7a50f-64bd-4f42-8936-a983e6d46e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47221", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8090", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47221\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password.\n\ud83d\udccf Published: 2024-09-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T15:49:57.660Z\n\ud83d\udd17 References:\n1. https://github.com/RapidScada/scada/commit/b14cbdfa6cf3a205e57f2383c915365adc3859a7", "creation_timestamp": "2025-03-19T16:18:15.000000Z"}, {"uuid": "5efd1c9f-f804-456a-8ceb-0c98d6336b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47939", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8583", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47939\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Stack-based buffer overflow vulnerability exists in multiple Ricoh laser printers and MFPs which implement Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendor under [References].\n\ud83d\udccf Published: 2024-11-01T04:29:04.040Z\n\ud83d\udccf Modified: 2025-03-25T01:29:15.307Z\n\ud83d\udd17 References:\n1. https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000011\n2. https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000011\n3. https://jvn.jp/en/jp/JVN87770340/", "creation_timestamp": "2025-03-25T02:23:21.000000Z"}, {"uuid": "1cd1db64-2b9e-47ee-b794-22543ec059a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7971", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47857\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a proxy port. This allows an existing PrivX \"account A\" to impersonate another existing PrivX \"account B\" and gain access to SSH target hosts to which the \"account B\" has access.\n\ud83d\udccf Published: 2025-01-31T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T19:40:31.796Z\n\ud83d\udd17 References:\n1. https://ssh.com\n2. https://info.ssh.com/impersonation-vulnerability-privx", "creation_timestamp": "2025-03-18T19:48:41.000000Z"}, {"uuid": "9db17099-3aa9-499e-bd1e-c04d906b96b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47222", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7989", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47222\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI protocol.\n\ud83d\udccf Published: 2024-09-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:42:56.224Z\n\ud83d\udd17 References:\n1. https://myoffice.ru/\n2. https://support.myoffice.ru/products/myoffice-sdk/", "creation_timestamp": "2025-03-18T20:48:07.000000Z"}, {"uuid": "9c7354c5-8fa7-4d18-8f99-237d7c3bce15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47891", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8006", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47891\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.\n\ud83d\udccf Published: 2025-01-31T03:11:58.828Z\n\ud83d\udccf Modified: 2025-03-18T20:22:22.937Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-03-18T20:48:30.000000Z"}, {"uuid": "0139de97-de1f-4059-bd17-aba710e90c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47552", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8179", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47552\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).\n\nThis issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.\n\nUsers are recommended to upgrade to version 2.2.0, which fixes the issue.\n\ud83d\udccf Published: 2025-03-20T08:58:01.495Z\n\ud83d\udccf Modified: 2025-03-20T09:03:43.843Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/652o82vzk9qrtgksk55cfgpbvdgtkch0", "creation_timestamp": "2025-03-20T09:27:04.000000Z"}, {"uuid": "7654dd22-c0e3-4b06-b6cf-cde2527899ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47898", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8209", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47898\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.\n\ud83d\udccf Published: 2025-01-31T03:14:46.865Z\n\ud83d\udccf Modified: 2025-03-20T14:38:49.501Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-03-20T15:18:22.000000Z"}, {"uuid": "085b4d07-a21f-421d-8998-0e418fc8adc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47726", "type": "seen", "source": "Telegram/hjMsE_X6QMSv9aBxyWUUaCWvpnvLdpWDXOnR9z_UmGt2ia9l", "content": "", "creation_timestamp": "2025-02-21T22:10:23.000000Z"}, {"uuid": "5e73cfba-be7c-46e5-bf34-672b31486b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47227", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8668", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47227\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: iRedAdmin before 2.6 allows XSS, e.g., via order_name.\n\ud83d\udccf Published: 2024-09-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T14:11:38.770Z\n\ud83d\udd17 References:\n1. https://github.com/iredmail/iRedAdmin/commit/b537e71ecf522d7f10180f5f0aab4a98a881893a\n2. https://www.iredmail.org\n3. https://github.com/iredmail/iRedAdmin/commit/3c72b438d412ea3ee0270f6956e19b1098c19191\n4. https://github.com/iredmail/iRedAdmin/compare/2.5...2.6\n5. https://docs.iredmail.org/upgrade.iredmail.1.6.8-1.7.0.html#upgrade-iredadmin-open-source-edition-to-the-latest-stable-release-26", "creation_timestamp": "2025-03-25T14:24:26.000000Z"}, {"uuid": "13a7c2b8-a7dc-4f9d-9c69-665e777c0687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47516", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47516\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance.\n\ud83d\udccf Published: 2025-03-25T23:21:52.492Z\n\ud83d\udccf Modified: 2025-03-25T23:21:52.492Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-47516\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2315805", "creation_timestamp": "2025-03-26T00:25:05.000000Z"}, {"uuid": "53e53768-d8e7-49e4-935d-1feb3b7766ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47260", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9274", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47260\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading more audio clips then designed resulting in the Axis device running out of memory.\u00a0\nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:17:35.063Z\n\ud83d\udccf Modified: 2025-03-28T07:13:48.640Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/1d/d3/ef/cve-2024-47260pdf-en-US-466883.pdf", "creation_timestamp": "2025-03-28T07:27:19.000000Z"}, {"uuid": "220f4cbb-9f2b-43de-abd6-41ecc52257dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47259", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47259\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files to the Axis device with the purpose to exhaust system resources. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:15:16.499Z\n\ud83d\udccf Modified: 2025-03-28T07:15:06.622Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/13/cd/4a/cve-2024-47259pdf-en-US-466882.pdf", "creation_timestamp": "2025-03-28T07:27:18.000000Z"}, {"uuid": "57aa3d04-4022-4558-8fbb-6eeb6fd53d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47262", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9275", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47262\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not affected. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:19:09.007Z\n\ud83d\udccf Modified: 2025-03-28T07:11:08.168Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf", "creation_timestamp": "2025-03-28T07:27:19.000000Z"}, {"uuid": "c4f99782-8e5a-4bed-acd7-ef1e6a8cc377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47212", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47214\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T20:22:16.256Z\n\ud83d\udd17 References:\n1. https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users", "creation_timestamp": "2025-04-03T20:35:44.000000Z"}, {"uuid": "1d2f6afc-09b7-4252-a44a-a00b72649308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47212", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10349", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47212\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T20:15:54.231Z\n\ud83d\udd17 References:\n1. https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users", "creation_timestamp": "2025-04-03T20:35:57.000000Z"}, {"uuid": "2969aad0-a8a4-45ac-9ae5-ce1992391697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47213", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47213\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted.\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T20:20:20.596Z\n\ud83d\udd17 References:\n1. https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users", "creation_timestamp": "2025-04-03T20:35:49.000000Z"}, {"uuid": "2e82cda5-321a-4c1e-af20-a4123467f20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47215", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47215\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected (latency, throughput).\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T20:25:42.201Z\n\ud83d\udd17 References:\n1. https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users", "creation_timestamp": "2025-04-03T20:35:43.000000Z"}, {"uuid": "a74350b3-8c71-4883-86a9-2e7ce77f1284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47217", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47217\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T20:28:06.431Z\n\ud83d\udd17 References:\n1. https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users", "creation_timestamp": "2025-04-03T20:35:42.000000Z"}, {"uuid": "4657622b-6b24-4fa5-815b-edd6b1efa846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47214", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47217\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T20:28:06.431Z\n\ud83d\udd17 References:\n1. https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users", "creation_timestamp": "2025-04-03T20:35:42.000000Z"}, {"uuid": "f2228c8a-f578-491d-8d40-e6ebd6b47a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47214", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47214\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T20:22:16.256Z\n\ud83d\udd17 References:\n1. https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users", "creation_timestamp": "2025-04-03T20:35:44.000000Z"}, {"uuid": "cae8e022-a502-45e5-a976-ecfaad1b6902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47827", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10568", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47827\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerability is fixed in 3.6.0-rc2.\n\ud83d\udccf Published: 2024-10-28T15:10:55.772Z\n\ud83d\udccf Modified: 2025-04-04T20:43:57.325Z\n\ud83d\udd17 References:\n1. https://github.com/argoproj/argo-workflows/security/advisories/GHSA-ghjw-32xw-ffwr\n2. https://github.com/argoproj/argo-workflows/pull/13641\n3. https://github.com/argoproj/argo-workflows/commit/524406451f4dfa57bf3371fb85becdb56a2b309a\n4. https://github.com/argoproj/argo-workflows/blob/ce7f9bfb9b45f009b3e85fabe5e6410de23c7c5f/workflow/metrics/metrics_k8s_request.go#L75", "creation_timestamp": "2025-04-04T21:36:22.000000Z"}, {"uuid": "c145fac8-b206-4784-9efe-6b5d91eef0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47261", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10849", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47261\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device.\n\ud83d\udccf Published: 2025-04-08T05:33:58.782Z\n\ud83d\udccf Modified: 2025-04-08T05:33:58.782Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/18/c5/b2/cve-2024-47261pdf-en-US-474505.pdf", "creation_timestamp": "2025-04-08T05:47:24.000000Z"}, {"uuid": "8a3a6256-fd4b-441f-b084-ec886e5c37b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47770", "type": "seen", "source": "Telegram/QUjVvhUeJmWIkRMgVDRen6i9vWmpRZKMojAQ8cq0WZw_kykY", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "72c089f4-98ad-4dfc-9a03-b2f7f9e8c756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4785", "type": "seen", "source": "Telegram/ULIe8cVDaxdGK8IgXST8NiheyEPbLVwCV7xE6w6r-vpIRAG1", "content": "", "creation_timestamp": "2025-02-06T02:40:18.000000Z"}, {"uuid": "ccfd2f58-7cbb-4d1c-a078-eceeb4b36861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47258", "type": "seen", "source": "Telegram/KxxEJ7RcNOrcWabPm9tNX9485-MM4pscZYvv4RDkqim0gbTd", "content": "", "creation_timestamp": "2025-02-21T15:03:13.000000Z"}, {"uuid": "22081f01-a805-42ab-adf5-d92d1aeb1847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47256", "type": "seen", "source": "Telegram/EwvAMLQaC2rGZHbw8XskBSmMb2j9Xp7EawnhRLxWatpqnmOs", "content": "", "creation_timestamp": "2025-02-21T15:03:13.000000Z"}, {"uuid": "f964e6ed-076f-47fd-86ae-4f73a1019c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47121", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47121\n\ud83d\udd25 CVSS Score: 6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The goTenna Pro App uses a weak password for sharing encryption keys via\n the key broadcast method. If the broadcasted encryption key is captured\n over RF, and password is cracked via brute force attack, it is possible\n to decrypt it and use it to decrypt all future and past messages sent \nvia encrypted broadcast with that particular key. This only applies when\n the key is broadcasted over RF. This is an optional feature, so it is \nrecommended to use local QR encryption key sharing for additional \nsecurity on this and previous versions.\n\ud83d\udccf Published: 2024-09-26T17:18:03.228Z\n\ud83d\udccf Modified: 2025-05-02T16:25:19.846Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04", "creation_timestamp": "2025-05-02T17:16:47.000000Z"}, {"uuid": "fd0b0124-e75e-4ba0-a255-f69703703e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47619\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.\n\ud83d\udccf Published: 2025-05-07T15:12:02.118Z\n\ud83d\udccf Modified: 2025-05-07T15:12:02.118Z\n\ud83d\udd17 References:\n1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-xr54-gx74-fghg\n2. https://github.com/syslog-ng/syslog-ng/commit/dadfdbecde5bfe710b0a6ee5699f96926b3f9006\n3. https://github.com/syslog-ng/syslog-ng/blob/b0ccc8952d333fbc2d97e51fddc0b569a15e7a7d/lib/transport/tls-verifier.c#L78-L110\n4. https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.2", "creation_timestamp": "2025-05-07T15:22:27.000000Z"}, {"uuid": "7cea3b09-1234-4d7b-a57c-22d9490ed692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47177\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE-2024-47176, this can lead to remote command execution.\n\nThis vulnerability has been disputed by a third party because `FoomaticRIPCommandLine` is functionality that is intended to execute administrator specified code.\n\ud83d\udccf Published: 2024-09-26T21:56:36.661Z\n\ud83d\udccf Modified: 2025-05-08T16:33:14.340Z\n\ud83d\udd17 References:\n1. https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47\n2. https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8\n3. https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5\n4. https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6\n5. https://bugzilla.suse.com/show_bug.cgi?id=1230931\n6. https://www.cups.org\n7. https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I", "creation_timestamp": "2025-05-08T17:24:19.000000Z"}, {"uuid": "0eb693f8-51a0-4bb4-b623-63fa3c748740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47177\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE-2024-47176, this can lead to remote command execution.\n\nThis vulnerability has been disputed by a third party because `FoomaticRIPCommandLine` is functionality that is intended to execute administrator specified code.\n\ud83d\udccf Published: 2024-09-26T21:56:36.661Z\n\ud83d\udccf Modified: 2025-05-08T16:33:14.340Z\n\ud83d\udd17 References:\n1. https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47\n2. https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8\n3. https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5\n4. https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6\n5. https://bugzilla.suse.com/show_bug.cgi?id=1230931\n6. https://www.cups.org\n7. https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I", "creation_timestamp": "2025-05-08T17:24:19.000000Z"}, {"uuid": "2690f7d9-bc9b-4fdc-ab4c-195581e82475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47800", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47800\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2025-05-13T21:03:21.454Z\n\ud83d\udccf Modified: 2025-05-13T21:03:21.454Z\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html", "creation_timestamp": "2025-05-13T21:30:57.000000Z"}, {"uuid": "fe278c51-a6ef-444b-abb7-95b444b8b819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47550", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16241", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47550\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2025-05-13T21:03:18.416Z\n\ud83d\udccf Modified: 2025-05-13T21:03:18.416Z\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01254.html", "creation_timestamp": "2025-05-13T21:31:00.000000Z"}, {"uuid": "02d47efb-b1fb-4528-98b9-b8f079b37bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47795", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16240", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47795\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2025-05-13T21:03:19.879Z\n\ud83d\udccf Modified: 2025-05-13T21:03:19.879Z\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01243.html", "creation_timestamp": "2025-05-13T21:30:59.000000Z"}, {"uuid": "88e85fd3-34b8-4600-87c3-4a4961d27ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47081", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17750", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47081\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.\n\ud83d\udccf Published: 2025-06-09T17:57:47.731Z\n\ud83d\udccf Modified: 2025-06-09T18:40:40.996Z\n\ud83d\udd17 References:\n1. https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7\n2. https://github.com/psf/requests/pull/6965\n3. https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef\n4. https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env\n5. https://seclists.org/fulldisclosure/2025/Jun/2", "creation_timestamp": "2025-06-09T19:48:12.000000Z"}, {"uuid": "63cdc9c3-425b-42a1-b488-de620895af6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47893", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16766", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47893\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or write data outside the Guest's virtualised GPU memory.\n\ud83d\udccf Published: 2025-05-17T00:47:52.800Z\n\ud83d\udccf Modified: 2025-05-17T00:47:52.800Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-05-17T01:35:07.000000Z"}, {"uuid": "80c70858-82ec-43e4-9c2a-955d01efbad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/GithubRedTeam/88926", "content": "", "creation_timestamp": "2026-07-14T00:00:41.953769Z"}, {"uuid": "da8ad0d6-70a8-443b-8f02-16882b86285d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47090", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47090\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS\n\ud83d\udccf Published: 2025-05-27T07:02:53.607Z\n\ud83d\udccf Modified: 2025-05-27T07:02:53.607Z\n\ud83d\udd17 References:\n1. https://www.nagvis.org/downloads/changelog/1.9.47", "creation_timestamp": "2025-05-27T07:48:15.000000Z"}, {"uuid": "4adec726-89b2-4e0f-8f19-7bed12a2c1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/15977", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aMautic < 5.2.3 Authenticated RCE\nURL\uff1ahttps://github.com/mallo-m/CVE-2024-47051\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-02-28T05:32:27.000000Z"}, {"uuid": "e28b83d8-b276-4077-b810-4974b0ff1f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47196", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18572", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47196\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows a specific tcl file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch vsimk.exe from a user-writable directory.\n\ud83d\udccf Published: 2024-10-08T08:40:49.065Z\n\ud83d\udccf Modified: 2025-06-17T08:11:22.933Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-426509.html", "creation_timestamp": "2025-06-17T08:37:11.000000Z"}, {"uuid": "636d7e81-fec7-4833-92de-ab7ca3465a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47552", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19827", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32897\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).\n\nThis security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow.\nThis issue affects Apache Seata (incubating): from 2.0.0 before 2.3.0.\n\nUsers are recommended to upgrade to version 2.3.0, which fixes the issue.\n\ud83d\udccf Published: 2025-06-28T18:25:18.312Z\n\ud83d\udccf Modified: 2025-06-28T18:25:18.312Z\n\ud83d\udd17 References:\n1. https://www.cve.org/CVERecord?id=CVE-2024-47552\n2. https://lists.apache.org/thread/9fhtf7yvpjpzlwd1m0wfgg6tp2btxpy1", "creation_timestamp": "2025-06-28T18:54:37.000000Z"}, {"uuid": "d590bd04-bee7-4770-b8fb-d7b9ed07080e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47716", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/8473", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47716 - Raspberry Pi ARM VFP Use-After-Free Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-47716 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros  \n  \nFloating point instructions in userspace can crash some arm kernels  \nbuilt with clang/LLD 17.0.6:  \n  \n    BUG: unsupported FP instruction in kernel mode  \n    FPEXC == 0xc0000780  \n    Internal error: Oops - undefined instruction: 0 [#1] ARM  \n    CPU: 0 PID: 196 Comm: vfp-reproducer Not tainted 6.10.0 #1  \n    Hardware name: BCM2835  \n    PC is at vfp_support_entry+0xc8/0x2cc  \n    LR is at do_undefinstr+0xa8/0x250  \n    pc : []    lr : []    psr: a0000013  \n    sp : dc8d1f68  ip : 60000013  fp : bedea19c  \n    r10: ec532b17  r9 : 00000010  r8 : 0044766c  \n    r7 : c0000780  r6 : ec532b17  r5 : c1c13800  r4 : dc8d1fb0  \n    r3 : c10072c4  r2 : c0101c88  r1 : ec532b17  r0 : 0044766c  \n    Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none  \n    Control: 00c5387d  Table: 0251c008  DAC: 00000051  \n    Register r0 information: non-paged memory  \n    Register r1 information: vmalloc memory  \n    Register r2 information: non-slab/vmalloc memory  \n    Register r3 information: non-slab/vmalloc memory  \n    Register r4 information: 2-page vmalloc region  \n    Register r5 information: slab kmalloc-cg-2k  \n    Register r6 information: vmalloc memory  \n    Register r7 information: non-slab/vmalloc memory  \n    Register r8 information: non-paged memory  \n    Register r9 information: zero-size pointer  \n    Register r10 information: vmalloc memory  \n    Register r11 information: non-paged memory  \n    Register r12 information: non-paged memory  \n    Process vfp-reproducer (pid: 196, stack limit = 0x61aaaf8b)  \n    Stack: (0xdc8d1f68 to 0xdc8d2000)  \n    1f60:                   0000081f b6f69300 0000000f c10073f4 c10072c4 dc8d1fb0  \n    1f80: ec532b17 0c532b17 0044766c b6f9ccd8 00000000 c010a80c 00447670 60000010  \n    1fa0: ffffffff c1c13800 00c5387d c0100f10 b6f68af8 00448fc0 00000000 bedea188  \n    1fc0: bedea314 00000001 00448ebc b6f9d000 00447608 b6f9ccd8 00000000 bedea19c  \n    1fe0: bede9198 bedea188 b6e1061c 0044766c 60000010 ffffffff 00000000 00000000  \n    Call trace:  \n    [] (vfp_support_entry) from [] (do_undefinstr+0xa8/0x250)  \n    [] (do_undefinstr) from [] (__und_usr+0x70/0x80)  \n    Exception stack(0xdc8d1fb0 to 0xdc8d1ff8)  \n    1fa0:                                     b6f68af8 00448fc0 00000000 bedea188  \n    1fc0: bedea314 00000001 00448ebc b6f9d000 00447608 b6f9ccd8 00000000 bedea19c  \n    1fe0: bede9198 bedea188 b6e1061c 0044766c 60000010 ffffffff  \n    Code: 0a000061 e3877202 e594003c e3a09010 (eef16a10)  \n    ---[ end trace 0000000000000000 ]---  \n    Kernel panic - not syncing: Fatal exception in interrupt  \n    ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---  \n  \nThis is a minimal userspace reproducer on a Raspberry Pi Zero W:  \n  \n    #include   \n    #include   \n  \n    int main(void)  \n    {  \n            double v = 1.0;  \n            printf(\"%fn\", NAN + *(volatile double *)&v);  \n            return 0;  \n    }  \n  \nAnother way to consistently trigger the oops is:  \n  \n    calvin@raspberry-pi-zero-w ~$ python -c \"import json\"  \n  \nThe bug reproduces only when the kernel is built with DYNAMIC_DEBUG=n,  \nbecause the pr_debug() calls act as barriers even when not activated.  \n  \nThis is the output from the same kernel source built with the same  \ncompiler and DYNAMIC_DEBUG=y, where the userspace reproducer works as  \nexpected:  \n  \n    VFP: bounce: trigger ec532b17 fpexc c0000780  \n    VFP: emulate: INST=0xee377b06 SCR=0x00000000  \n    VFP: bounce: trigger eef1fa10 fpexc c0000780  \n    VFP: emulate: INST=0xeeb40b40 SCR=0x00000000  \n    VFP: raising exceptions 30000000  \n  \n    calvin@raspberry-pi-zero-w ~$ ./vfp-reproducer  \n    nan  \n  \nCrudely grepping for vmsr/vmrs instruct[...]", "creation_timestamp": "2024-10-21T15:10:01.000000Z"}, {"uuid": "c0c7677d-8110-4084-b17c-6b1361f1ea87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47935", "type": "seen", "source": "https://t.me/cvedetector/18227", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47935 - TXOne Networks StellarProtect (Legacy Mode)/StellarEnforce/Safe Lock DLL Hijacking Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47935 \nPublished : Feb. 17, 2025, 6:15 a.m. | 25\u00a0minutes ago \nDescription : Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim\u2019s device. The attacker needs to hijack the DLL file in advance.  \nThis issue affects StellarProtect (Legacy Mode): before 3.2; StellarEnforce: before 3.2; Safe Lock: from 3.0.0 before 3.1.1076.  \n*Note: StellarProtect (Legacy Mode) is the new name for StellarEnforce, they are the same product. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T08:10:53.000000Z"}, {"uuid": "cc99be00-ce61-411a-9229-1d22568fc81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47266", "type": "seen", "source": "https://t.me/cvedetector/17981", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47266 - Synology Active Backup for Business Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47266 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to read specific files containing non-sensitive information via unspecified vectors. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:30.000000Z"}, {"uuid": "a1f7e8f5-d440-46b8-a7ab-af103c39cc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/cKure/13802", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 FortiManager Devices Mass Compromise Exploiting CVE-2024-47575 Vulnerability.\n\nhttps://cybersecuritynews.com/fortimanager-devices-mass-compromise/", "creation_timestamp": "2024-10-28T00:00:27.000000Z"}, {"uuid": "67306481-91d7-4471-88ca-3d76c4ddc96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4798", "type": "seen", "source": "Telegram/m9F_WPeFjpUXasfJkoEtxxocyJ8WwUmsMSo2FZVM5GNnOUIm", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "a6ed93a0-3639-41fa-8c24-d35afc173fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47516", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/5127", "content": "PoC'\u0438 \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u0435\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-4981 \u0438 CVE-2024-47515 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-4982 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 view_issue_raw_file() \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \"/..\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0433\u043e Issue. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47516 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PagureRepo.log(), \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \"git\" \u0441 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0432\u0435\u0442\u043a\u0438 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \"/usr/bin/git --pretty=oneline --abbrev-commit  -- README.md\"). \u041a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0432\u043c\u0435\u0441\u0442\u043e \u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u043e\u043f\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \"--output=/tmp/foo.bar\" \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0432 \u0444\u0430\u0439\u043b. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u0438\u0434\u0430:\n\n   http://pagure.local:5000/test/history/README.md?identifier=--output=/tmp/foo.bar\n\n- \u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 OBS (Open Build Service), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 openSUSE \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-22033), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 27 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0443 openSUSE 29 \u0438\u044e\u043d\u044f \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 10 \u0438\u044e\u043b\u044f.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Pagure \u0438 OBS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 Fedora \u0438 openSUSE\nhttps://www.opennet.ru/opennews/art.shtml?num=62928\n\n\u041e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\nhttps://fenrisk.com/supply-chain-attacks\n\n\u0414\u043e\u043a\u043b\u0430\u0434 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 insomni'hack 2025 (https://insomnihack.ch/), \u0441\u043b\u0430\u0439\u0434\u044b \u0441\u043a\u0438\u043d\u0443 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u044b", "creation_timestamp": "2025-03-22T21:04:30.000000Z"}, {"uuid": "f24f84f5-3166-4733-b10d-a4118a93de34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47515", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/5127", "content": "PoC'\u0438 \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u0435\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-4981 \u0438 CVE-2024-47515 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-4982 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 view_issue_raw_file() \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \"/..\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0433\u043e Issue. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47516 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PagureRepo.log(), \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \"git\" \u0441 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0432\u0435\u0442\u043a\u0438 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \"/usr/bin/git --pretty=oneline --abbrev-commit  -- README.md\"). \u041a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0432\u043c\u0435\u0441\u0442\u043e \u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u043e\u043f\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \"--output=/tmp/foo.bar\" \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0432 \u0444\u0430\u0439\u043b. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u0438\u0434\u0430:\n\n   http://pagure.local:5000/test/history/README.md?identifier=--output=/tmp/foo.bar\n\n- \u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 OBS (Open Build Service), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 openSUSE \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-22033), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 27 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0443 openSUSE 29 \u0438\u044e\u043d\u044f \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 10 \u0438\u044e\u043b\u044f.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Pagure \u0438 OBS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 Fedora \u0438 openSUSE\nhttps://www.opennet.ru/opennews/art.shtml?num=62928\n\n\u041e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\nhttps://fenrisk.com/supply-chain-attacks\n\n\u0414\u043e\u043a\u043b\u0430\u0434 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 insomni'hack 2025 (https://insomnihack.ch/), \u0441\u043b\u0430\u0439\u0434\u044b \u0441\u043a\u0438\u043d\u0443 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u044b", "creation_timestamp": "2025-03-22T21:04:30.000000Z"}, {"uuid": "bb78c376-316f-402b-bb43-8fd1359f44f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "published-proof-of-concept", "source": "Telegram/6x5JFB1mh-KsEZivZp3gjSaXJ58VhO2Ttj6R645bZY-KT8s", "content": "", "creation_timestamp": "2025-09-29T15:00:07.000000Z"}, {"uuid": "0b27315e-c89b-4301-a58a-e1b18596271c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47264", "type": "seen", "source": "https://t.me/cvedetector/17986", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47264 - Synology Active Backup for Business Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47264 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to delete arbitrary files via unspecified vectors. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:36.000000Z"}, {"uuid": "24f9f64c-fe62-444a-8a73-17871ff127e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47265", "type": "seen", "source": "https://t.me/cvedetector/17980", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47265 - Synology Active Backup for Business Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47265 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users to write specific files via unspecified vectors. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:29.000000Z"}, {"uuid": "90341045-f220-4bfd-8227-d03783902d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/BleepingComputer/20896", "content": "\u200aFortinet warns of new critical FortiManager flaw used in zero-day attacks\n\nFortinet publicly disclosed today a critical\u00a0FortiManager API vulnerability, tracked as CVE-2024-47575,\u00a0that was exploited in zero-day attacks to steal sensitive files containing configurations, IP addresses, and credentials for managed devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-critical-fortimanager-flaw-used-in-zero-day-attacks/", "creation_timestamp": "2024-10-23T16:01:18.000000Z"}, {"uuid": "f69758ee-fb6c-463d-80a1-b87b8efc1f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47006", "type": "seen", "source": "https://t.me/cvedetector/17945", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47006 - Intel RealSense D400 Series UWP Driver Uncontrolled Search Path Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47006 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : Uncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:26:05.000000Z"}, {"uuid": "03de13b8-182b-4692-a383-ec86ac1d4891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47559", "type": "seen", "source": "https://t.me/cvedetector/7261", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47559 - Apache HTTP Server Path Traversal Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47559 \nPublished : Oct. 7, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Authenticated RCE via Path Traversal \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T21:49:10.000000Z"}, {"uuid": "fb6dbb4f-748c-47c2-9418-2066a8a41bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "seen", "source": "https://t.me/cybersecplayground/116", "content": "\ud83d\udea8 Critical Alert: CVE-2024-47051 (CVSS 9.1) \u2013 Mautic RCE & File Deletion Vulnerability \ud83d\udea8\n\n\ud83d\udd25 What is CVE-2024-47051?\nA critical security flaw has been discovered in Mautic (before version 5.2.3) that allows:\n\nRemote Code Execution (RCE): \nAttackers can run arbitrary commands on the server.\nArbitrary File Deletion: Attackers can delete critical files, leading to system compromise or service disruption.\n\n\ud83c\udfaf Impact & Risk\nWidespread Exposure: Over 200,000 organizations rely on Mautic for marketing automation.\nPublic-Facing Instances: Many exposed instances are accessible on the internet, making them high-value targets.\n\nPotential Consequences:\nFull server takeover by exploiting RCE\nDeletion of essential system files leading to denial of service (DoS)\nSensitive data leakage\n\n\ud83d\udd0d Detection & Exploitation\n\ud83d\udcca Hunter Exposure: 64K+ instances found on Hunter.\n\n\ud83d\udd0e Dorks:\n\nFOFA: product=\"Mautic\"\nHunter: product.name=\"Mautic\"\n\n\ud83d\udee1 Mitigation & Fix\n\u2705 Upgrade to Mautic 5.2.3+ immediately.\n\u2705 Restrict access to Mautic instances using firewalls and authentication.\n\u2705 Monitor logs for unusual activities or unauthorized access attempts.\n\u2705 Use Web Application Firewalls (WAFs) to detect and block exploit attempts.\n\n\ud83d\udcf0 References & More Info\n\ud83d\udd17 SecurityOnline Info\n\n\ud83d\udce2 Join us for more security updates! \ud83d\udc49 @cybersecplayground\n\n#Mautic #hunterhow #infosec #infosecurity #OSINT #Vulnerability #cybersecplayground \ud83d\ude80", "creation_timestamp": "2025-03-03T06:08:17.000000Z"}, {"uuid": "f3c72f1a-b84c-4244-bd34-4da8a3a100c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "published-proof-of-concept", "source": "Telegram/OoyvOxhDepv_VW-3kj9cRIaGdoLcZyggYa8Ds5zdnxyRhfM", "content": "", "creation_timestamp": "2025-08-12T03:00:06.000000Z"}, {"uuid": "49abe094-14c0-471e-bfa9-86a3ed5bf122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "published-proof-of-concept", "source": "Telegram/lGYbLck6G7m7DaRiRxfjxEzwq5qsYzU-Axb6YLGnEcc6ewQ", "content": "", "creation_timestamp": "2025-08-12T21:00:04.000000Z"}, {"uuid": "9605bfa8-ee0e-4515-ac0a-1562966144d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "published-proof-of-concept", "source": "Telegram/GOTTM65EgyVoCQGOof2_QgaOPidZDWRgWuC5NvVOBl6NuZQ", "content": "", "creation_timestamp": "2025-08-15T07:00:12.000000Z"}, {"uuid": "e3e8454a-0730-40b4-b111-c81f4b4ec425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47558", "type": "seen", "source": "https://t.me/cvedetector/7260", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47558 - Apache Struts Command Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47558 \nPublished : Oct. 7, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Authenticated RCE via Path Traversal \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T21:49:09.000000Z"}, {"uuid": "e8ea4ce0-5a7b-44a1-897d-708c6bbc90b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47557", "type": "seen", "source": "https://t.me/cvedetector/7259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47557 - \"Apache FileParser Path Traversal RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-47557 \nPublished : Oct. 7, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Pre-Auth RCE via Path Traversal \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T21:49:08.000000Z"}, {"uuid": "627ad4f6-3109-4d8f-aba3-1586f91d7466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4431", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2024-09-27T10:55:39.000000Z"}, {"uuid": "5ff4c912-8b63-46c8-bf70-69b004971bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4433", "content": "Scan for CVE-2024-47176 (CUPS - Remote Code Execution) with Nuclei\n\nVulnerability discovery: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\nNuclei Template: https://cloud.projectdiscovery.io/?template=CVE-2024-47176\n\nSource: https://x.com/pdnuclei/status/1840195177098453308", "creation_timestamp": "2024-09-29T08:25:27.000000Z"}, {"uuid": "20d53f98-7e2e-4956-944a-fad4ee86f2f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4431", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2024-09-27T10:55:39.000000Z"}, {"uuid": "ba857a1e-36c8-42ae-8c84-23619406f6cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4431", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2024-09-27T10:55:39.000000Z"}, {"uuid": "7f3d9360-a972-4c3a-b43b-44a7d017339e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4431", "content": "\ud83d\udc27 Cupshax - RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 UNIX\n#unix #RCE #CVE\n\nCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u0432\u043e\u0434\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0431\u0430\u0433\u0435 \u0432 UNIX \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RCE. \u041d\u043e \u0431\u044b\u043b\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 \u043f\u0435\u0447\u0430\u0442\u044c. \u0412 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u043e\u0441\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f PoC.\n\n\ud83d\udee0 \u0418\u0437\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0439\u0442\u0430\u043f \u0422\u0423\u0422\n\n\u0410\u0432\u0442\u043e\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043a\u043e\u043c\u043c\u0438\u0442 \u0432 OpenPrinting CUPS, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u0430\u0433\u0430 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 dns-sd \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, \u0442\u0440\u0435\u0431\u0443\u044f, \u0447\u0442\u043e\u0431\u044b \u0446\u0435\u043b\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0442.\u0435. \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\nusage: cupshax.py [-h] [--name NAME] --ip IP [--command COMMAND] [--port PORT]\n\nA script for executing commands remotely\n\noptions:\n  -h, --help         show this help message and exit\n  --name NAME        The name to use (default: RCE Printer)\n  --ip IP            The IP address of the machine running this script\n  --command COMMAND  The command to execute (default: 'touch /tmp/pwn')\n  --port PORT        The port to connect on (default: 8631)\n\n\u27a1\ufe0f\u041f\u0440\u0438\u043c\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f\npython cupshax.py --name \"Print to PDF (Color)\" \\\n                  --command \"id>/tmp/pwn\" \\\n                  --ip 10.0.0.3\n\n\ud83d\udcf1 Github \u0438 \u043c\u043e\u0439 \u0444\u043e\u0440\u043a, \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043f\u044b\n\n\ud83c\udf1a @poxek | \ud83d\udcfa RuTube | \ud83c\udf1a \u041c\u0435\u0440\u0447 \u041f\u043e\u0445\u0435\u043a", "creation_timestamp": "2024-09-27T10:55:39.000000Z"}, {"uuid": "98b99aa1-87f2-4654-95e1-460222b1c988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/purple_medved/301", "content": "UoWPrint\n\nValdikSS - \u043c\u043e\u0439 \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0434\u0440\u0443\u0433, \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u043b\u0438\u0432\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043b\u044e\u0434\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\ud83d\udd25 \n\nUoWPrint - \u044d\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 AirPrint \u0438 Mopria \u0447\u0435\u0440\u0435\u0437 Wi-Fi, \u043d\u0430 Orange Pi 3G-IoT-A. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0441\u0442\u0430\u0440\u044b\u0439 USB-\u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440/\u041c\u0424\u0423 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 Wi-Fi \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437 \u043b\u044e\u0431\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Windows, macOS, Linux, iOS \u0438 Android) \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\n\n\u0423 \u043c\u0435\u043d\u044f \u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0439-\u0434\u043e\u0431\u0440\u044b\u0439 \u041c\u0424\u0423 HP LaserJet M1123 \u0438 \u044f \u043f\u043e\u043c\u043d\u044e \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0441\u0442\u0440\u0430\u0434\u0430\u043d\u0438\u0439 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u043e\u0434 ARMv7 \u043d\u0430 3-\u0435\u0439 \u043c\u0430\u043b\u0438\u043d\u043a\u0435 \u0438 \u0437\u0430\u0432\u0435\u0441\u0442\u0438 CUPS, \u0447\u0442\u043e\u0431\u044b \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c, \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0437\u0430\u0434\u0443\u043c\u0447\u0438\u0432\u043e \u0438 \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\ud83d\ude48 \n\nUoWPrint \u0436\u0435 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043f\u043e USB, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0442\u043e\u0447\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0441\u044f \u043a \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 (\u0434\u0430\u043b\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u044b \u043a\u043d\u043e\u043f\u043e\u043a\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435) \u0438 \u043d\u0430\u0441\u043b\u0430\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\ud83d\ude4f\n\u0414\u0435\u0432\u0430\u0439\u0441 \u0437\u0430 2000 \u0440\u0443\u0431 (~25$) \u044d\u0442\u043e \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u044c \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u0438\u043a\u0430 Orange Pi 3G-IoT-A \u0441 \u0430\u043a\u0440\u0438\u043b\u043e\u0432\u044b\u043c \u043a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u043e\u0444\u0442\u043e\u043c UoWPrint. \u0418\u0437 \u044d\u0442\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0441 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 - 2$ \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c CUPS, 2$ - \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c SANE/AirSane, \u0430 \u0435\u0449\u0435 2$ \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 Canon CAPT (v2+). \n\u0410 \u0442\u0430\u043a \u0436\u0435 \u0441\u044e\u0434\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u043f\u0430\u0442\u0447\u0438\ud83d\udc4d \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 CUPS (CVE-2024-47175, CVE-2024-47076, CVE-2024-47176), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b 26.09.24, \u043f\u043e\u0444\u0438\u043a\u0448\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 v1.15 \u043e\u0442 04.10.24\n\nPS: \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0434\u0430\u043d\u044b, \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 printserver.ink", "creation_timestamp": "2024-10-14T07:02:16.000000Z"}, {"uuid": "f4f22b59-3c03-4885-9f59-80d9fbf4279a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/purple_medved/301", "content": "UoWPrint\n\nValdikSS - \u043c\u043e\u0439 \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0434\u0440\u0443\u0433, \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u043b\u0438\u0432\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043b\u044e\u0434\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\ud83d\udd25 \n\nUoWPrint - \u044d\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 AirPrint \u0438 Mopria \u0447\u0435\u0440\u0435\u0437 Wi-Fi, \u043d\u0430 Orange Pi 3G-IoT-A. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0441\u0442\u0430\u0440\u044b\u0439 USB-\u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440/\u041c\u0424\u0423 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 Wi-Fi \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437 \u043b\u044e\u0431\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Windows, macOS, Linux, iOS \u0438 Android) \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\n\n\u0423 \u043c\u0435\u043d\u044f \u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0439-\u0434\u043e\u0431\u0440\u044b\u0439 \u041c\u0424\u0423 HP LaserJet M1123 \u0438 \u044f \u043f\u043e\u043c\u043d\u044e \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0441\u0442\u0440\u0430\u0434\u0430\u043d\u0438\u0439 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u043e\u0434 ARMv7 \u043d\u0430 3-\u0435\u0439 \u043c\u0430\u043b\u0438\u043d\u043a\u0435 \u0438 \u0437\u0430\u0432\u0435\u0441\u0442\u0438 CUPS, \u0447\u0442\u043e\u0431\u044b \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c, \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0437\u0430\u0434\u0443\u043c\u0447\u0438\u0432\u043e \u0438 \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\ud83d\ude48 \n\nUoWPrint \u0436\u0435 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043f\u043e USB, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0442\u043e\u0447\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0441\u044f \u043a \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 (\u0434\u0430\u043b\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u044b \u043a\u043d\u043e\u043f\u043e\u043a\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435) \u0438 \u043d\u0430\u0441\u043b\u0430\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\ud83d\ude4f\n\u0414\u0435\u0432\u0430\u0439\u0441 \u0437\u0430 2000 \u0440\u0443\u0431 (~25$) \u044d\u0442\u043e \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u044c \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u0438\u043a\u0430 Orange Pi 3G-IoT-A \u0441 \u0430\u043a\u0440\u0438\u043b\u043e\u0432\u044b\u043c \u043a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u043e\u0444\u0442\u043e\u043c UoWPrint. \u0418\u0437 \u044d\u0442\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0441 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 - 2$ \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c CUPS, 2$ - \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c SANE/AirSane, \u0430 \u0435\u0449\u0435 2$ \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 Canon CAPT (v2+). \n\u0410 \u0442\u0430\u043a \u0436\u0435 \u0441\u044e\u0434\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u043f\u0430\u0442\u0447\u0438\ud83d\udc4d \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 CUPS (CVE-2024-47175, CVE-2024-47076, CVE-2024-47176), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b 26.09.24, \u043f\u043e\u0444\u0438\u043a\u0448\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 v1.15 \u043e\u0442 04.10.24\n\nPS: \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0434\u0430\u043d\u044b, \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 printserver.ink", "creation_timestamp": "2024-10-14T07:02:16.000000Z"}, {"uuid": "0e9ffbac-ff64-44e0-a89b-977bf42f2c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/purple_medved/301", "content": "UoWPrint\n\nValdikSS - \u043c\u043e\u0439 \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0434\u0440\u0443\u0433, \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u043b\u0438\u0432\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043b\u044e\u0434\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0443\u0442\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\ud83d\udd25 \n\nUoWPrint - \u044d\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 AirPrint \u0438 Mopria \u0447\u0435\u0440\u0435\u0437 Wi-Fi, \u043d\u0430 Orange Pi 3G-IoT-A. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0441\u0442\u0430\u0440\u044b\u0439 USB-\u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440/\u041c\u0424\u0423 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 Wi-Fi \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437 \u043b\u044e\u0431\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Windows, macOS, Linux, iOS \u0438 Android) \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\n\n\u0423 \u043c\u0435\u043d\u044f \u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0439-\u0434\u043e\u0431\u0440\u044b\u0439 \u041c\u0424\u0423 HP LaserJet M1123 \u0438 \u044f \u043f\u043e\u043c\u043d\u044e \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0441\u0442\u0440\u0430\u0434\u0430\u043d\u0438\u0439 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u043e\u0434 ARMv7 \u043d\u0430 3-\u0435\u0439 \u043c\u0430\u043b\u0438\u043d\u043a\u0435 \u0438 \u0437\u0430\u0432\u0435\u0441\u0442\u0438 CUPS, \u0447\u0442\u043e\u0431\u044b \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c, \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0437\u0430\u0434\u0443\u043c\u0447\u0438\u0432\u043e \u0438 \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\ud83d\ude48 \n\nUoWPrint \u0436\u0435 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043f\u043e USB, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0442\u043e\u0447\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0441\u044f \u043a \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 (\u0434\u0430\u043b\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u044b \u043a\u043d\u043e\u043f\u043e\u043a\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435) \u0438 \u043d\u0430\u0441\u043b\u0430\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\ud83d\ude4f\n\u0414\u0435\u0432\u0430\u0439\u0441 \u0437\u0430 2000 \u0440\u0443\u0431 (~25$) \u044d\u0442\u043e \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u044c \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u0438\u043a\u0430 Orange Pi 3G-IoT-A \u0441 \u0430\u043a\u0440\u0438\u043b\u043e\u0432\u044b\u043c \u043a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u043e\u0444\u0442\u043e\u043c UoWPrint. \u0418\u0437 \u044d\u0442\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0441 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 - 2$ \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c CUPS, 2$ - \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c SANE/AirSane, \u0430 \u0435\u0449\u0435 2$ \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 Canon CAPT (v2+). \n\u0410 \u0442\u0430\u043a \u0436\u0435 \u0441\u044e\u0434\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u043f\u0430\u0442\u0447\u0438\ud83d\udc4d \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 CUPS (CVE-2024-47175, CVE-2024-47076, CVE-2024-47176), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b 26.09.24, \u043f\u043e\u0444\u0438\u043a\u0448\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 v1.15 \u043e\u0442 04.10.24\n\nPS: \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0434\u0430\u043d\u044b, \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 printserver.ink", "creation_timestamp": "2024-10-14T07:02:16.000000Z"}, {"uuid": "7666c4fb-6a4f-40ec-8fa1-35a4f06db3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "published-proof-of-concept", "source": "Telegram/ZmNdkUlwMi8wIyWb9PMqpqbhuxrMGAAlpZqMM06bDWpior15", "content": "", "creation_timestamp": "2025-07-13T02:12:00.000000Z"}, {"uuid": "d89ad265-13a7-47db-bfe1-d7800ab94cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/itsec_news/5763", "content": "\u200b\u26a1\ufe0fSet_password, \u0438 \u0432\u0443\u0430\u043b\u044f: FortiSwitch \u0441\u0430\u043c \u043e\u0442\u0434\u0430\u0451\u0442 \u043a\u043b\u044e\u0447\u0438\n\n\ud83d\udcac Fortinet \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiSwitch, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 FortiSwitch \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-48887 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSwitch. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 endpoint set_password \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0430 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0451 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u0433\u0434\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043e\u0442\u043a\u0440\u044b\u0442.\n\n\u041f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 FortiSwitch \u043e\u0442 6.4.0 \u0434\u043e 7.6.0. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 6.4.15, 7.0.11, 7.2.9, 7.4.5 \u0438 7.6.1. \u0422\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c HTTP \u0438 HTTPS-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OS command injection \u0432 FortiIsolator (CVE-2024-54024) \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 MitM-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice \u0438 FortiWeb (CVE-2024-26013 \u0438 CVE-2024-50565). \u0412\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\nFortinet \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DeepData \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Zero-Day \u0432 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 FortiClient VPN. \u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47575, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u043c\u044f FortiJump , \u2014 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u043e\u043b\u0435\u0435 50 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 FortiManager.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439. \u0412\u0441\u0435 \u044d\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Fortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0444\u043e\u043a\u0443\u0441\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nFortinet \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0440\u043e\u0441\u0442\u0430 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-11T05:28:39.000000Z"}, {"uuid": "9caefaa1-749c-4769-bb0d-cfc1fac88fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47810", "type": "seen", "source": "https://t.me/CyberBulletin/1792", "content": "\u26a1\ufe0fCVE-2024-49576 and CVE-2024-47810: Foxit Addresses Remote Code Execution Flaws.\n\n#CyberBulletin", "creation_timestamp": "2024-12-20T16:20:05.000000Z"}, {"uuid": "bd8394f2-e0b0-4e60-9ceb-02352a901cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47900", "type": "seen", "source": "https://t.me/cvedetector/16878", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47900 - Apache OpenCL Graphic Processing Unit (GPU) Out-of-Bounds (OOB) Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47900 \nPublished : Jan. 31, 2025, 4:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:19.000000Z"}, {"uuid": "1b6a59ee-af75-4432-8884-24265f8e0b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47899", "type": "seen", "source": "https://t.me/cvedetector/16877", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47899 - Google GPU Use-After-Free Kernel Exception\", \n  \"Content\": \"CVE ID : CVE-2024-47899 \nPublished : Jan. 31, 2025, 4:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:19.000000Z"}, {"uuid": "df212302-3e56-4138-a03f-d7512d2e1311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47898", "type": "seen", "source": "https://t.me/cvedetector/16876", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47898 - \"Gigabyte Graphics GPU use-after-free Kernel Exception\"\", \n  \"Content\": \"CVE ID : CVE-2024-47898 \nPublished : Jan. 31, 2025, 4:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:18.000000Z"}, {"uuid": "4a1ac1c8-7239-45c9-a759-97e2c93c8888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47891", "type": "seen", "source": "https://t.me/cvedetector/16875", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47891 - Apache wxWidgets GPU Use-After-Free\", \n  \"Content\": \"CVE ID : CVE-2024-47891 \nPublished : Jan. 31, 2025, 4:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:14.000000Z"}, {"uuid": "e9e5ffba-ab83-405d-9fa8-d63cc85cbe2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "Telegram/h9HbZ2k29WBhPqZedI7raK6Z0Uo2xDhBpR3YwH0Zr2iyDfc", "content": "", "creation_timestamp": "2025-07-22T12:59:19.000000Z"}, {"uuid": "b7347f39-381e-46ba-a93e-0b1b065aaf30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/kasperskyb2b/1256", "content": "\u0421\u043d\u043e\u0432\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome \u2014 \u0442\u0440\u0435\u0442\u0438\u0439 0day \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \ud83d\ude33\n\nGoogle \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.0.6422.60/.61 \u0434\u043b\u044f Windows \u0438 125.0.6422.60 \u0434\u043b\u044f Linux.\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2024-4947 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u041e \u043d\u0435\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0438 \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0412\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f!\n\n\u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0441\u044f \ud83d\udc7f, \u0437\u0430\u043e\u0434\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 0day, \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u0440\u0430\u043d\u0435\u0435:  CVE-2024-4671 \u0438 CVE-2024-4761.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2024-05-16T16:16:04.000000Z"}, {"uuid": "f4c99d97-e773-45cc-a7ff-93ade2bfd2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47556", "type": "seen", "source": "https://t.me/cvedetector/7258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47556 - Adobe Acrobat Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47556 \nPublished : Oct. 7, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Pre-Auth RCE via Path Traversal \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T21:49:07.000000Z"}, {"uuid": "4d0943e4-39dd-4058-8654-3182313eca56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "exploited", "source": "https://t.me/kasperskyb2b/1433", "content": "\ud83d\udda8 \u0421\u0442\u0440\u0430\u0445 \u0438 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u044c \u0432 \u041b\u0430\u0441-\u041b\u0438\u043d\u0443\u043a\u0441\u0435\n\n\u0421 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0440\u0430\u043c\u0430 \u0432\u043e\u043a\u0440\u0443\u0433 \u0441\u0435\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 CUPS, Common Unix Printing System. \u041a \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f\u043c, \u0441\u0442\u0440\u0430\u0445\u0430\u043c \u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u043a\u0430\u043c \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442\u044b CVE-2024-47176, -47076, -47175, \u0438 -47177 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0432 \u0442\u0435\u043e\u0440\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0435.  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 CUPS \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0441\u043d\u0430\u0431\u0434\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430, PPD, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439, \u0435\u0441\u043b\u0438 \u043d\u0430 \u044d\u0442\u043e\u043c \u00ab\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435\u00bb \u0447\u0442\u043e-\u0442\u043e \u043d\u0430\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c. \u0412 \u044d\u0442\u043e\u043c \u0433\u043b\u0430\u0432\u043d\u0430\u044f \u0437\u0430\u0433\u0432\u043e\u0437\u0434\u043a\u0430 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u043d\u0443\u0436\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043d\u0430 \u043d\u0435\u0437\u043d\u0430\u043a\u043e\u043c\u043e\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435. \u0414\u0435\u0444\u0435\u043a\u0442\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Linux.\n\n\u0414\u0440\u0430\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u043d\u0430\u0448\u0435\u0434\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0430\u043b \u043e\u0431\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u043c\u0435\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 CUPS \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u043e \u043d\u0438\u0445 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442 \u0438 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c. \u041e\u0431\u0435\u0449\u0430\u043d\u0438\u044f \u00abRCE \u0441 CVSS 9.9\u00bb \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0432\u0437\u0431\u0443\u0434\u043e\u0440\u0430\u0436\u0438\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e, \u0438 \u043e \u0431\u0430\u0433\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0432\u0441\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 VM-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e PoC.\n\u041d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u0434 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u043c \u2014 \u043f\u0435\u0447\u0430\u0442\u044c \u0441 Linux-\u043c\u0430\u0448\u0438\u043d  \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043d\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0440\u0442 631 \u0435\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443 \u0441\u0430\u043c\u044b\u0445 \u0431\u0435\u0441\u043f\u0435\u0447\u043d\u044b\u0445, \u0438, \u043e\u043f\u044f\u0442\u044c \u0436\u0435, \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c \u0447\u0442\u043e-\u0442\u043e \u043d\u0430 \u043d\u043e\u0432\u043e\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435 \u043d\u0435\u043b\u0435\u0433\u043a\u043e.\n\n\u041d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0451 \u0436\u0435 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f: \u0443\u0436\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0435\u0444\u0435\u043a\u0442\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Akamai (\u043d\u0430 \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0430\u0446\u0438\u0438), \u0432 \u0441\u0435\u0442\u044c \u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u043e\u043a\u043e\u043b\u043e 75 \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 CUPS, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0435\u0447\u0430\u0442\u0438 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 10% Linux-\u0441\u0438\u0441\u0442\u0435\u043c. \u0412 \u0420\u0424 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 5000 \u0445\u043e\u0441\u0442\u043e\u0432.   \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0430\u0442\u0447\u0435\u0439, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438 \u0434\u0435\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 cups-browsed, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \n\u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u0440\u0442 631.\n\n\u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u043e\u043c\u0443 \u043d\u0443\u0436\u043d\u043e \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 CUPS \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 RedHat.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2024-10-01T08:24:43.000000Z"}, {"uuid": "d2bde032-7b9d-46ec-8e2a-685d7a4fb627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/kasperskyb2b/1476", "content": "\ud83c\udf83 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83c\udfea\u041d\u0435\u0434\u0435\u043b\u044f \u0431\u044b\u043b\u0430 \u0431\u043e\u0433\u0430\u0442\u0430 \u043d\u0430 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043e Lazarus. \u042d\u0442\u043e\u0442 APT-\u0430\u043a\u0442\u043e\u0440, \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043b\u044e\u0431\u044f\u0449\u0438\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443:\n\ud83c\udd97 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0443\u044e MOBA-\u0438\u0433\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u0438\u043d\u0432\u0435\u0441\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0435\u0451 \u0441\u0430\u0439\u0442 \u0438 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u0412\u041f\u041e, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 Chrome. \u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0438\u0433\u0440\u044b \u0432\u0435\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u0430 \u0432 \u0441\u043e\u0446\u043c\u0435\u0434\u0438\u0430;\n\ud83c\udd97 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 npm-\u043f\u0430\u043a\u0435\u0442 NFT_marketplace, \u0437\u0430\u0440\u0430\u0436\u0430\u044e\u0449\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c BeaverTail;\n\ud83c\udd97 \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \"\u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\" \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0412\u041f\u041e \u043d\u0430 Python.\n\n\u2757\ufe0f \u041e\u0431\u0437\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u0432: Kral, Amos, Vidar.\n\n\u2757\ufe0f \u0426\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0430\u0440\u043c\u044f\u043d\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0436\u0435\u0440\u0442\u0432 \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044e\u0442 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 PowerShell \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0449\u0438\u0439 PDQ RMM. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u044e\u0442 \u0430\u0442\u0430\u043a\u0443 APT MuddyWater.\n\n\u2757\ufe0f\u0420\u0430\u0437\u0431\u043e\u0440 \u0441\u0432\u0435\u0436\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0430\u043d\u043a\u0435\u0440\u0430 Grandoreiro, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0440\u0430\u0436\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 1700 \u0431\u0430\u043d\u043a\u043e\u0432 \u0432 45 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u044d\u0442\u043e Windows \u0412\u041f\u041e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0432\u0435\u0442\u0430\u0442\u044c, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0440\u043e\u0441\u0442 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u0430\u043d\u043a\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0441\u0451\u043c \u043c\u0438\u0440\u0435.\n\n\u2757\ufe0f\u041d\u043e\u0432\u044b\u0435 \u0434\u0435\u044f\u0442\u0435\u043b\u0438 \u043d\u0430 \u0430\u0440\u0435\u043d\u0435 ransomware: Embargo. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0412\u041f\u041e \u043d\u0430 Rust \u0438 \u0433\u043b\u0443\u0448\u0430\u0442 EDR \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 MS4Killer.\n\n\u2757\ufe0f\u0410 \u0430\u0432\u0442\u043e\u0440\u044b Akira ransomware \u0440\u0430\u0437\u043e\u0447\u0430\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 v2 \u043d\u0430 Rust  \u0438 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u043a \u0441\u0442\u0430\u0440\u043e\u0439 \u0441\u0445\u0435\u043c\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 C++.\n\n\u2757\ufe0f\u041d\u043e\u0432\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u0445\u043e\u0434\u0430 \u043e\u0442 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 Quilin/Agenda RaaS. \n\n\u2757\ufe0f\u0421\u0435\u0440\u0432\u0435\u0440\u044b Docker \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u0431\u043e\u0442\u043e\u043c SRBminer. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b gRPC \u043f\u043e\u0432\u0435\u0440\u0445 h2c (HTTP/2 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f).\n\n\u041d\u0435\u0434\u0435\u043b\u044f \u043f\u0440\u043e\u0448\u043b\u0430 \u0431\u043e\u0434\u0440\u043e \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\ud83c\udd97 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c Cisco \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 36 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 ASA & FTD, CVE-2024-20481, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 RAVPN.\n\n\ud83c\udd97 Fortinet \u0437\u0430\u043a\u0440\u044b\u043b\u0430 CVE-2024-47575, RCE \u0432 FortiManager, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e. \u0413\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0441\u0445\u0435\u043c\u0430 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u043e\u0432\u0430: \u0447\u0435\u0440\u0435\u0437 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0442 MSP, \u0430 \u0437\u0430\u0442\u0435\u043c \u2014 \u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u2757\ufe0f\u041d\u0435 \u0441\u0435\u0442\u0435\u0432\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u043d\u043e \u0442\u043e\u0436\u0435 \u0431\u043e\u0434\u0440\u043e \u2014  CVE-2024-38094 \u0432 SharePoint server \u0431\u044b\u0441\u0442\u0440\u043e \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c PoC, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0451 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2024-10-28T12:05:13.000000Z"}, {"uuid": "e802041e-9729-4ae0-8247-57b89d9001a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47555", "type": "seen", "source": "https://t.me/cvedetector/7257", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47555 - Adobe Commerce Missing Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47555 \nPublished : Oct. 7, 2024, 6:15 p.m. | 39\u00a0minutes ago \nDescription : Missing Authentication - User & System Configuration \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T20:58:59.000000Z"}, {"uuid": "6adbfe5d-5de4-4901-951e-a6772a496048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/CyberBulletin/1425", "content": "\u26a1\ufe0fUnpatched Epson Devices at Risk: CVE-2024-47295 Allows Easy Hijacking.\n\n#CyberBulletin", "creation_timestamp": "2024-11-11T14:48:24.000000Z"}, {"uuid": "763bdbf1-6f72-4a50-b485-562d59da357e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47901", "type": "seen", "source": "https://t.me/CyberBulletin/1270", "content": "\u26a1\ufe0fCVE-2024-47901 (CVSS 10): Critical Security Flaw in Siemens InterMesh.\n\n#CyberBulletin", "creation_timestamp": "2024-10-25T07:32:17.000000Z"}, {"uuid": "819428de-7946-4f54-a191-5d0164e85d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47784", "type": "seen", "source": "https://t.me/cvedetector/24138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47784 - ANC Software Password Change Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47784 \nPublished : April 30, 2025, 7:15 p.m. | 37\u00a0minutes ago \nDescription : Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI  \nThis issue affects ANC software version 1.1.4 and earlier. \nSeverity: 2.6 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T22:06:05.000000Z"}, {"uuid": "fa1a587b-60de-4b84-be34-7cee8434fd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47261", "type": "seen", "source": "https://t.me/cvedetector/22397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47261 - Axis VAPIX API File Upload Vulnerability (Arbitrary File Upload)\", \n  \"Content\": \"CVE ID : CVE-2024-47261 \nPublished : April 8, 2025, 6:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T09:48:30.000000Z"}, {"uuid": "8eece8fa-80b1-4253-aac7-890aac073e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/18929", "content": "https://github.com/navidrome/navidrome/security/advisories/GHSA-58vj-cv5w-v4v6\n\ncve-2024-47062\n\n#github #poc", "creation_timestamp": "2024-09-26T11:12:38.000000Z"}, {"uuid": "fcf346d3-760e-4456-a2a7-471f8cafe2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47217", "type": "seen", "source": "https://t.me/cvedetector/22048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47217 - Iglu Server Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-47217 \nPublished : April 3, 2025, 9:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T02:07:10.000000Z"}, {"uuid": "eb776b22-35ba-4df7-b40f-1b2ba86bffc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47214", "type": "seen", "source": "https://t.me/cvedetector/22048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47217 - Iglu Server Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-47217 \nPublished : April 3, 2025, 9:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T02:07:10.000000Z"}, {"uuid": "b59c0b93-b5f8-4c86-ba8e-c75f5bc741a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47215", "type": "seen", "source": "https://t.me/cvedetector/22047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47215 - Snowbridge Google Tag Manager Server Side Infinite Event Retry Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47215 \nPublished : April 3, 2025, 9:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected (latency, throughput). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T02:07:09.000000Z"}, {"uuid": "9aa5a05e-a902-4acc-86c5-7c64ed98fa1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47213", "type": "seen", "source": "https://t.me/cvedetector/22046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47213 - Enrich Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47213 \nPublished : April 3, 2025, 9:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T02:07:09.000000Z"}, {"uuid": "a0ef14d2-9315-4d23-a43a-db31ba16143b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47212", "type": "seen", "source": "https://t.me/cvedetector/22045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47212 - Iglu Server Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47212 \nPublished : April 3, 2025, 9:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T02:07:08.000000Z"}, {"uuid": "2e983dd5-1290-4835-8710-35ff905460f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47573", "type": "seen", "source": "https://t.me/cvedetector/20292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47573 - An improper validation of integrity check value vu\", \n  \"Content\": \"CVE ID : CVE-2024-47573 \nPublished : March 14, 2025, 3:15 p.m. | 15\u00a0minutes ago \nDescription : An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted firmware image. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:22.000000Z"}, {"uuid": "d9cd20e8-b81b-4f49-bc94-72a887c2e96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/654", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: Critical Remote Code Execution (RCE) Vulnerability in VMware Horizon\nURL\uff1ahttps://github.com/groshi/CVE-2024-47575-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-29T13:12:35.000000Z"}, {"uuid": "6c6328e5-d53d-46a6-9277-6f03d0d0fedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47516", "type": "seen", "source": "https://t.me/cvedetector/21140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47516 - Pagure Git Argument Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-47516 \nPublished : March 26, 2025, 12:15 a.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T03:51:25.000000Z"}, {"uuid": "4693e1ef-2ee5-4612-835d-9ec5c626c540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47552", "type": "seen", "source": "https://t.me/cvedetector/20703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47552 - Apache Seata Untrusted Data Deserialization Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47552 \nPublished : March 20, 2025, 9:15 a.m. | 35\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).  \n  \nThis issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.  \n  \nUsers are recommended to upgrade to version 2.2.0, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T11:32:43.000000Z"}, {"uuid": "3a8e398c-168e-4428-baad-848011f479e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47605", "type": "seen", "source": "https://t.me/cvedetector/15385", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47605 - Silverstripe Asset Admin Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47605 \nPublished : Jan. 14, 2025, 11:15 p.m. | 37\u00a0minutes ago \nDescription : silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the \"insert media\" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on both the CMS and the front-end of the website. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:53:35.000000Z"}, {"uuid": "d0226138-f1bd-4d00-a390-4f9d92b80d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47103", "type": "seen", "source": "https://t.me/cvedetector/16968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47103 - IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47103 \nPublished : Jan. 31, 2025, 4:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T19:34:28.000000Z"}, {"uuid": "673f5b2a-2bcb-4b13-b307-5202ce15e889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47010", "type": "seen", "source": "https://t.me/cvedetector/15308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13181 - Ivanti Avalanche Path Traversal Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13181 \nPublished : Jan. 14, 2025, 5:15 p.m. | 36\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T19:01:23.000000Z"}, {"uuid": "917100b4-2b49-4522-b9e9-363cd8876393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47011", "type": "seen", "source": "https://t.me/cvedetector/15307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13180 - Ivanti Avalanche Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13180 \nPublished : Jan. 14, 2025, 5:15 p.m. | 36\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T19:01:22.000000Z"}, {"uuid": "54d5124a-c7f0-40d8-aa9a-fac72b257ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47572", "type": "seen", "source": "https://t.me/cvedetector/15266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47572 - Fortinet FortiSOAR CSV Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47572 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:53.000000Z"}, {"uuid": "5a3f4801-af8d-4d72-81e1-c3b569967785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47571", "type": "seen", "source": "https://t.me/cvedetector/15265", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47571 - Fortinet FortiManager Resource Expiration Improper Access\", \n  \"Content\": \"CVE ID : CVE-2024-47571 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:53.000000Z"}, {"uuid": "1c0dd533-3161-4ec0-ae3b-ee4d24752098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47100", "type": "seen", "source": "https://t.me/cvedetector/15245", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47100 - Siemens SIMATIC S7-1200 CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47100 \nPublished : Jan. 14, 2025, 11:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0). The web interface of the affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change the CPU mode by tricking a legitimate and authenticated user with sufficient permissions on the target CPU to click on a malicious link. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T13:09:10.000000Z"}, {"uuid": "993298bd-276f-4193-b1d2-abad750361a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47770", "type": "seen", "source": "https://t.me/cvedetector/17131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47770 - \"Apache Wazuh Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47770 \nPublished : Feb. 3, 2025, 10:15 p.m. | 23\u00a0minutes ago \nDescription : Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. This vulnerability occurs when the system has weak privilege access, that allows an attacker to do privilege escalation. In this case the attacker is able to view agent list on Wazuh dashboard with no privilege access. This issue has been addressed in release version 4.9.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T23:40:57.000000Z"}, {"uuid": "a78460dc-d559-4eff-b0f7-b8ad05813f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47116", "type": "seen", "source": "https://t.me/cvedetector/16969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47116 - IBM Sterling B2B Integrator Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47116 \nPublished : Jan. 31, 2025, 4:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T19:34:29.000000Z"}, {"uuid": "ddebe323-6fd0-40c7-a566-e1c1028b1a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47857", "type": "seen", "source": "https://t.me/cvedetector/16963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47857 - PrivX SSH Impersonation Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47857 \nPublished : Jan. 31, 2025, 5:15 p.m. | 46\u00a0minutes ago \nDescription : SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a proxy port. This allows an existing PrivX \"account A\" to impersonate another existing PrivX \"account B\" and gain access to SSH target hosts to which the \"account B\" has access. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T19:34:22.000000Z"}, {"uuid": "4fba9c3d-0624-4788-b068-2c4414372946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47106", "type": "seen", "source": "https://t.me/cvedetector/15809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47106 - IBM Jazz for Service Management Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47106 \nPublished : Jan. 18, 2025, 4:15 p.m. | 37\u00a0minutes ago \nDescription : IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access restrictions that could aid in further attacks against the system. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T17:54:06.000000Z"}, {"uuid": "2e0579fc-65e3-474c-85a1-53d3ce8ccd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47113", "type": "seen", "source": "https://t.me/cvedetector/15808", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47113 - IBM ICP Voice Gateway XML Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47113 \nPublished : Jan. 18, 2025, 4:15 p.m. | 37\u00a0minutes ago \nDescription : IBM ICP - Voice Gateway\u00a01.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T17:54:05.000000Z"}, {"uuid": "69576c51-c9fd-4d13-b841-7b7697fc5824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47398", "type": "seen", "source": "https://t.me/cvedetector/14496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47398 - OpenHarmony Boot Problematic OUT-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2024-47398 \nPublished : Jan. 7, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T09:41:17.000000Z"}, {"uuid": "fe94a917-8778-418a-b13e-1c20d20d025a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47002", "type": "seen", "source": "https://t.me/cvedetector/15464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47002 - Observium CE HTML Code Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47002 \nPublished : Jan. 15, 2025, 3:15 p.m. | 28\u00a0minutes ago \nDescription : A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would need to click a malicious link provided by the attacker. \nSeverity: 8.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T16:47:57.000000Z"}, {"uuid": "e74500b9-b6c9-437d-8f11-ac4dcbba8d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47140", "type": "seen", "source": "https://t.me/cvedetector/15463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47140 - Observium CE XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47140 \nPublished : Jan. 15, 2025, 3:15 p.m. | 28\u00a0minutes ago \nDescription : A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker. \nSeverity: 8.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T16:47:56.000000Z"}, {"uuid": "fdb7721e-3562-4544-87dd-8996b4cf3fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47475", "type": "seen", "source": "https://t.me/cvedetector/14390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47475 - Dell PowerScale OneFS Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47475 \nPublished : Jan. 6, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T19:27:25.000000Z"}, {"uuid": "bac2b70e-7492-4b6d-94d9-a8d7df37fffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47519", "type": "seen", "source": "https://t.me/cvedetector/15012", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47519 - \"Acme Backup Man-in-the-Middle Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47519 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : Backup uploads to ETM subject to man-in-the-middle interception \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:24.000000Z"}, {"uuid": "5bcaaee0-26b1-4d15-9181-6ff1abc1b9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47518", "type": "seen", "source": "https://t.me/cvedetector/15018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47518 - Apache ETM SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47518 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : Specially constructed queries targeting ETM could discover active remote access sessions \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:32.000000Z"}, {"uuid": "ce321adb-9d94-441a-9d63-17f8db55b1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47520", "type": "seen", "source": "https://t.me/cvedetector/15013", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47520 - Oracle Advanced Reports Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47520 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : A user with advanced report application access rights can perform actions for which they are not authorized \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:25.000000Z"}, {"uuid": "39c82c30-4f8a-4562-aafa-291f59afaf46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47517", "type": "seen", "source": "https://t.me/cvedetector/15019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47517 - FTI ETM Authentication Token Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47517 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:32.000000Z"}, {"uuid": "96976320-3e21-4d0f-ad13-d95cd1781936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47239", "type": "seen", "source": "https://t.me/cvedetector/14630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47239 - \"Dell PowerScale OneFS Denial of Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47239 \nPublished : Jan. 8, 2025, 3:15 a.m. | 36\u00a0minutes ago \nDescription : Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T04:56:33.000000Z"}, {"uuid": "172d61d3-d9f2-4b70-99e8-41f44288f08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47934", "type": "seen", "source": "https://t.me/cvedetector/14635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47934 - TXOne Networks Portable Inspector TXOne Networks Portable Inspector Pro Edition Input Validation Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-47934 \nPublished : Jan. 8, 2025, 3:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Input Validation vulnerability in Management Program in TXOne Networks Portable Inspector and Portable Inspector Pro Edition allows remote attacker to crash management service. The Denial of Service situation can be resolved by restarting the management service.  \nThis issue affects Portable Inspector: through 1.0.0; Portable Inspector Pro Edition: through 1.0.0. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T04:56:39.000000Z"}, {"uuid": "800618a9-c5e8-433b-9c8b-889ddf9748bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47897", "type": "seen", "source": "https://t.me/cvedetector/15130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47897 - VMware vSphere GPU Usage Vulnerability (Improper Privilege)\", \n  \"Content\": \"CVE ID : CVE-2024-47897 \nPublished : Jan. 13, 2025, 11:15 a.m. | 34\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instability and reboots. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T12:53:26.000000Z"}, {"uuid": "22d5e0be-d54b-449b-a9e2-b35bad8b4014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47093", "type": "seen", "source": "https://t.me/cvedetector/13335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47093 - Nagvis \"-Unvalidated Input\" Cross Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47093 \nPublished : Dec. 19, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T17:19:38.000000Z"}, {"uuid": "005496d7-1afe-4d02-8cb0-cea55f794b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47894", "type": "seen", "source": "https://t.me/cvedetector/15128", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47894 - VMware ESXi GPU Firmware Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47894 \nPublished : Jan. 13, 2025, 11:15 a.m. | 34\u00a0minutes ago \nDescription : Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T12:53:24.000000Z"}, {"uuid": "16f00883-9f66-45b0-a6fd-3d8132430cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47156", "type": "seen", "source": "https://t.me/cvedetector/13664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47156 - Honor Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47156 \nPublished : Dec. 26, 2024, 11:15 a.m. | 39\u00a0minutes ago \nDescription : Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T13:13:39.000000Z"}, {"uuid": "502aca25-1b88-4579-8aec-35ac9a40ac12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47151", "type": "seen", "source": "https://t.me/cvedetector/13663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47151 - Honor File Writing Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47151 \nPublished : Dec. 26, 2024, 11:15 a.m. | 39\u00a0minutes ago \nDescription : Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T13:13:38.000000Z"}, {"uuid": "3595ad33-597e-4290-ba2a-f0fcc7693a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47796", "type": "seen", "source": "https://t.me/cvedetector/15155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47796 - OFFIS DCMTK DICOM File Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47796 \nPublished : Jan. 13, 2025, 3:15 p.m. | 41\u00a0minutes ago \nDescription : An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T17:04:38.000000Z"}, {"uuid": "f7277cda-5a26-434e-87f8-cbf395383f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47895", "type": "seen", "source": "https://t.me/cvedetector/15129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47895 - VMWare ESXi GPU Firmware Data Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47895 \nPublished : Jan. 13, 2025, 11:15 a.m. | 34\u00a0minutes ago \nDescription : Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T12:53:25.000000Z"}, {"uuid": "4d443138-3321-42b7-aa28-b91e6e899d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47917", "type": "seen", "source": "https://t.me/cvedetector/13923", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47917 - Apache Httpd XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47917 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:46:57.000000Z"}, {"uuid": "dc1ded91-fb38-4406-8c17-cd8a580f13a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47926", "type": "seen", "source": "https://t.me/cvedetector/13922", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47926 - Tecnick TCExam SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47926 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Tecnick TCExam \u2013 CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:46:56.000000Z"}, {"uuid": "f53427ef-126a-4b46-9b41-5f2b132fc778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47923", "type": "seen", "source": "https://t.me/cvedetector/13929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47923 - Mashov Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47923 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Mashov \u2013 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:04.000000Z"}, {"uuid": "c9dcdbee-f6c1-4342-a289-c375749ce515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47922", "type": "seen", "source": "https://t.me/cvedetector/13928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47922 - Cisco Systems Authentication Token Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47922 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Priority \u2013 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:04.000000Z"}, {"uuid": "bdab68b4-e11c-47ba-a753-b42b86f0af82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47921", "type": "seen", "source": "https://t.me/cvedetector/13927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47921 - \"Smadar SPS Cryptographic Algorithm Weakness\"\", \n  \"Content\": \"CVE ID : CVE-2024-47921 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Smadar SPS \u2013 CWE-327: Use of a Broken or Risky Cryptographic Algorithm \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:03.000000Z"}, {"uuid": "5254cf75-a862-4fa7-b9b4-b696ccb804a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47920", "type": "seen", "source": "https://t.me/cvedetector/13926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47920 - Tiki Wiki CMS Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47920 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Tiki Wiki CMS \u2013 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:02.000000Z"}, {"uuid": "7e946948-5737-412d-814f-1c8255053c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47919", "type": "seen", "source": "https://t.me/cvedetector/13925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47919 - Tiki Wiki CMS OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47919 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Tiki Wiki CMS \u2013 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:01.000000Z"}, {"uuid": "6dec2590-1be4-442f-b1eb-82c6fc2794b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47918", "type": "seen", "source": "https://t.me/cvedetector/13924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47918 - Tiki Wiki CMS- Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47918 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Tiki Wiki CMS \u2013 CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:46:57.000000Z"}, {"uuid": "a8caa8fa-b897-4346-a031-f15714d8efeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47925", "type": "seen", "source": "https://t.me/cvedetector/13921", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47925 - Tecnick TCExam Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47925 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Tecnick TCExam \u2013 Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:46:55.000000Z"}, {"uuid": "a81a2d30-70ff-40e8-b583-ca6883df1b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47924", "type": "seen", "source": "https://t.me/cvedetector/13920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47924 - Boa Web Server Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47924 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : Boa web server \u2013 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:46:54.000000Z"}, {"uuid": "001e4ba7-f67e-496f-b8c5-f7e13a7a75a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47117", "type": "seen", "source": "https://t.me/cvedetector/12510", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47117 - IBM Carbon Design System Carbon Charts Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47117 \nPublished : Dec. 10, 2024, 2:30 p.m. | 38\u00a0minutes ago \nDescription : IBM Carbon Design System (Carbon Charts 0.4.0 through 1.13.16) is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T16:38:21.000000Z"}, {"uuid": "cba9feb3-5e54-4a42-9997-d601bbd72dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47149", "type": "seen", "source": "https://t.me/cvedetector/13676", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47149 - Honor Incorrect Privilege Assignment Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47149 \nPublished : Dec. 26, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:54:03.000000Z"}, {"uuid": "214245e4-07f7-42cc-9b96-d1cbaf96760f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47157", "type": "seen", "source": "https://t.me/cvedetector/13670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47157 - \"Honor Privilege Exception\"\", \n  \"Content\": \"CVE ID : CVE-2024-47157 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:51.000000Z"}, {"uuid": "97a7fa51-fb6b-4465-aeb6-635b1a03b078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47155", "type": "seen", "source": "https://t.me/cvedetector/13669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47155 - Honor Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47155 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:50.000000Z"}, {"uuid": "bf03e07d-7b66-4e37-be0b-a7f8434a34ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47153", "type": "seen", "source": "https://t.me/cvedetector/13668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47153 - Honor Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47153 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:50.000000Z"}, {"uuid": "21b3f894-2c43-41f0-bbde-891f1110bddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47154", "type": "seen", "source": "https://t.me/cvedetector/13667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47154 - Honor Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47154 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:49.000000Z"}, {"uuid": "c0ccaae2-d129-471a-ab4e-d16eaab8fdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47148", "type": "seen", "source": "https://t.me/cvedetector/13666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47148 - Honor Privilege Assignment Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47148 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:48.000000Z"}, {"uuid": "84041532-7461-49f4-9a23-084b0b0bb4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47150", "type": "seen", "source": "https://t.me/cvedetector/13677", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47150 - Honor Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47150 \nPublished : Dec. 26, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:54:04.000000Z"}, {"uuid": "2467aa51-cd00-4154-bf36-19f9f44a6610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47978", "type": "seen", "source": "https://t.me/cvedetector/13630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47978 - Dell NativeEdge Execution with Unnecessary Privileges Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47978 \nPublished : Dec. 25, 2024, 3:15 p.m. | 41\u00a0minutes ago \nDescription : Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T17:09:29.000000Z"}, {"uuid": "65ad25b3-e03c-4189-9ff9-9f9ac339d490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47102", "type": "seen", "source": "https://t.me/cvedetector/13629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47102 - IBM AIX Local Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-47102 \nPublished : Dec. 25, 2024, 3:15 p.m. | 41\u00a0minutes ago \nDescription : IBM AIX\u00a07.2, 7.3, VIOS 3.1, and 4.1  \n  \ncould allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T17:09:28.000000Z"}, {"uuid": "3615666f-1dce-46ce-bb16-606b2e457677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47484", "type": "seen", "source": "https://t.me/cvedetector/12493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47484 - Dell Avamar SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47484 \nPublished : Dec. 10, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : Dell Avamar, version(s) 19.9, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T13:17:27.000000Z"}, {"uuid": "60a7ec56-56ac-45c3-94be-86ea9e206aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47515", "type": "seen", "source": "https://t.me/cvedetector/13551", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47515 - Pagure Symbolic Link Disclosure Remote File Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47515 \nPublished : Dec. 24, 2024, 4:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allows a malicious user to take advantage of the Pagure instance. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:02:15.000000Z"}, {"uuid": "e83b563c-bea6-456b-920b-61555cc59796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47864", "type": "seen", "source": "https://t.me/cvedetector/13525", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47864 - Home 5G Wi-Fi STATION SH Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47864 \nPublished : Dec. 23, 2024, 1:15 a.m. | 41\u00a0minutes ago \nDescription : home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T03:17:12.000000Z"}, {"uuid": "c37636f7-9c97-47da-9f77-bd50a52c3ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47946", "type": "seen", "source": "https://t.me/cvedetector/12485", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47946 - Apache Struts Remote Code Execution Vul...\", \n  \"Content\": \"CVE ID : CVE-2024-47946 \nPublished : Dec. 10, 2024, 8:15 a.m. | 41\u00a0minutes ago \nDescription : If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content can be uploaded as desktop backgrounds or lock screens. After the upload, the PHP script is available in the web root. The PHP code executes once the uploaded file is accessed. This allows the execution of arbitrary PHP code and OS commands on the device as \"www-data\". \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T09:56:53.000000Z"}, {"uuid": "0a40dcf1-7d5e-4858-a3b5-24bec2e299bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47977", "type": "seen", "source": "https://t.me/cvedetector/12494", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47977 - Dell Avamar SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47977 \nPublished : Dec. 10, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : Dell Avamar, version(s) 19.9, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T13:17:28.000000Z"}, {"uuid": "5fbff013-9446-48cd-8b70-253d53a13b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47579", "type": "seen", "source": "https://t.me/cvedetector/12468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47579 - Oracle WebLogic Server Font Filelifting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47579 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server.  Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:43.000000Z"}, {"uuid": "a2c90344-8773-4cb8-a038-9775f0019342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47576", "type": "seen", "source": "https://t.me/cvedetector/12466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47576 - SAP Product Lifecycle Costing Client DLL Loading Vulnerability (Unauthenticated Remote Command Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-47576 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : SAP Product Lifecycle Costing Client (versions below 4.7.1) application loads on demand a DLL that is available with Windows OS. This DLL is loaded from the computer running SAP Product Lifecycle Costing Client application. That particular DLL could be replaced by a malicious one, that could execute commands as being part of SAP Product Lifecycle Costing Client Application. On a successful attack, it can cause a low impact to confidentiality but no impact to the integrity and availability of the application. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:42.000000Z"}, {"uuid": "f5465433-c25e-4790-841e-bc0713209052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47585", "type": "seen", "source": "https://t.me/cvedetector/12464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47585 - SAP NetWeaver ABAP Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47585 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks, resulting in privilege escalation. While authorizations for import and export are distinguished, a single authorization is applied for both, which may contribute to these risks. On successful exploitation, this can result in potential security concerns. However, it has no impact on the integrity and availability of the application and may have only a low impact on data confidentiality. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:37.000000Z"}, {"uuid": "70b5197a-035b-483b-bd1d-ebd518ec8103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47582", "type": "seen", "source": "https://t.me/cvedetector/12463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47582 - Apache XML XXE Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47582 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:37.000000Z"}, {"uuid": "84700322-64ba-4bf2-a8a2-0c96e6d8509e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47581", "type": "seen", "source": "https://t.me/cvedetector/12461", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47581 - SAP HCM Approve Timesheets Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47581 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:35.000000Z"}, {"uuid": "88290733-18c7-44de-baf2-81ce2028cdfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47577", "type": "seen", "source": "https://t.me/cvedetector/12471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47577 - SAP Commerce Cloud Assisted Service Module API Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47577 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized agent searches for customer to manage their accounts, the request url includes customer data and it is recorded in server logs. If an attacker impersonating as authorized admin visits such server logs, then they get access to the customer data. The amount of leaked confidential data however is extremely limited, and the attacker has no control over what data is leaked. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:48.000000Z"}, {"uuid": "14a360a4-6b2b-4a7d-8106-0f2778a8de93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47580", "type": "seen", "source": "https://t.me/cvedetector/12469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47580 - Apache PDF File Read Consortium\", \n  \"Content\": \"CVE ID : CVE-2024-47580 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment.  By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:44.000000Z"}, {"uuid": "87c18461-302a-4f68-96da-e74d32e5bef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47578", "type": "seen", "source": "https://t.me/cvedetector/12467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47578 - Adobe Document Service Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47578 \nPublished : Dec. 10, 2024, 1:15 a.m. | 42\u00a0minutes ago \nDescription : Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. On successful exploitation, the attacker can read or modify any file and/or make the entire system unavailable. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:43.000000Z"}, {"uuid": "245f9f17-4c98-4c25-8e43-fdfdd864550e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47043", "type": "seen", "source": "https://t.me/cvedetector/12268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47043 - Ruijie Reyee OS versions 2.206.x up to but not inc\", \n  \"Content\": \"CVE ID : CVE-2024-47043 \nPublished : Dec. 6, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T19:48:45.000000Z"}, {"uuid": "f0a5a73b-05cd-4bf3-8e05-fe9abd41cfa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47115", "type": "seen", "source": "https://t.me/cvedetector/12325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47115 - IBM AIX Vulnerability: Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47115 \nPublished : Dec. 7, 2024, 1:19 p.m. | 38\u00a0minutes ago \nDescription : IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1\u00a0could allow a local user to execute arbitrary commands on the system due to improper neutralization of input. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T15:02:44.000000Z"}, {"uuid": "07f98193-1c81-42d9-8501-c3df4d6e3708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47115", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4721", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "f6e4dec9-e500-484f-ba75-3496c45f607a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47107", "type": "seen", "source": "https://t.me/cvedetector/12328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47107 - IBM QRadar SIEM Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47107 \nPublished : Dec. 7, 2024, 3:15 p.m. | 22\u00a0minutes ago \nDescription : IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T21:38:16.000000Z"}, {"uuid": "6dd56b11-03a2-4514-87af-f06878a18788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4721", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "4e0fa236-7d93-4b1e-8ccd-6c457f95abf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47791", "type": "seen", "source": "https://t.me/cvedetector/12275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47791 - Ruijie Reyee OS versions 2.206.x up to but not inc\", \n  \"Content\": \"CVE ID : CVE-2024-47791 \nPublished : Dec. 6, 2024, 7:15 p.m. | 19\u00a0minutes ago \nDescription : Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possible topics in Ruijie MQTT broker, and receive partial messages being sent to and from devices. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T20:39:04.000000Z"}, {"uuid": "57e1952b-1c0f-4407-81d9-66f1836b3981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47146", "type": "seen", "source": "https://t.me/cvedetector/12274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47146 - Ruijie Reyee OS versions 2.206.x up to but not inc\", \n  \"Content\": \"CVE ID : CVE-2024-47146 \nPublished : Dec. 6, 2024, 7:15 p.m. | 19\u00a0minutes ago \nDescription : Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T20:39:00.000000Z"}, {"uuid": "21275d02-fe8c-4922-9cd7-a4ddb9d2ab14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47547", "type": "seen", "source": "https://t.me/cvedetector/12263", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47547 - Ruijie Reyee OS versions 2.206.x up to but not inc\", \n  \"Content\": \"CVE ID : CVE-2024-47547 \nPublished : Dec. 6, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication vulnerable to brute force attacks. \nSeverity: 9.4 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T19:48:38.000000Z"}, {"uuid": "6b64c3f0-23e0-432b-bbbb-ca9c71192a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4721", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "b88d7adb-cc15-41ec-be42-70266c9454df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47032", "type": "seen", "source": "https://t.me/cvedetector/14204", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47032 - LWIS Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47032 \nPublished : Jan. 3, 2025, 4:15 a.m. | 41\u00a0minutes ago \nDescription : In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-03T06:08:52.000000Z"}, {"uuid": "4db43fef-5616-433f-aa97-b0f625afca4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/cibsecurity/80556", "content": "\ud83e\udd85 CISA Flags Critical Vulnerability (CVE-2024-47575) in Fortinet\u2019s FortiManager \ud83e\udd85\n\n  Overview\u00a0   The Cybersecurity and Infrastructure Security Agency CISA has added Fortinets FortiManager to its known Exploited Vulnerabilities KEV catalog, indicating a pressing need for organizations to address the associated risks.\u00a0   The critical vulnerability identified as CVE202447575 has been assigned a CVSS score of 9.8. This vulnerability affects various versions of FortiManager, including FortiManager 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, and 6.2.0 through 6.2.12, as well as multiple iterations of FortiManager Cloud.\u00a0\u00a0   The vulnerability stems from a missing authentication issue within the critical functions of the FortiManager fgfmd daemon, allowing remote, unauthenticated attackers to execute arbitrary commands or code ...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2024-10-24T17:03:42.000000Z"}, {"uuid": "478dedc9-f8e1-485e-8230-3efbec43a2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4762", "type": "seen", "source": "https://t.me/cvedetector/13018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4762 - LADM and LDCC Firmware Update Mechanism Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4762 \nPublished : Dec. 16, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:02:35.000000Z"}, {"uuid": "c3a742b4-d606-499d-8d78-707d657ce7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/cibsecurity/77165", "content": "\ud83d\udd8b\ufe0f New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation \ud83d\udd8b\ufe0f\n\nGoogle on Monday shipped emergency fixes to address a new zeroday flaw in the Chrome web browser that has come under active exploitation in the wild. The highseverity vulnerability,\u00a0tracked as\u00a0CVE20244761, is an outofbounds write bug impacting the V8 JavaScript and WebAssembly engine. It was reported anonymously on May 9, 2024. Outofbounds write bugs\u00a0could be typically.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2024-05-14T16:32:34.000000Z"}, {"uuid": "f3fa20cd-4964-408c-8502-395c1ea40cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47820", "type": "seen", "source": "https://t.me/cvedetector/11364", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47820 - MarkUs Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47820 \nPublished : Nov. 18, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8. Authenticated instructors may download any file on the web server MarkUs is running on, depending on the file permissions. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T19:03:47.000000Z"}, {"uuid": "48be4667-51b5-4f7b-a3e0-dba5d8b9abdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/x_KGpvZo1FWYATjaZwHxv3n5_KpQVPPjqVTyMjO_dF0kjA", "content": "", "creation_timestamp": "2024-10-03T19:28:12.000000Z"}, {"uuid": "ab589bd1-186e-49be-9e52-4ee67fe0815c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47892", "type": "seen", "source": "https://t.me/cvedetector/12900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47892 - NVIDIA GPU Memory Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47892 \nPublished : Dec. 13, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T19:57:36.000000Z"}, {"uuid": "5dcc4253-478a-4989-9ec7-60454e1002df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47238", "type": "seen", "source": "https://t.me/cvedetector/12801", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47238 - Dell Client Platform BIOS Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47238 \nPublished : Dec. 12, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T19:41:36.000000Z"}, {"uuid": "81064a1f-e475-4d37-a1b1-cfa5ee467e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47947", "type": "seen", "source": "https://t.me/cvedetector/12786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47947 - Oracle Web Server Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47947 \nPublished : Dec. 12, 2024, 1:15 p.m. | 23\u00a0minutes ago \nDescription : Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users.\u00a0The \"Edit Disclaimer Text\" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL  \n  \n  \n  \n  \n  \n  \n  \n  \n  \nhttps://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre  \n  \nThe stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T14:40:26.000000Z"}, {"uuid": "b657c095-1c5a-48db-9bce-4b474a4a8f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47758", "type": "seen", "source": "https://t.me/cvedetector/12637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47758 - GLPI Privilege Escalationliable\", \n  \"Content\": \"CVE ID : CVE-2024-47758 \nPublished : Dec. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can use the API to take control of any user that have the same or a lower level of privileges. Version 10.0.17 contains a patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T17:44:48.000000Z"}, {"uuid": "b8a670f5-31a2-43fe-abe8-c7408b633069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47761", "type": "seen", "source": "https://t.me/cvedetector/12645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47761 - GLPI Account Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47761 \nPublished : Dec. 11, 2024, 5:15 p.m. | 19\u00a0minutes ago \nDescription : GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T18:35:02.000000Z"}, {"uuid": "6f7b825b-4a10-4813-bd33-c8107890bffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47760", "type": "seen", "source": "https://t.me/cvedetector/12644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47760 - GLPI Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47760 \nPublished : Dec. 11, 2024, 5:15 p.m. | 19\u00a0minutes ago \nDescription : GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the API can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T18:35:01.000000Z"}, {"uuid": "abb2c118-7f32-4d2a-b173-2882638767aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47865", "type": "seen", "source": "https://t.me/cvedetector/11570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47865 - Rakuten Turbo 5G Firmware Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47865 \nPublished : Nov. 20, 2024, 8:15 a.m. | 46\u00a0minutes ago \nDescription : Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-20T10:23:42.000000Z"}, {"uuid": "4f90413d-df7a-44e4-a88b-eb9871907655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47873", "type": "seen", "source": "https://t.me/cvedetector/11378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48917 - Apache PhpSpreadsheet XXE Encoder Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-48917 \nPublished : Nov. 18, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The `XmlScanner` class has a scan method which should prevent XXE attacks. However, in a bypass of the previously reported `CVE-2024-47873`, the regexes from the `findCharSet` method, which is used for determining the current encoding can be bypassed by using a payload in the encoding UTF-7, and adding at end of the file a comment with the value `encoding=\"UTF-8\"` with `\"`, which is matched by the first regex, so that `encoding='UTF-7'` with single quotes `'` in the XML header is not matched by the second regex. An attacker can bypass the sanitizer and achieve an XML external entity attack. Versions 1.9.4, 2.1.3, 2.3.2, and 3.4.0 fix the issue. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T21:34:11.000000Z"}, {"uuid": "3a61b50f-15af-4dcb-a565-76ecfcd43cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47208", "type": "seen", "source": "https://t.me/cvedetector/11299", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47208 - Apache OFBiz SSRF Code Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47208 \nPublished : Nov. 18, 2024, 9:15 a.m. | 25\u00a0minutes ago \nDescription : Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz.  \n  \nThis issue affects Apache OFBiz: before 18.12.17.  \n  \nUsers are recommended to upgrade to version 18.12.17, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T10:41:37.000000Z"}, {"uuid": "76ecd381-a6e2-427c-a312-7f5d5e21a02a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47873", "type": "seen", "source": "https://t.me/cvedetector/11368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47873 - PhpSpreadsheet XXE Payload Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47873 \nPublished : Nov. 18, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The XmlScanner class has a scan method which should prevent XXE attacks. However, prior to versions 1.9.4, 2.1.3, 2.3.2, and 3.4.0, the regexes used in the `scan` method and the findCharSet method can be bypassed by using UCS-4 and encoding guessing. An attacker can bypass the sanitizer and achieve an XML external entity attack. Versions 1.9.4, 2.1.3, 2.3.2, and 3.4.0 fix the issue. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T19:03:53.000000Z"}, {"uuid": "cc0d78cd-2c5a-42cc-a7bc-a42ed9dca559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47533", "type": "seen", "source": "https://t.me/cvedetector/11367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47533 - Cobbler Unauthenticated Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47533 \nPublished : Nov. 18, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T19:03:52.000000Z"}, {"uuid": "cf7b4a6e-fe46-46ca-8e59-d423aecd1f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47480", "type": "seen", "source": "https://t.me/cvedetector/13147", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47480 - Dell Inventory Collector Client Elevation of Privileges Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47480 \nPublished : Dec. 18, 2024, 3:15 a.m. | 45\u00a0minutes ago \nDescription : Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T05:19:39.000000Z"}, {"uuid": "b417ab73-633c-4c1b-bce8-09544b61f3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47040", "type": "seen", "source": "https://t.me/cvedetector/13238", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47040 - Microsoft Edge Use-After-Free\", \n  \"Content\": \"CVE ID : CVE-2024-47040 \nPublished : Dec. 18, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : There is a possible UAF due to a logic error in the code.\u00a0This could lead to local escalation of privilege with no additional\u00a0execution privileges needed. User interaction is not needed for\u00a0exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T21:13:40.000000Z"}, {"uuid": "7afe4ae6-b325-4229-972c-6b4a9cd175b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47039", "type": "seen", "source": "https://t.me/cvedetector/13237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47039 - Citrix BootManager Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47039 \nPublished : Dec. 18, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of\u00a0bounds read due to a missing bounds check. This could lead to local\u00a0 information disclosure with no additional execution privileges needed. User\u00a0 interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T21:13:39.000000Z"}, {"uuid": "16fc80ff-1ae6-4329-a967-84c5dde99ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47038", "type": "seen", "source": "https://t.me/cvedetector/13236", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47038 - DHD Privilege Escalation Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47038 \nPublished : Dec. 18, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : In dhd_prot_flowrings_pool_release of dhd_msgbuf.c, there is a possible outcof bounds write due to a missing bounds check. This could lead to localcescalation of privilege with no additional execution privileges needed. Usercinteraction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T21:13:39.000000Z"}, {"uuid": "c758c4ea-46fb-4884-b4d5-b82c514b251d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47119", "type": "seen", "source": "https://t.me/cvedetector/13205", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47119 - IBM Storage Defender - Man-in-the-Middle Certificate Validation Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-47119 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:36.000000Z"}, {"uuid": "4560af39-a606-4ed1-a8f0-c86984efeef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47810", "type": "seen", "source": "https://t.me/cvedetector/13207", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47810 - Foxit Reader Use-After-Free Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47810 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:38.000000Z"}, {"uuid": "79287eae-b8e4-4d0d-8db7-92f71ee24414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47397", "type": "seen", "source": "https://t.me/cvedetector/13174", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47397 - AE1021/AE1021PE Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47397 \nPublished : Dec. 18, 2024, 7:15 a.m. | 24\u00a0minutes ago \nDescription : Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. If this vulnerability is exploited, the authentication may be bypassed with an undocumented specific string. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T08:40:37.000000Z"}, {"uuid": "7ea79b42-7edf-4ec2-b0b6-f7eb7e7903e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47104", "type": "seen", "source": "https://t.me/cvedetector/13180", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47104 - IBM i File Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47104 \nPublished : Dec. 18, 2024, 11:15 a.m. | 32\u00a0minutes ago \nDescription : IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T12:51:24.000000Z"}, {"uuid": "ba306122-8840-4dff-bf65-dc80a9935c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47133", "type": "seen", "source": "https://t.me/cvedetector/12067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47133 - UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/E\", \n  \"Content\": \"CVE ID : CVE-2024-47133 \nPublished : Dec. 5, 2024, 10:31 a.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T12:50:33.000000Z"}, {"uuid": "90f471b6-dfb8-4e08-a9eb-35d2954dc6b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47476", "type": "seen", "source": "https://t.me/cvedetector/11879", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47476 - Dell NetWorker Management Console Cryptographic Signature Verification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47476 \nPublished : Dec. 3, 2024, 10:15 a.m. | 1\u00a0hour ago \nDescription : Dell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Code execution. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T12:19:21.000000Z"}, {"uuid": "ae3e4cf8-b813-4967-8da6-011bba54b5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47452", "type": "seen", "source": "https://t.me/cvedetector/10708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47452 - Adobe Illustrator Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47452 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:04.000000Z"}, {"uuid": "b048f075-5a6c-4613-96f2-72aadafd91c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47451", "type": "seen", "source": "https://t.me/cvedetector/10707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47451 - \"Adobe Illustrator Out-of-Bounds Write Arbitrary Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47451 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:03.000000Z"}, {"uuid": "448b5550-d3b4-43e1-aabe-b86659dbbc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47441", "type": "seen", "source": "https://t.me/cvedetector/10714", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47441 - Adobe After Effects Out-of-Bounds Write Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47441 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:11.000000Z"}, {"uuid": "8bd88635-0742-489e-8bd2-66144166d8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47808", "type": "seen", "source": "https://t.me/cvedetector/10606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47808 - SINEC NMS File System Write Arbitrary Content Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47808 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database function, that does not properly restrict the permissions of users to write to the filesystem of the host system.  \nThis could allow an authenticated medium-privileged attacker to write arbitrary content to any location in the filesystem of the host system. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:43.000000Z"}, {"uuid": "ff74a874-ed30-43e2-9ca7-e50f35399d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47131", "type": "seen", "source": "https://t.me/cvedetector/10503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47131 - Delta Electronics DIAScreen BACnet Object Info Stack Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-47131 \nPublished : Nov. 11, 2024, 3:15 p.m. | 35\u00a0minutes ago \nDescription : If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T16:56:26.000000Z"}, {"uuid": "36b0071d-4a64-4a04-8afb-9f9673185174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47437", "type": "seen", "source": "https://t.me/cvedetector/10724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47437 - Substance3D Painter Out-of-Bounds Read\", \n  \"Content\": \"CVE ID : CVE-2024-47437 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:28.000000Z"}, {"uuid": "d99d6bff-1e00-4262-91e3-098bb3867861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47440", "type": "seen", "source": "https://t.me/cvedetector/10723", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47440 - Substance3D Painter Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47440 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:27.000000Z"}, {"uuid": "bf47984f-87d6-43ec-af30-3c6c3a6ceae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47450", "type": "seen", "source": "https://t.me/cvedetector/10712", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47450 - Adobe Illustrator Heap-based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47450 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:10.000000Z"}, {"uuid": "10950357-bfc0-4a36-8ac5-b5e21b6100ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47449", "type": "seen", "source": "https://t.me/cvedetector/10711", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47449 - Adobe Audition Out-of-Bounds Read\", \n  \"Content\": \"CVE ID : CVE-2024-47449 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:09.000000Z"}, {"uuid": "178eceaa-8e98-42f5-8142-ce6f4615036b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47446", "type": "seen", "source": "https://t.me/cvedetector/10710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47446 - Adobe After Effects Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47446 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:09.000000Z"}, {"uuid": "9c358002-c675-4899-a60a-f1f4fa70986f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47445", "type": "seen", "source": "https://t.me/cvedetector/10709", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47445 - Adobe After Effects Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47445 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:05.000000Z"}, {"uuid": "ea2a828c-8683-4a80-bebc-063757dd04a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47455", "type": "seen", "source": "https://t.me/cvedetector/10706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47455 - Adobe Illustrator Out-of-Bounds Read Memory Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47455 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:02.000000Z"}, {"uuid": "3955e6fd-a67e-4ffc-b576-832fb6c7efbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47454", "type": "seen", "source": "https://t.me/cvedetector/10705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47454 - Adobe Illustrator Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47454 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:25:02.000000Z"}, {"uuid": "621414db-1f56-4e87-adf8-846c883d1958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47453", "type": "seen", "source": "https://t.me/cvedetector/10704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47453 - Adobe Illustrator Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47453 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:24:58.000000Z"}, {"uuid": "666fc47f-3639-4096-804f-3368ac7ff567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47458", "type": "seen", "source": "https://t.me/cvedetector/10703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47458 - \"Ableton Bridge NULL Pointer Dereference Denial of Service\"\", \n  \"Content\": \"CVE ID : CVE-2024-47458 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Bridge versions 13.0.9, 14.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:24:57.000000Z"}, {"uuid": "55695ff5-a1ba-4f9b-8ded-7175d95d2620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47457", "type": "seen", "source": "https://t.me/cvedetector/10702", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47457 - Adobe Illustrator NULL Pointer Dereference Denial-of-Service\", \n  \"Content\": \"CVE ID : CVE-2024-47457 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:24:56.000000Z"}, {"uuid": "fdf280c2-45df-4e92-9d8b-96690337dd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47456", "type": "seen", "source": "https://t.me/cvedetector/10701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47456 - Adobe Illustrator OOB Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47456 \nPublished : Nov. 12, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T21:24:56.000000Z"}, {"uuid": "5aab91ed-d4e4-470f-a926-38572adf7034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47940", "type": "seen", "source": "https://t.me/cvedetector/10607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47940 - \"Solid Edge SE memory corruption vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47940 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:43.000000Z"}, {"uuid": "d5355e59-8a97-4deb-b108-423cdcaf5321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47535", "type": "seen", "source": "https://t.me/cvedetector/10654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47535 - \"Netty Denial of Service vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47535 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:31.000000Z"}, {"uuid": "b6f654ec-6a91-4339-a008-a05b2f868324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47909", "type": "seen", "source": "https://t.me/cvedetector/10649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47909 - Ivanti Connect Secure Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47909 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:23.000000Z"}, {"uuid": "0b9c2b1e-95c6-40ee-a5ab-f90dd3118405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47783", "type": "seen", "source": "https://t.me/cvedetector/10609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47783 - Samsung SIPORT Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47783 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file permissions to installation folders.  \n  \nThis could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:45.000000Z"}, {"uuid": "d41e505a-3145-4b28-a981-9fd54d036616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47592", "type": "seen", "source": "https://t.me/cvedetector/10557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47592 - SAP NetWeaver AS Java Authentication Brute Force Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47592 \nPublished : Nov. 12, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T02:58:53.000000Z"}, {"uuid": "0d893ad9-6bdf-48b6-a53b-19a9f632e5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47590", "type": "seen", "source": "https://t.me/cvedetector/10563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47590 - Apache Web Server Stored XSS and SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-47590 \nPublished : Nov. 12, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input data will be used by the web site page generation to create content which when executed in the victim's browser (XXS) or transmitted to another server (SSRF) gives the attacker the ability to execute arbitrary code on the server fully compromising confidentiality, integrity and availability. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T02:59:00.000000Z"}, {"uuid": "2ba210c2-a439-4771-8302-3f3f3772705a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47588", "type": "seen", "source": "https://t.me/cvedetector/10562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47588 - SAP NetWeaver Java Plaintext Credentials Log Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47588 \nPublished : Nov. 12, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : In SAP NetWeaver Java (Software Update Manager 1.1), under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the logs. This leads to a high impact on confidentiality, with no impact on integrity or availability. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T02:58:59.000000Z"}, {"uuid": "ab2613dd-581b-42d5-954f-c28ae1a08072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47587", "type": "seen", "source": "https://t.me/cvedetector/10561", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47587 - Acceliant Cash Operations Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47587 \nPublished : Nov. 12, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low impact to confidentiality to the application. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T02:58:55.000000Z"}, {"uuid": "a9bda5d6-11c8-40a8-9c87-72b1f69675a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47586", "type": "seen", "source": "https://t.me/cvedetector/10560", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47586 - SAP NetWeaver Denial of Service NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47586 \nPublished : Nov. 12, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T02:58:55.000000Z"}, {"uuid": "1db6ef00-d6e2-4d96-8b01-b84056d4b99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47942", "type": "seen", "source": "https://t.me/cvedetector/10603", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47942 - Solid Edge DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47942 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:37.000000Z"}, {"uuid": "89519307-5ba6-4989-b59f-a04bddf5a83c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47941", "type": "seen", "source": "https://t.me/cvedetector/10602", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47941 - Solid Edge SE Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47941 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:37.000000Z"}, {"uuid": "904f5742-8f77-4a68-a325-3feabd74c789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47799", "type": "seen", "source": "https://t.me/cvedetector/10585", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47799 - \"MeshWi-Fi router RP562B Information Disclosure Imperative\"\", \n  \"Content\": \"CVE ID : CVE-2024-47799 \nPublished : Nov. 12, 2024, 6:15 a.m. | 37\u00a0minutes ago \nDescription : Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain information of the other devices connected through the Wi-Fi. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T08:00:08.000000Z"}, {"uuid": "217c387a-e93f-4728-8b3f-21b6e5fa6ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47595", "type": "seen", "source": "https://t.me/cvedetector/10559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47595 - Cisco ASA Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47595 \nPublished : Nov. 12, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T02:58:54.000000Z"}, {"uuid": "dba69d1a-9d82-4643-9eb4-66e6e0b356f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47593", "type": "seen", "source": "https://t.me/cvedetector/10558", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47593 - SAP NetWeaver Application Server ABAP Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47593 \nPublished : Nov. 12, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or downloaded in an application based on SAP GUI for HTML Technology. This will not compromise the application's integrity or availability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T02:58:53.000000Z"}, {"uuid": "3938309f-8ebf-4f02-85b9-726f93d4ce5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47759", "type": "seen", "source": "https://t.me/cvedetector/11141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47759 - GLPI SVG Malicious Script Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47759 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17. \nSeverity: 0.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:19.000000Z"}, {"uuid": "ac3c219f-1331-4fd2-8d15-b898768915ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47914", "type": "seen", "source": "https://t.me/cvedetector/10920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47914 - VaeMendis CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47914 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF) \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:38:11.000000Z"}, {"uuid": "02a65f4e-b37d-4a09-b53b-e305112d29eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47916", "type": "seen", "source": "https://t.me/cvedetector/10918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47916 - Boa Web Server Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47916 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:38:06.000000Z"}, {"uuid": "a71f6138-6eb0-40db-b752-90c8cbe7c549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47915", "type": "seen", "source": "https://t.me/cvedetector/10917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47915 - VaeMendis Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47915 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : VaeMendis -  CWE-200: Exposure of Sensitive Information to an Unauthorized Actor \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:38:06.000000Z"}, {"uuid": "536bf91b-87a7-40c5-ad04-cb7d43db8d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47574", "type": "seen", "source": "https://t.me/cvedetector/10816", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47574 - Fortinet FortiClient Windows Authenticate Bypass via Spoofed Named Pipe Messages\", \n  \"Content\": \"CVE ID : CVE-2024-47574 \nPublished : Nov. 13, 2024, 12:15 p.m. | 32\u00a0minutes ago \nDescription : A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T13:51:48.000000Z"}, {"uuid": "fa2a44a1-ded3-4ee3-800f-5293d7b14f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4741", "type": "seen", "source": "https://t.me/cvedetector/10815", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4741 - OpenSSL SSL_free_buffers Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4741 \nPublished : Nov. 13, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause  \nmemory to be accessed that was previously freed in some situations  \n  \nImpact summary: A use after free can have a range of potential consequences such  \nas the corruption of valid data, crashes or execution of arbitrary code.  \nHowever, only applications that directly call the SSL_free_buffers function are  \naffected by this issue. Applications that do not call this function are not  \nvulnerable. Our investigations indicate that this function is rarely used by  \napplications.  \n  \nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used  \nwhen processing an incoming record from the network. The call is only expected  \nto succeed if the buffer is not currently in use. However, two scenarios have  \nbeen identified where the buffer is freed even when still in use.  \n  \nThe first scenario occurs where a record header has been received from the  \nnetwork and processed by OpenSSL, but the full record body has not yet arrived.  \nIn this case calling SSL_free_buffers will succeed even though a record has only  \nbeen partially processed and the buffer is still in use.  \n  \nThe second scenario occurs where a full record containing application data has  \nbeen received and processed by OpenSSL but the application has only read part of  \nthis data. Again a call to SSL_free_buffers will succeed even though the buffer  \nis still in use.  \n  \nWhile these scenarios could occur accidentally during normal operation a  \nmalicious attacker could attempt to engineer a stituation where this occurs.  \nWe are not aware of this issue being actively exploited.  \n  \nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T13:01:40.000000Z"}, {"uuid": "52154c51-60eb-4428-8d97-d8d5e1cdf484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47404", "type": "seen", "source": "https://t.me/cvedetector/9824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47404 - OpenHarmony Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-47404 \nPublished : Nov. 5, 2024, 8:15 a.m. | 18\u00a0minutes ago \nDescription : in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double free. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T09:40:44.000000Z"}, {"uuid": "a37e44a4-c6fe-4f6b-912a-7ac442031d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47402", "type": "seen", "source": "https://t.me/cvedetector/9823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47402 - OpenHarmony Out-of-Bounds Read Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47402 \nPublished : Nov. 5, 2024, 8:15 a.m. | 18\u00a0minutes ago \nDescription : in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T09:40:43.000000Z"}, {"uuid": "202deeb2-4e9f-4891-be86-ad4035d62bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47426", "type": "seen", "source": "https://t.me/cvedetector/10734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47426 - Substance3D Painter Critical Double Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47426 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:43.000000Z"}, {"uuid": "c1f1be7f-115e-4df2-a234-46cbe27e6b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47434", "type": "seen", "source": "https://t.me/cvedetector/10733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47434 - Substance3D Painter Out-of-Bounds Write Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47434 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:42.000000Z"}, {"uuid": "4a69b742-b063-44aa-bd36-1b64f19d416e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47433", "type": "seen", "source": "https://t.me/cvedetector/10732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47433 - Substance3D Painter Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47433 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:41.000000Z"}, {"uuid": "049ced10-53bd-4457-96df-3ae00b93cf5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47432", "type": "seen", "source": "https://t.me/cvedetector/10731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47432 - Substance3D Painter Out-of-Bounds Write Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47432 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:41.000000Z"}, {"uuid": "f7dd90e1-46b1-4e59-8fd5-e686629a678d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47431", "type": "seen", "source": "https://t.me/cvedetector/10730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47431 - Substance3D Painter Heap-based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47431 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:39.000000Z"}, {"uuid": "df8024d7-b02d-40a2-bb0a-06f850e07c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47430", "type": "seen", "source": "https://t.me/cvedetector/10729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47430 - Substance3D Painter Out-of-Bounds Write Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47430 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:35.000000Z"}, {"uuid": "e7eeebcc-5620-41b0-aeb8-1edd94486d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47436", "type": "seen", "source": "https://t.me/cvedetector/10728", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47436 - Substance3D Painter Out-of-Bounds Read (ASLR Bypass) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47436 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:34.000000Z"}, {"uuid": "389f480c-1104-434c-901c-4578f8c6ae27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47435", "type": "seen", "source": "https://t.me/cvedetector/10727", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47435 - Substance3D Painter Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47435 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:34.000000Z"}, {"uuid": "a88f3a4a-e15d-4b11-9958-873daefffaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47439", "type": "seen", "source": "https://t.me/cvedetector/10726", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47439 - Substance3D Painter NULL Pointer Dereference Denial-of-Service\", \n  \"Content\": \"CVE ID : CVE-2024-47439 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:33.000000Z"}, {"uuid": "b2518758-4d3a-4ece-a646-5eddfe3c171d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47438", "type": "seen", "source": "https://t.me/cvedetector/10725", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47438 - Substance3D Painter Write-what-where Condition Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47438 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Substance3D - Painter versions 10.1.0 and earlier are affected by a Write-what-where Condition vulnerability that could lead to a memory leak. This vulnerability allows an attacker to write a controlled value at a controlled memory location, which could result in the disclosure of sensitive memory content. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:32.000000Z"}, {"uuid": "85db549f-6805-4dfd-8df5-fd0292f4f9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47253", "type": "seen", "source": "https://t.me/cvedetector/9854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47253 - 2N Access Commander Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47253 \nPublished : Nov. 5, 2024, 10:20 a.m. | 33\u00a0minutes ago \nDescription : In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal   \nvulnerability could allow an attacker to write files on the filesystem   \nto achieve arbitrary remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T12:11:38.000000Z"}, {"uuid": "725914b6-3c31-48ce-9be8-3d688a12be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47254", "type": "seen", "source": "https://t.me/cvedetector/9853", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47254 - 2N Access Commander Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47254 \nPublished : Nov. 5, 2024, 10:20 a.m. | 33\u00a0minutes ago \nDescription : In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient   \nVerification of Data Authenticity vulnerability could allow an attacker   \nto escalate their privileges and gain root access to the system. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T12:11:38.000000Z"}, {"uuid": "9c719ba8-039e-4354-8bbf-f9a20852049a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47255", "type": "seen", "source": "https://t.me/cvedetector/9852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47255 - \"2N Access Commander Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47255 \nPublished : Nov. 5, 2024, 10:20 a.m. | 33\u00a0minutes ago \nDescription : In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary   \ncode execution with root permissions. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T12:11:34.000000Z"}, {"uuid": "951cbe47-b759-4f59-9e5c-62dcf4718f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47137", "type": "seen", "source": "https://t.me/cvedetector/9826", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47137 - OpenHarmony Out-of-Bounds Write Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47137 \nPublished : Nov. 5, 2024, 8:15 a.m. | 18\u00a0minutes ago \nDescription : in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T09:40:45.000000Z"}, {"uuid": "95abf694-acde-4206-850b-00600e57f228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47797", "type": "seen", "source": "https://t.me/cvedetector/9825", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47797 - OpenHarmony OOB Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47797 \nPublished : Nov. 5, 2024, 8:15 a.m. | 18\u00a0minutes ago \nDescription : in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T09:40:44.000000Z"}, {"uuid": "ba7e9840-c093-4180-9813-e5ab3afc2778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47308", "type": "seen", "source": "https://t.me/cvedetector/9599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47308 - Templately Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47308 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Templately allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Templately: from n/a through 3.1.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:20.000000Z"}, {"uuid": "c16cbc1f-a89f-4a60-8138-628de8ddaa26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47302", "type": "seen", "source": "https://t.me/cvedetector/9598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47302 - Fluent Support Unrestricted Access to Sensitive Data\", \n  \"Content\": \"CVE ID : CVE-2024-47302 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in WPManageNinja LLC Fluent Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through 1.8.0. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:20.000000Z"}, {"uuid": "2feba9c8-a298-408d-812f-ab3d38916a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47317", "type": "seen", "source": "https://t.me/cvedetector/9592", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47317 - WPQuads Adsense Ads, Banner Ads, Popup Ads Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47317 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in WP Quads Ads by WPQuads \u2013 Adsense Ads, Banner Ads, Popup Ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads by WPQuads \u2013 Adsense Ads, Banner Ads, Popup Ads: from n/a through 2.0.84. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:09.000000Z"}, {"uuid": "5362f4c5-c481-4de6-b8f0-ac934d4a4f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47362", "type": "seen", "source": "https://t.me/cvedetector/9590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47362 - WPChill Strong Testimonials Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47362 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1.16. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:08.000000Z"}, {"uuid": "9984fbee-77eb-4952-a294-3a97256a7ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47361", "type": "seen", "source": "https://t.me/cvedetector/9589", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47361 - Elementor Addon Elements Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47361 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in WPVibes Elementor Addon Elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Addon Elements: from n/a through 1.13.6. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:07.000000Z"}, {"uuid": "2b717e98-f81a-4cb7-a234-cc6a6e613ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47359", "type": "seen", "source": "https://t.me/cvedetector/9588", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47359 - Averta Depicter Slider Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47359 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:06.000000Z"}, {"uuid": "b3fe6239-74e5-4095-a112-92fc558389ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47358", "type": "seen", "source": "https://t.me/cvedetector/9587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47358 - Popup Maker Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47358 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Popup Maker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Popup Maker: from n/a through 1.19.2. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:02.000000Z"}, {"uuid": "2c91f242-a5c8-49fb-a346-092db65e910b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47314", "type": "seen", "source": "https://t.me/cvedetector/9595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47314 - Sunshine Photo Cart Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47314 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.2.8. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:14.000000Z"}, {"uuid": "a278bee0-f735-42ee-8a09-e0d8b9e9ab7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47321", "type": "seen", "source": "https://t.me/cvedetector/9594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47321 - Fahad Mahmood WP Datepicker Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47321 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Fahad Mahmood WP Datepicker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Datepicker: from n/a through 2.1.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:14.000000Z"}, {"uuid": "cab85801-dd11-479d-903f-e3e174168a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47318", "type": "seen", "source": "https://t.me/cvedetector/9593", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47318 - Magazine3 PWA for WP & AMP Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47318 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Magazine3 PWA for WP & AMP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PWA for WP & AMP: from n/a through 1.7.72. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:13.000000Z"}, {"uuid": "5e170068-2891-4a33-b7a1-5f3b608cdce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47311", "type": "seen", "source": "https://t.me/cvedetector/9600", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47311 - Kraft Plugins Wheel of Life Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47311 \nPublished : Nov. 1, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Kraft Plugins Wheel of Life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through 1.1.8. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:01:21.000000Z"}, {"uuid": "a5938796-fe9a-4354-ac7e-98aa1bcb0989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47939", "type": "seen", "source": "https://t.me/cvedetector/9566", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47939 - Ricoh Web Image Monitor Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47939 \nPublished : Nov. 1, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : Stack-based buffer overflow vulnerability exists in multiple Ricoh laser printers and MFPs which implement Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendor under [References]. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T07:09:20.000000Z"}, {"uuid": "67685a07-c231-4f30-8e76-fb8b43bac71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47640", "type": "seen", "source": "https://t.me/cvedetector/9336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47640 - weDevs WP ERP Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47640 \nPublished : Oct. 29, 2024, 2:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in weDevs WP ERP allows Reflected XSS.This issue affects WP ERP: from n/a through 1.13.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T16:27:14.000000Z"}, {"uuid": "62b8740d-3b1a-48be-91ae-a35a76819cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47241", "type": "seen", "source": "https://t.me/cvedetector/8333", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47241 - Dell Secure Connect Gateway Imperfect Certificate Authentication\", \n  \"Content\": \"CVE ID : CVE-2024-47241 \nPublished : Oct. 18, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T20:15:43.000000Z"}, {"uuid": "3a2e4ffb-390f-4c39-b43d-098142e4c07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47240", "type": "seen", "source": "https://t.me/cvedetector/8329", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47240 - Dell Secure Connect Gateway (SCG) File System Permissions Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47240 \nPublished : Oct. 18, 2024, 12:15 p.m. | 39\u00a0minutes ago \nDescription : Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vulnerability to gain write access to unauthorized data and cause a version update failure condition. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T15:14:59.000000Z"}, {"uuid": "3bcf780d-8197-4f4b-8963-5580894bc435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47401", "type": "seen", "source": "https://t.me/cvedetector/9273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47401 - Mattermost GraphQL Discovery Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47401 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Mattermost versions 9.10.x <=<=<=\nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:22.000000Z"}, {"uuid": "c4112253-62ba-4b01-af4f-1dc6dbf8efd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47487", "type": "seen", "source": "https://t.me/cvedetector/8309", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47487 - HikCentral Professional SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47487 \nPublished : Oct. 18, 2024, 9:15 a.m. | 29\u00a0minutes ago \nDescription : There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T11:54:07.000000Z"}, {"uuid": "74548c4e-ea47-492d-b90f-573bc3d521f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47190", "type": "seen", "source": "https://t.me/cvedetector/10202", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47190 - Northern.tech Hosted Mender SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47190 \nPublished : Nov. 8, 2024, 4:15 p.m. | 41\u00a0minutes ago \nDescription : Northern.tech Hosted Mender before 2024.07.11 allows SSRF. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T18:02:42.000000Z"}, {"uuid": "8a558dcc-8739-46ff-9415-13a6cc7a0d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47486", "type": "seen", "source": "https://t.me/cvedetector/8308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47486 - HikCentral Master Lite Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47486 \nPublished : Oct. 18, 2024, 9:15 a.m. | 29\u00a0minutes ago \nDescription : There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T11:54:06.000000Z"}, {"uuid": "7d1f364b-a61c-45a4-ab19-c08970847a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47485", "type": "seen", "source": "https://t.me/cvedetector/8307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47485 - HikCentral Master Lite CSV Injection Remote Command Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47485 \nPublished : Oct. 18, 2024, 9:15 a.m. | 29\u00a0minutes ago \nDescription : There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T11:54:06.000000Z"}, {"uuid": "043409f7-d33f-4142-831b-03cea2f27f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4739", "type": "seen", "source": "https://t.me/cvedetector/8306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4739 - MXsecurity Authenticated Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4739 \nPublished : Oct. 18, 2024, 9:15 a.m. | 29\u00a0minutes ago \nDescription : The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable. By acquiring a valid authenticator, an attacker can pose as an authorized user and successfully access the resource. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T11:54:05.000000Z"}, {"uuid": "559fed07-adeb-4f57-8564-4d291ed86de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4740", "type": "seen", "source": "https://t.me/cvedetector/8305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4740 - MXsecurity Hard-Coded Credentials Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-4740 \nPublished : Oct. 18, 2024, 9:15 a.m. | 29\u00a0minutes ago \nDescription : MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T11:54:04.000000Z"}, {"uuid": "d7737e38-c9a5-495c-9e39-72510fd4af72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47793", "type": "seen", "source": "https://t.me/cvedetector/8291", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47793 - Exment Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47793 \nPublished : Oct. 18, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), an arbitrary script may be executed on the web browser of the user. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T09:23:23.000000Z"}, {"uuid": "ea84094b-2edd-4acc-bad6-bf37263722cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47072", "type": "seen", "source": "https://t.me/cvedetector/10150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47072 - XStream BinaryStreamDriver Remote Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-47072 \nPublished : Nov. 8, 2024, 12:15 a.m. | 35\u00a0minutes ago \nDescription : XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream when XStream is configured to use the BinaryStreamDriver. XStream 1.4.21 has been patched to detect the manipulation in the binary input stream causing the the stack overflow and raises an InputManipulationException instead. Users are advised to upgrade. Users unable to upgrade may catch the StackOverflowError in the client code calling XStream if XStream is configured to use the BinaryStreamDriver. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T02:08:17.000000Z"}, {"uuid": "d728ecde-057f-4ed9-991f-428c9609dc7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47073", "type": "seen", "source": "https://t.me/cvedetector/10110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47073 - DataEase JWT Token Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47073 \nPublished : Nov. 7, 2024, 6:15 p.m. | 45\u00a0minutes ago \nDescription : DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions a the lack of signature verification of jwt tokens allows attackers to forge jwts which then allow access to any interface. The vulnerability has been fixed in v2.10.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T20:16:52.000000Z"}, {"uuid": "74e1d947-81d5-4115-af06-32eb0007604b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47462", "type": "seen", "source": "https://t.me/cvedetector/9962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47462 - Apache\u2122 Instant AOS Remote File Creation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47462 \nPublished : Nov. 5, 2024, 11:15 p.m. | 26\u00a0minutes ago \nDescription : An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution (RCE) on the underlying operating system. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T00:46:43.000000Z"}, {"uuid": "e4d06228-3e8e-4e8d-8bfa-fd64f3fa4ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47461", "type": "seen", "source": "https://t.me/cvedetector/9961", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47461 - Instant AOS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47461 \nPublished : Nov. 5, 2024, 11:15 p.m. | 26\u00a0minutes ago \nDescription : An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying host operating system. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T00:46:39.000000Z"}, {"uuid": "bb0255c8-9330-463b-b7af-0f1d4857cd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47460", "type": "seen", "source": "https://t.me/cvedetector/9960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47460 - Aruba PAPI Command Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47460 \nPublished : Nov. 5, 2024, 11:15 p.m. | 26\u00a0minutes ago \nDescription : Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T00:46:38.000000Z"}, {"uuid": "6bd89a48-1cfa-4d95-9aae-2597e756afa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47464", "type": "seen", "source": "https://t.me/cvedetector/9958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47464 - Cisco Instant AOS Path Traversal Remote File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47464 \nPublished : Nov. 5, 2024, 11:15 p.m. | 26\u00a0minutes ago \nDescription : An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote unauthorized access to files. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T00:46:37.000000Z"}, {"uuid": "6f730c2f-4f8f-4eec-9e6e-c65f8e63cc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47463", "type": "seen", "source": "https://t.me/cvedetector/9957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47463 - Oracle Instant AOS Arbitrary File Creation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47463 \nPublished : Nov. 5, 2024, 11:15 p.m. | 26\u00a0minutes ago \nDescription : An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution (RCE) on the underlying operating system. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T00:46:36.000000Z"}, {"uuid": "12a4a29a-9094-408f-b3b5-e7c02b6d5b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47721", "type": "seen", "source": "https://t.me/cvedetector/8459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47721 - Realtek Wi-Fi Out-of-bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47721 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading  \n  \nThe handler of firmware C2H event RTW89_MAC_C2H_FUNC_READ_WOW_CAM isn't  \nimplemented, but driver expects number of handlers is  \nNUM_OF_RTW89_MAC_C2H_FUNC_WOW causing out-of-bounds access. Fix it by  \nremoving ID.  \n  \nAddresses-Coverity-ID: 1598775 (\"Out-of-bounds read\") \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:42.000000Z"}, {"uuid": "8e151fd2-4de8-4cef-8813-36672a4e36bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47903", "type": "seen", "source": "https://t.me/cvedetector/8704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47901 - InterMesh Hybrid Subscriber and Fire Subscriber Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-47901 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not sanitize the input parameters in specific GET requests that allow for code execution on operating system level. In combination with other vulnerabilities (CVE-2024-47902, CVE-2024-47903, CVE-2024-47904) this could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:38.000000Z"}, {"uuid": "4cb9f56d-91ba-49e0-b3bb-c35c84c93f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47904", "type": "seen", "source": "https://t.me/cvedetector/8704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47901 - InterMesh Hybrid Subscriber and Fire Subscriber Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-47901 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not sanitize the input parameters in specific GET requests that allow for code execution on operating system level. In combination with other vulnerabilities (CVE-2024-47902, CVE-2024-47903, CVE-2024-47904) this could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:38.000000Z"}, {"uuid": "e5f70acc-18f9-4770-aa14-31b7f20cfd8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47902", "type": "seen", "source": "https://t.me/cvedetector/8704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47901 - InterMesh Hybrid Subscriber and Fire Subscriber Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-47901 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not sanitize the input parameters in specific GET requests that allow for code execution on operating system level. In combination with other vulnerabilities (CVE-2024-47902, CVE-2024-47903, CVE-2024-47904) this could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:38.000000Z"}, {"uuid": "8f20058b-df29-4576-9cc3-3fa680aecb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47904", "type": "seen", "source": "https://t.me/cvedetector/8699", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47904 - InterMesh Subscriber SUID Binary Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47904 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The affected devices contain a SUID binary that could allow an authenticated local attacker to execute arbitrary commands with root privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:31.000000Z"}, {"uuid": "4001b1d3-8f57-4201-9385-6e813a9e439f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47903", "type": "seen", "source": "https://t.me/cvedetector/8698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47903 - InterMesh Hybrid Subscriber File Writeability Web Server Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-47903 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices allows to write arbitrary files to the web server's DocumentRoot directory. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:30.000000Z"}, {"uuid": "e03e6622-b052-41ef-86f7-487962d4b308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47902", "type": "seen", "source": "https://t.me/cvedetector/8697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47902 - InterMesh Subscriber Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47902 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not authenticate GET requests that execute specific commands (such as `ping`) on operating system level. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:29.000000Z"}, {"uuid": "7b4a2a33-c50e-4b7c-9b89-5ec6c4e61433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ton618cyber/1766", "content": "Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nUrgent patch advised for Apache Avro Java SDK flaw (CVE-2024-47561) that allows code execution.\n\nthehackernews.com \u2022 Oct 7, 2024", "creation_timestamp": "2024-10-08T15:45:01.000000Z"}, {"uuid": "22d1a18a-ce12-4bc0-800a-a3ee6d6eca89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47901", "type": "seen", "source": "https://t.me/cvedetector/8704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47901 - InterMesh Hybrid Subscriber and Fire Subscriber Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-47901 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not sanitize the input parameters in specific GET requests that allow for code execution on operating system level. In combination with other vulnerabilities (CVE-2024-47902, CVE-2024-47903, CVE-2024-47904) this could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:38.000000Z"}, {"uuid": "8872dc6e-4626-4163-bed2-36834a7e6810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/cvedetector/8703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47575 - Fortinet FortiManager Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47575 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.13, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:38.000000Z"}, {"uuid": "906d7c00-d1a9-4f30-9038-34a74fd75806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47325", "type": "seen", "source": "https://t.me/cvedetector/8428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47325 - \"Themeisle Multiple Page Generator Plugin \u2013 MPG SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47325 \nPublished : Oct. 20, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin \u2013 MPG allows SQL Injection.This issue affects Multiple Page Generator Plugin \u2013 MPG: from n/a through 3.4.7. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-20T13:15:00.000000Z"}, {"uuid": "cbb7af7f-de36-436a-83ba-70d478bf6029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47819", "type": "seen", "source": "https://t.me/cvedetector/8622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47819 - Umbraco Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47819 \nPublished : Oct. 22, 2024, 4:15 p.m. | 32\u00a0minutes ago \nDescription : Umbraco, a free and open source .NET content management system, has a cross-site scripting vulnerability starting in version 14.0.0 and prior to versions 14.3.1 and 15.0.0. This can be leveraged to gain access to higher-privilege endpoints, e.g. if you get a user with admin privileges to run the code, you can potentially elevate all users and grant them admin privileges or access protected content. Versions 14.3.1 and 15.0.0 contain a patch. As a workaround, ensure that access to the Dictionary section is only granted to trusted users. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T18:48:05.000000Z"}, {"uuid": "97f631ec-8b00-40f5-b83d-54f8a81b7f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47717", "type": "seen", "source": "https://t.me/cvedetector/8456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47717 - RISC-V KVM PMU Snapshot NULL Pointer Crash\", \n  \"Content\": \"CVE ID : CVE-2024-47717 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRISC-V: KVM: Don't zero-out PMU snapshot area before freeing data  \n  \nWith the latest Linux-6.11-rc3, the below NULL pointer crash is observed  \nwhen SBI PMU snapshot is enabled for the guest and the guest is forcefully  \npowered-off.  \n  \n  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000508  \n  Oops [#1]  \n  Modules linked in: kvm  \n  CPU: 0 UID: 0 PID: 61 Comm: term-poll Not tainted 6.11.0-rc3-00018-g44d7178dd77a #3  \n  Hardware name: riscv-virtio,qemu (DT)  \n  epc : __kvm_write_guest_page+0x94/0xa6 [kvm]  \n   ra : __kvm_write_guest_page+0x54/0xa6 [kvm]  \n  epc : ffffffff01590e98 ra : ffffffff01590e58 sp : ffff8f80001f39b0  \n   gp : ffffffff81512a60 tp : ffffaf80024872c0 t0 : ffffaf800247e000  \n   t1 : 00000000000007e0 t2 : 0000000000000000 s0 : ffff8f80001f39f0  \n   s1 : 00007fff89ac4000 a0 : ffffffff015dd7e8 a1 : 0000000000000086  \n   a2 : 0000000000000000 a3 : ffffaf8000000000 a4 : ffffaf80024882c0  \n   a5 : 0000000000000000 a6 : ffffaf800328d780 a7 : 00000000000001cc  \n   s2 : ffffaf800197bd00 s3 : 00000000000828c4 s4 : ffffaf800248c000  \n   s5 : ffffaf800247d000 s6 : 0000000000001000 s7 : 0000000000001000  \n   s8 : 0000000000000000 s9 : 00007fff861fd500 s10: 0000000000000001  \n   s11: 0000000000800000 t3 : 00000000000004d3 t4 : 00000000000004d3  \n   t5 : ffffffff814126e0 t6 : ffffffff81412700  \n  status: 0000000200000120 badaddr: 0000000000000508 cause: 000000000000000d  \n  [] __kvm_write_guest_page+0x94/0xa6 [kvm]  \n  [] kvm_vcpu_write_guest+0x56/0x90 [kvm]  \n  [] kvm_pmu_clear_snapshot_area+0x42/0x7e [kvm]  \n  [] kvm_riscv_vcpu_pmu_deinit.part.0+0xe0/0x14e [kvm]  \n  [] kvm_riscv_vcpu_pmu_deinit+0x1a/0x24 [kvm]  \n  [] kvm_arch_vcpu_destroy+0x28/0x4c [kvm]  \n  [] kvm_destroy_vcpus+0x5a/0xda [kvm]  \n  [] kvm_arch_destroy_vm+0x14/0x28 [kvm]  \n  [] kvm_destroy_vm+0x168/0x2a0 [kvm]  \n  [] kvm_put_kvm+0x3c/0x58 [kvm]  \n  [] kvm_vm_release+0x22/0x2e [kvm]  \n  \nClearly, the kvm_vcpu_write_guest() function is crashing because it is  \nbeing called from kvm_pmu_clear_snapshot_area() upon guest tear down.  \n  \nTo address the above issue, simplify the kvm_pmu_clear_snapshot_area() to  \nnot zero-out PMU snapshot area from kvm_pmu_clear_snapshot_area() because  \nthe guest is anyway being tore down.  \n  \nThe kvm_pmu_clear_snapshot_area() is also called when guest changes  \nPMU snapshot area of a VCPU but even in this case the previous PMU  \nsnaphsot area must not be zeroed-out because the guest might have  \nreclaimed the pervious PMU snapshot area for some other purpose. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:37.000000Z"}, {"uuid": "a4c46be7-904a-474d-8711-6d41be4c9899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47224", "type": "seen", "source": "https://t.me/cvedetector/8575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47224 - Mitel MiCollab AWV Conferencing CRLF Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47224 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a CRLF injection attack due to inadequate encoding of user input in URLs. A successful exploit could allow an attacker to perform a phishing attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:19.000000Z"}, {"uuid": "8816df21-5f3b-4a00-ac60-9f46380c248d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47754", "type": "seen", "source": "https://t.me/cvedetector/8489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47754 - Mediatek Media Linux.kernel Kernel Panic\", \n  \"Content\": \"CVE ID : CVE-2024-47754 \nPublished : Oct. 21, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning  \n  \nFix a smatch static checker warning on vdec_h264_req_multi_if.c.  \nWhich leads to a kernel crash when fb is NULL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:01.000000Z"}, {"uuid": "84af862c-b2f9-496f-babe-10e811acb308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47753", "type": "seen", "source": "https://t.me/cvedetector/8488", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47753 - Mediatek Media VP8 Decoder Kernel Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-47753 \nPublished : Oct. 21, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: mediatek: vcodec: Fix VP8 stateless decoder smatch warning  \n  \nFix a smatch static checker warning on vdec_vp8_req_if.c.  \nWhich leads to a kernel crash when fb is NULL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:00.000000Z"}, {"uuid": "2071523c-d9c6-43fc-a21a-5c4364dbb32c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47328", "type": "seen", "source": "https://t.me/cvedetector/8452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47328 - \"FunnelKit Automation SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-47328 \nPublished : Oct. 21, 2024, 11:15 a.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Automation By Autonami allows SQL Injection.This issue affects Automation By Autonami: from n/a through 3.1.2. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T14:19:30.000000Z"}, {"uuid": "27782631-458d-4326-85b2-8d42cb65f1fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47825", "type": "seen", "source": "https://t.me/cvedetector/8545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47825 - Cilium Network Policy Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47825 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:52.000000Z"}, {"uuid": "68b2aae6-32ef-4faf-89f0-31a68ce6dcc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47715", "type": "seen", "source": "https://t.me/cvedetector/8477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47715 - ZyXEL EX5700 WiFi mt76 Kernel Oops Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47715 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: mt76: mt7915: fix oops on non-dbdc mt7986  \n  \nmt7915_band_config() sets band_idx = 1 on the main phy for mt7986  \nwith MT7975_ONE_ADIE or MT7976_ONE_ADIE.  \n  \nCommit 0335c034e726 (\"wifi: mt76: fix race condition related to  \nchecking tx queue fill status\") introduced a dereference of the  \nphys array indirectly indexed by band_idx via wcid->phy_idx in  \nmt76_wcid_cleanup(). This caused the following Oops on affected  \nmt7986 devices:  \n  \n Unable to handle kernel read from unreadable memory at virtual address 0000000000000024  \n Mem abort info:  \n   ESR = 0x0000000096000005  \n   EC = 0x25: DABT (current EL), IL = 32 bits  \n   SET = 0, FnV = 0  \n   EA = 0, S1PTW = 0  \n   FSC = 0x05: level 1 translation fault  \n Data abort info:  \n   ISV = 0, ISS = 0x00000005  \n   CM = 0, WnR = 0  \n user pgtable: 4k pages, 39-bit VAs, pgdp=0000000042545000  \n [0000000000000024] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000  \n Internal error: Oops: 0000000096000005 [#1] SMP  \n Modules linked in: ... mt7915e mt76_connac_lib mt76 mac80211 cfg80211 ...  \n CPU: 2 PID: 1631 Comm: hostapd Not tainted 5.15.150 #0  \n Hardware name: ZyXEL EX5700 (Telenor) (DT)  \n pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \n pc : mt76_wcid_cleanup+0x84/0x22c [mt76]  \n lr : mt76_wcid_cleanup+0x64/0x22c [mt76]  \n sp : ffffffc00a803700  \n x29: ffffffc00a803700 x28: ffffff80008f7300 x27: ffffff80003f3c00  \n x26: ffffff80000a7880 x25: ffffffc008c26e00 x24: 0000000000000001  \n x23: ffffffc000a68114 x22: 0000000000000000 x21: ffffff8004172cc8  \n x20: ffffffc00a803748 x19: ffffff8004152020 x18: 0000000000000000  \n x17: 00000000000017c0 x16: ffffffc008ef5000 x15: 0000000000000be0  \n x14: ffffff8004172e28 x13: ffffff8004172e28 x12: 0000000000000000  \n x11: 0000000000000000 x10: ffffff8004172e30 x9 : ffffff8004172e28  \n x8 : 0000000000000000 x7 : ffffff8004156020 x6 : 0000000000000000  \n x5 : 0000000000000031 x4 : 0000000000000000 x3 : 0000000000000001  \n x2 : 0000000000000000 x1 : ffffff80008f7300 x0 : 0000000000000024  \n Call trace:  \n  mt76_wcid_cleanup+0x84/0x22c [mt76]  \n  __mt76_sta_remove+0x70/0xbc [mt76]  \n  mt76_sta_state+0x8c/0x1a4 [mt76]  \n  mt7915_eeprom_get_power_delta+0x11e4/0x23a0 [mt7915e]  \n  drv_sta_state+0x144/0x274 [mac80211]  \n  sta_info_move_state+0x1cc/0x2a4 [mac80211]  \n  sta_set_sinfo+0xaf8/0xc24 [mac80211]  \n  sta_info_destroy_addr_bss+0x4c/0x6c [mac80211]  \n  \n  ieee80211_color_change_finish+0x1c08/0x1e70 [mac80211]  \n  cfg80211_check_station_change+0x1360/0x4710 [cfg80211]  \n  genl_family_rcv_msg_doit+0xb4/0x110  \n  genl_rcv_msg+0xd0/0x1bc  \n  netlink_rcv_skb+0x58/0x120  \n  genl_rcv+0x34/0x50  \n  netlink_unicast+0x1f0/0x2ec  \n  netlink_sendmsg+0x198/0x3d0  \n  ____sys_sendmsg+0x1b0/0x210  \n  ___sys_sendmsg+0x80/0xf0  \n  __sys_sendmsg+0x44/0xa0  \n  __arm64_sys_sendmsg+0x20/0x30  \n  invoke_syscall.constprop.0+0x4c/0xe0  \n  do_el0_svc+0x40/0xd0  \n  el0_svc+0x14/0x4c  \n  el0t_64_sync_handler+0x100/0x110  \n  el0t_64_sync+0x15c/0x160  \n Code: d2800002 910092c0 52800023 f9800011 (885f7c01)  \n ---[ end trace 7e42dd9a39ed2281 ]---  \n  \nFix by using mt76_dev_phy() which will map band_idx to the correct phy  \nfor all hardware combinations. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:10:39.000000Z"}, {"uuid": "527892b5-d11b-4592-9f41-64b5f5aee61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47706", "type": "seen", "source": "https://t.me/cvedetector/8475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47706 - Linux BFQ, Uninitialized Freelist Pointer Use After Free\", \n  \"Content\": \"CVE ID : CVE-2024-47706 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nblock, bfq: fix possible UAF for bfqq->bic with merge chain  \n  \n1) initial state, three tasks:  \n  \n  Process 1       Process 2 Process 3  \n   (BIC1)          (BIC2)   (BIC3)  \n    |  \u039b            |  \u039b    |  \u039b  \n    |  |            |  |    |  |  \n    V  |            V  |    V  |  \n    bfqq1           bfqq2    bfqq3  \nprocess ref:    1      1      1  \n  \n2) bfqq1 merged to bfqq2:  \n  \n  Process 1       Process 2 Process 3  \n   (BIC1)          (BIC2)   (BIC3)  \n    |               |    |  \u039b  \n    \\--------------\\|    |  |  \n                    V    V  |  \n    bfqq1--------->bfqq2    bfqq3  \nprocess ref:    0      2      1  \n  \n3) bfqq2 merged to bfqq3:  \n  \n  Process 1       Process 2 Process 3  \n   (BIC1)          (BIC2)   (BIC3)  \n  here -> \u039b                |    |  \n    \\--------------\\ \\-------------\\|  \n                    V    V  \n    bfqq1--------->bfqq2---------->bfqq3  \nprocess ref:    0      1      3  \n  \nIn this case, IO from Process 1 will get bfqq2 from BIC1 first, and then  \nget bfqq3 through merge chain, and finially handle IO by bfqq3.  \nHowerver, current code will think bfqq2 is owned by BIC1, like initial  \nstate, and set bfqq2->bic to BIC1.  \n  \nbfq_insert_request  \n-> by Process 1  \n bfqq = bfq_init_rq(rq)  \n  bfqq = bfq_get_bfqq_handle_split  \n   bfqq = bic_to_bfqq  \n   -> get bfqq2 from BIC1  \n bfqq->ref++  \n rq->elv.priv[0] = bic  \n rq->elv.priv[1] = bfqq  \n if (bfqq_process_refs(bfqq) == 1)  \n  bfqq->bic = bic  \n  -> record BIC1 to bfqq2  \n  \n  __bfq_insert_request  \n   new_bfqq = bfq_setup_cooperator  \n   -> get bfqq3 from bfqq2->new_bfqq  \n   bfqq_request_freed(bfqq)  \n   new_bfqq->ref++  \n   rq->elv.priv[1] = new_bfqq  \n   -> handle IO by bfqq3  \n  \nFix the problem by checking bfqq is from merge chain fist. And this  \nmight fix a following problem reported by our syzkaller(unreproducible):  \n  \n==================================================================  \nBUG: KASAN: slab-use-after-free in bfq_do_early_stable_merge block/bfq-iosched.c:5692 [inline]  \nBUG: KASAN: slab-use-after-free in bfq_do_or_sched_stable_merge block/bfq-iosched.c:5805 [inline]  \nBUG: KASAN: slab-use-after-free in bfq_get_queue+0x25b0/0x2610 block/bfq-iosched.c:5889  \nWrite of size 1 at addr ffff888123839eb8 by task kworker/0:1H/18595  \n  \nCPU: 0 PID: 18595 Comm: kworker/0:1H Tainted: G             L     6.6.0-07439-gba2303cacfda #6  \nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014  \nWorkqueue: kblockd blk_mq_requeue_work  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n dump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106  \n print_address_description mm/kasan/report.c:364 [inline]  \n print_report+0x10d/0x610 mm/kasan/report.c:475  \n kasan_report+0x8e/0xc0 mm/kasan/report.c:588  \n bfq_do_early_stable_merge block/bfq-iosched.c:5692 [inline]  \n bfq_do_or_sched_stable_merge block/bfq-iosched.c:5805 [inline]  \n bfq_get_queue+0x25b0/0x2610 block/bfq-iosched.c:5889  \n bfq_get_bfqq_handle_split+0x169/0x5d0 block/bfq-iosched.c:6757  \n bfq_init_rq block/bfq-iosched.c:6876 [inline]  \n bfq_insert_request block/bfq-iosched.c:6254 [inline]  \n bfq_insert_requests+0x1112/0x5cf0 block/bfq-iosched.c:6304  \n blk_mq_insert_request+0x290/0x8d0 block/blk-mq.c:2593  \n blk_mq_requeue_work+0x6bc/0xa70 block/blk-mq.c:1502  \n process_one_work kernel/workqueue.c:2627 [inline]  \n process_scheduled_works+0x432/0x13f0 kernel/workqueue.c:2700  \n worker_thread+0x6f2/0x1160 kernel/workqueue.c:2781  \n kthread+0x33c/0x440 kernel/kthread.c:388  \n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147  \n ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:305  \n   \n  \nAllocated by task 20776:  \n kasan_save_stack+0x20/0x40 mm/kasan/common.c:45[...]", "creation_timestamp": "2024-10-21T15:10:37.000000Z"}, {"uuid": "abc61ce3-3c2c-4667-9733-22f54d02b044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47751", "type": "seen", "source": "https://t.me/cvedetector/8496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47751 - Linux Kernel PCI Driver Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-47751 \nPublished : Oct. 21, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nPCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()  \n  \nWithin kirin_pcie_parse_port(), the pcie->num_slots is compared to  \npcie->gpio_id_reset size (MAX_PCI_SLOTS) which is correct and would lead  \nto an overflow.  \n  \nThus, fix condition to pcie->num_slots + 1 >= MAX_PCI_SLOTS and move  \npcie->num_slots increment below the if-statement to avoid out-of-bounds  \narray access.  \n  \nFound by Linux Verification Center (linuxtesting.org) with SVACE.  \n  \n[kwilczynski: commit log] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:10.000000Z"}, {"uuid": "21093063-23b3-4855-a289-77cecc941a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47752", "type": "seen", "source": "https://t.me/cvedetector/8495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47752 - Mediatek Linux Kernel Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-47752 \nPublished : Oct. 21, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: mediatek: vcodec: Fix H264 stateless decoder smatch warning  \n  \nFix a smatch static checker warning on vdec_h264_req_if.c.  \nWhich leads to a kernel crash when fb is NULL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:09.000000Z"}, {"uuid": "ff1d2cbe-2aed-45be-8bae-76d48e286322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47750", "type": "seen", "source": "https://t.me/cvedetector/8494", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47750 - Huawei RDMA Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47750 \nPublished : Oct. 21, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/hns: Fix Use-After-Free of rsv_qp on HIP08  \n  \nCurrently rsv_qp is freed before ib_unregister_device() is called  \non HIP08. During the time interval, users can still dereg MR and  \nrsv_qp will be used in this process, leading to a UAF. Move the  \nrelease of rsv_qp after calling ib_unregister_device() to fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:08.000000Z"}, {"uuid": "014d749c-a384-49c1-a04f-55a15ac5743d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47757", "type": "seen", "source": "https://t.me/cvedetector/8492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47757 - Linux Kernel Nilfs2 Out of Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47757 \nPublished : Oct. 21, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnilfs2: fix potential oob read in nilfs_btree_check_delete()  \n  \nThe function nilfs_btree_check_delete(), which checks whether degeneration  \nto direct mapping occurs before deleting a b-tree entry, causes memory  \naccess outside the block buffer when retrieving the maximum key if the  \nroot node has no entries.  \n  \nThis does not usually happen because b-tree mappings with 0 child nodes  \nare never created by mkfs.nilfs2 or nilfs2 itself.  However, it can happen  \nif the b-tree root node read from a device is configured that way, so fix  \nthis potential issue by adding a check for that case. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:04.000000Z"}, {"uuid": "c2cda03f-d673-43ae-8c03-356cf6640976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47756", "type": "seen", "source": "https://t.me/cvedetector/8491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47756 - Linux PCI Keystone NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47756 \nPublished : Oct. 21, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nPCI: keystone: Fix if-statement expression in ks_pcie_quirk()  \n  \nThis code accidentally uses && where || was intended.  It potentially  \nresults in a NULL dereference.  \n  \nThus, fix the if-statement expression to use the correct condition.  \n  \n[kwilczynski: commit log] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:03.000000Z"}, {"uuid": "e088e791-79fa-4217-94a3-da6c083c98af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47755", "type": "seen", "source": "https://t.me/cvedetector/8490", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47755 - Linux NVDIMM Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47755 \nPublished : Oct. 21, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnvdimm: Fix devs leaks in scan_labels()  \n  \nscan_labels() leaks memory when label scanning fails and it falls back  \nto just creating a default \"seed\" namespace for userspace to configure.  \nRoot can force the kernel to leak memory.  \n  \nAllocate the minimum resources unconditionally and release them when  \nunneeded to avoid the memory leak.  \n  \nA kmemleak reports:  \nunreferenced object 0xffff88800dda1980 (size 16):  \n  comm \"kworker/u10:5\", pid 69, jiffies 4294671781  \n  hex dump (first 16 bytes):  \n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................  \n  backtrace (crc 0):  \n    [<00000000c5dea560] __kmalloc+0x32c/0x470  \n    [<000000009ed43c83] nd_region_register_namespaces+0x6fb/0x1120 [libnvdimm]  \n    [<000000000e07a65c] nd_region_probe+0xfe/0x210 [libnvdimm]  \n    [<000000007b79ce5f] nvdimm_bus_probe+0x7a/0x1e0 [libnvdimm]  \n    [<00000000a5f3da2e] really_probe+0xc6/0x390  \n    [<00000000129e2a69] __driver_probe_device+0x78/0x150  \n    [<000000002dfed28b] driver_probe_device+0x1e/0x90  \n    [<00000000e7048de2] __device_attach_driver+0x85/0x110  \n    [<0000000032dca295] bus_for_each_drv+0x85/0xe0  \n    [<00000000391c5a7d] __device_attach+0xbe/0x1e0  \n    [<0000000026dabec0] bus_probe_device+0x94/0xb0  \n    [<00000000c590d936] device_add+0x656/0x870  \n    [<000000003d69bfaa] nd_async_device_register+0xe/0x50 [libnvdimm]  \n    [<000000003f4c52a4] async_run_entry_fn+0x2e/0x110  \n    [<00000000e201f4b0] process_one_work+0x1ee/0x600  \n    [<000000006d90d5a9] worker_thread+0x183/0x350 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T16:01:02.000000Z"}, {"uuid": "3908c19f-0c2f-441b-b762-9cd07bccb702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47718", "type": "seen", "source": "https://t.me/cvedetector/8454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47718 - Realtek Technologies Wi-Fi Unauthorized Access Forgery\", \n  \"Content\": \"CVE ID : CVE-2024-47718 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: rtw88: always wait for both firmware loading attempts  \n  \nIn 'rtw_wait_firmware_completion()', always wait for both (regular and  \nwowlan) firmware loading attempts. Otherwise if 'rtw_usb_intf_init()'  \nhas failed in 'rtw_usb_probe()', 'rtw_usb_disconnect()' may issue  \n'ieee80211_free_hw()' when one of 'rtw_load_firmware_cb()' (usually  \nthe wowlan one) is still in progress, causing UAF detected by KASAN. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:35.000000Z"}, {"uuid": "50b4059e-02b1-49bd-8798-09021dfcb6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47708", "type": "seen", "source": "https://t.me/cvedetector/8472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47708 - Netkit BPF Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47708 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetkit: Assign missing bpf_net_context  \n  \nDuring the introduction of struct bpf_net_context handling for  \nXDP-redirect, the netkit driver has been missed, which also requires it  \nbecause NETKIT_REDIRECT invokes skb_do_redirect() which is accessing the  \nper-CPU variables. Otherwise we see the following crash:  \n  \n BUG: kernel NULL pointer dereference, address: 0000000000000038  \n bpf_redirect()  \n netkit_xmit()  \n dev_hard_start_xmit()  \n  \nSet the bpf_net_context before invoking netkit_xmit() program within the  \nnetkit driver. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:10:00.000000Z"}, {"uuid": "b69641f2-b11a-47ae-9823-47fa0225b578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47709", "type": "seen", "source": "https://t.me/cvedetector/8471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47709 - Qualcomm BCM Process Support Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47709 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncan: bcm: Clear bo->bcm_proc_read after remove_proc_entry().  \n  \nsyzbot reported a warning in bcm_release(). [0]  \n  \nThe blamed change fixed another warning that is triggered when  \nconnect() is issued again for a socket whose connect()ed device has  \nbeen unregistered.  \n  \nHowever, if the socket is just close()d without the 2nd connect(), the  \nremaining bo->bcm_proc_read triggers unnecessary remove_proc_entry()  \nin bcm_release().  \n  \nLet's clear bo->bcm_proc_read after remove_proc_entry() in bcm_notify().  \n  \n[0]  \nname '4986'  \nWARNING: CPU: 0 PID: 5234 at fs/proc/generic.c:711 remove_proc_entry+0x2e7/0x5d0 fs/proc/generic.c:711  \nModules linked in:  \nCPU: 0 UID: 0 PID: 5234 Comm: syz-executor606 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  \nRIP: 0010:remove_proc_entry+0x2e7/0x5d0 fs/proc/generic.c:711  \nCode: ff eb 05 e8 cb 1e 5e ff 48 8b 5c 24 10 48 c7 c7 e0 f7 aa 8e e8 2a 38 8e 09 90 48 c7 c7 60 3a 1b 8c 48 89 de e8 da 42 20 ff 90 <0f0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07  \nRSP: 0018:ffffc9000345fa20 EFLAGS: 00010246  \nRAX: 2a2d0aee2eb64600 RBX: ffff888032f1f548 RCX: ffff888029431e00  \nRDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000  \nRBP: ffffc9000345fb08 R08: ffffffff8155b2f2 R09: 1ffff1101710519a  \nR10: dffffc0000000000 R11: ffffed101710519b R12: ffff888011d38640  \nR13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000  \nFS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 00007fcfb52722f0 CR3: 000000000e734000 CR4: 00000000003506f0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \nCall Trace:  \n   \n bcm_release+0x250/0x880 net/can/bcm.c:1578  \n __sock_release net/socket.c:659 [inline]  \n sock_close+0xbc/0x240 net/socket.c:1421  \n __fput+0x24a/0x8a0 fs/file_table.c:422  \n task_work_run+0x24f/0x310 kernel/task_work.c:228  \n exit_task_work include/linux/task_work.h:40 [inline]  \n do_exit+0xa2f/0x27f0 kernel/exit.c:882  \n do_group_exit+0x207/0x2c0 kernel/exit.c:1031  \n __do_sys_exit_group kernel/exit.c:1042 [inline]  \n __se_sys_exit_group kernel/exit.c:1040 [inline]  \n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040  \n x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232  \n do_syscall_x64 arch/x86/entry/common.c:52 [inline]  \n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  \n entry_SYSCALL_64_after_hwframe+0x77/0x7f  \nRIP: 0033:0x7fcfb51ee969  \nCode: Unable to access opcode bytes at 0x7fcfb51ee93f.  \nRSP: 002b:00007ffce0109ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7  \nRAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fcfb51ee969  \nRDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001  \nRBP: 00007fcfb526f3b0 R08: ffffffffffffffb8 R09: 0000555500000000  \nR10: 0000555500000000 R11: 0000000000000246 R12: 00007fcfb526f3b0  \nR13: 0000000000000000 R14: 00007fcfb5271ee0 R15: 00007fcfb51bf160 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:59.000000Z"}, {"uuid": "8dd46472-1c0d-4b54-bf73-2a4d7b80aa64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47707", "type": "seen", "source": "https://t.me/cvedetector/8469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47707 - Google Compute Engine IPv6 Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-47707 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()  \n  \nBlamed commit accidentally removed a check for rt->rt6i_idev being NULL,  \nas spotted by syzbot:  \n  \nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI  \nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]  \nCPU: 1 UID: 0 PID: 10998 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00208-g625403177711 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  \n RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  \n RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914  \nCode: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <803c 08 00 74 08 4c 89 f7 e8 64 d0 9b f7 48 8b 44 24 18 49 39 06  \nRSP: 0018:ffffc900047374e0 EFLAGS: 00010246  \nRAX: 0000000000000000 RBX: 1ffff1100fdf8f33 RCX: dffffc0000000000  \nRDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807efc78c0  \nRBP: ffffc900047375d0 R08: 0000000000000003 R09: fffff520008e6e8c  \nR10: dffffc0000000000 R11: fffff520008e6e8c R12: 1ffff1100fdf8f18  \nR13: ffff88807efc7998 R14: 0000000000000000 R15: ffff88807efc7930  \nFS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 0000000020002a80 CR3: 0000000022f62000 CR4: 00000000003506f0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \nCall Trace:  \n   \n  addrconf_ifdown+0x15d/0x1bd0 net/ipv6/addrconf.c:3856  \n addrconf_notify+0x3cb/0x1020  \n  notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93  \n  call_netdevice_notifiers_extack net/core/dev.c:2032 [inline]  \n  call_netdevice_notifiers net/core/dev.c:2046 [inline]  \n  unregister_netdevice_many_notify+0xd81/0x1c40 net/core/dev.c:11352  \n  unregister_netdevice_many net/core/dev.c:11414 [inline]  \n  unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11289  \n  unregister_netdevice include/linux/netdevice.h:3129 [inline]  \n  __tun_detach+0x6b9/0x1600 drivers/net/tun.c:685  \n  tun_detach drivers/net/tun.c:701 [inline]  \n  tun_chr_close+0x108/0x1b0 drivers/net/tun.c:3510  \n  __fput+0x24a/0x8a0 fs/file_table.c:422  \n  task_work_run+0x24f/0x310 kernel/task_work.c:228  \n  exit_task_work include/linux/task_work.h:40 [inline]  \n  do_exit+0xa2f/0x27f0 kernel/exit.c:882  \n  do_group_exit+0x207/0x2c0 kernel/exit.c:1031  \n  __do_sys_exit_group kernel/exit.c:1042 [inline]  \n  __se_sys_exit_group kernel/exit.c:1040 [inline]  \n  __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040  \n  x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232  \n  do_syscall_x64 arch/x86/entry/common.c:52 [inline]  \n  do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  \n entry_SYSCALL_64_after_hwframe+0x77/0x7f  \nRIP: 0033:0x7f1acc77def9  \nCode: Unable to access opcode bytes at 0x7f1acc77decf.  \nRSP: 002b:00007ffeb26fa738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7  \nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1acc77def9  \nRDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043  \nRBP: 00007f1acc7dd508 R08: 00007ffeb26f84d7 R09: 0000000000000003  \nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001  \nR13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeb26fa8e0  \n   \nModules linked in:  \n---[ end trace 0000000000000000 ]---  \n RIP: 0010:rt6_uncached_list_flush_dev net/ipv6/route.c:177 [inline]  \n RIP: 0010:rt6_disable_ip+0x33e/0x7e0 net/ipv6/route.c:4914  \nCode: 41 80 3c 04 00 74 0a e8 90 d0 9b f7 48 8b 7c 24 08 48 8b 07 48 89 44 24 10 4c 89 f0 48 c1 e8 03 48 b9 [...]", "creation_timestamp": "2024-10-21T15:09:57.000000Z"}, {"uuid": "8773c852-0fdf-41eb-ac1f-c4c0ba6a877f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47705", "type": "seen", "source": "https://t.me/cvedetector/8468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47705 - Linux Kernel Block Invalid Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47705 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nblock: fix potential invalid pointer dereference in blk_add_partition  \n  \nThe blk_add_partition() function initially used a single if-condition  \n(IS_ERR(part)) to check for errors when adding a partition. This was  \nmodified to handle the specific case of -ENXIO separately, allowing the  \nfunction to proceed without logging the error in this case. However,  \nthis change unintentionally left a path where md_autodetect_dev()  \ncould be called without confirming that part is a valid pointer.  \n  \nThis commit separates the error handling logic by splitting the  \ninitial if-condition, improving code readability and handling specific  \nerror scenarios explicitly. The function now distinguishes the general  \nerror case from -ENXIO without altering the existing behavior of  \nmd_autodetect_dev() calls. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:53.000000Z"}, {"uuid": "10fe82ba-a58b-421c-ae38-638182b934f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47714", "type": "seen", "source": "https://t.me/cvedetector/8467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47714 - Linux Kernel MT76 Wi-Fi Off-Path Stack Out-Of-Bounds WRITE\", \n  \"Content\": \"CVE ID : CVE-2024-47714 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: mt76: mt7996: use hweight16 to get correct tx antenna  \n  \nThe chainmask is u16 so using hweight8 cannot get correct tx_ant.  \nWithout this patch, the tx_ant of band 2 would be -1 and lead to the  \nfollowing issue:  \nBUG: KASAN: stack-out-of-bounds in mt7996_mcu_add_sta+0x12e0/0x16e0 [mt7996e] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:52.000000Z"}, {"uuid": "ee57133d-16ff-41bb-bf63-65111d49a194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47712", "type": "seen", "source": "https://t.me/cvedetector/8466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47712 - Apache WiFi Device Use-After-Free RCU Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47712 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param  \n  \nIn the `wilc_parse_join_bss_param` function, the TSF field of the `ies`  \nstructure is accessed after the RCU read-side critical section is  \nunlocked. According to RCU usage rules, this is illegal. Reusing this  \npointer can lead to unpredictable behavior, including accessing memory  \nthat has been updated or causing use-after-free issues.  \n  \nThis possible bug was identified using a static analysis tool developed  \nby myself, specifically designed to detect RCU-related issues.  \n  \nTo address this, the TSF value is now stored in a local variable  \n`ies_tsf` before the RCU lock is released. The `param->tsf_lo` field is  \nthen assigned using this local variable, ensuring that the TSF value is  \nsafely accessed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:52.000000Z"}, {"uuid": "96eaa0d9-796c-4b49-857f-178f675783f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47711", "type": "seen", "source": "https://t.me/cvedetector/8464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47711 - Here is a title for the vulnerability: \"MSV-SUSE-Vulnerability: Linux Unix/AF_UNIX Use-After-Free Vulnerability (VRF)\"\", \n  \"Content\": \"CVE ID : CVE-2024-47711 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \naf_unix: Don't return OOB skb in manage_oob().  \n  \nsyzbot reported use-after-free in unix_stream_recv_urg(). [0]  \n  \nThe scenario is  \n  \n  1. send(MSG_OOB)  \n  2. recv(MSG_OOB)  \n     -> The consumed OOB remains in recv queue  \n  3. send(MSG_OOB)  \n  4. recv()  \n     -> manage_oob() returns the next skb of the consumed OOB  \n     -> This is also OOB, but unix_sk(sk)->oob_skb is not cleared  \n  5. recv(MSG_OOB)  \n     -> unix_sk(sk)->oob_skb is used but already freed  \n  \nThe recent commit 8594d9b85c07 (\"af_unix: Don't call skb_get() for OOB  \nskb.\") uncovered the issue.  \n  \nIf the OOB skb is consumed and the next skb is peeked in manage_oob(),  \nwe still need to check if the skb is OOB.  \n  \nLet's do so by falling back to the following checks in manage_oob()  \nand add the test case in selftest.  \n  \nNote that we need to add a similar check for SIOCATMARK.  \n  \n[0]:  \nBUG: KASAN: slab-use-after-free in unix_stream_read_actor+0xa6/0xb0 net/unix/af_unix.c:2959  \nRead of size 4 at addr ffff8880326abcc4 by task syz-executor178/5235  \n  \nCPU: 0 UID: 0 PID: 5235 Comm: syz-executor178 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:93 [inline]  \n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119  \n print_address_description mm/kasan/report.c:377 [inline]  \n print_report+0x169/0x550 mm/kasan/report.c:488  \n kasan_report+0x143/0x180 mm/kasan/report.c:601  \n unix_stream_read_actor+0xa6/0xb0 net/unix/af_unix.c:2959  \n unix_stream_recv_urg+0x1df/0x320 net/unix/af_unix.c:2640  \n unix_stream_read_generic+0x2456/0x2520 net/unix/af_unix.c:2778  \n unix_stream_recvmsg+0x22b/0x2c0 net/unix/af_unix.c:2996  \n sock_recvmsg_nosec net/socket.c:1046 [inline]  \n sock_recvmsg+0x22f/0x280 net/socket.c:1068  \n ____sys_recvmsg+0x1db/0x470 net/socket.c:2816  \n ___sys_recvmsg net/socket.c:2858 [inline]  \n __sys_recvmsg+0x2f0/0x3e0 net/socket.c:2888  \n do_syscall_x64 arch/x86/entry/common.c:52 [inline]  \n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  \n entry_SYSCALL_64_after_hwframe+0x77/0x7f  \nRIP: 0033:0x7f5360d6b4e9  \nCode: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <483d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48  \nRSP: 002b:00007fff29b3a458 EFLAGS: 00000246 ORIG_RAX: 000000000000002f  \nRAX: ffffffffffffffda RBX: 00007fff29b3a638 RCX: 00007f5360d6b4e9  \nRDX: 0000000000002001 RSI: 0000000020000640 RDI: 0000000000000003  \nRBP: 00007f5360dde610 R08: 0000000000000000 R09: 0000000000000000  \nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001  \nR13: 00007fff29b3a628 R14: 0000000000000001 R15: 0000000000000001  \n   \n  \nAllocated by task 5235:  \n kasan_save_stack mm/kasan/common.c:47 [inline]  \n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68  \n unpoison_slab_object mm/kasan/common.c:312 [inline]  \n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338  \n kasan_slab_alloc include/linux/kasan.h:201 [inline]  \n slab_post_alloc_hook mm/slub.c:3988 [inline]  \n slab_alloc_node mm/slub.c:4037 [inline]  \n kmem_cache_alloc_node_noprof+0x16b/0x320 mm/slub.c:4080  \n __alloc_skb+0x1c3/0x440 net/core/skbuff.c:667  \n alloc_skb include/linux/skbuff.h:1320 [inline]  \n alloc_skb_with_frags+0xc3/0x770 net/core/skbuff.c:6528  \n sock_alloc_send_pskb+0x91a/0xa60 net/core/sock.c:2815  \n sock_alloc_send_skb include/net/sock.h:1778 [inline]  \n queue_oob+0x108/0x680 net/unix/af_unix.c:2198  \n unix_stream_sendmsg+0xd24/0xf80 net/unix/af_unix.c:2351  \n sock_sendmsg_nosec net/socket.c:730 [inline]  \n __sock_sendmsg+[...]", "creation_timestamp": "2024-10-21T15:09:50.000000Z"}, {"uuid": "c4456b93-5570-4a51-9a9a-9f237d303761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47710", "type": "seen", "source": "https://t.me/cvedetector/8463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47710 - Linux kernel Soft Lockup in Sock Map Hash Free\", \n  \"Content\": \"CVE ID : CVE-2024-47710 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsock_map: Add a cond_resched() in sock_hash_free()  \n  \nSeveral syzbot soft lockup reports all have in common sock_hash_free()  \n  \nIf a map with a large number of buckets is destroyed, we need to yield  \nthe cpu when needed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:46.000000Z"}, {"uuid": "40cd3f68-e45d-43ae-ad3b-7c4ff7345ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47719", "type": "seen", "source": "https://t.me/cvedetector/8458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47719 - Linux iommufd huge automatic alignment overflow vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47719 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niommufd: Protect against overflow of ALIGN() during iova allocation  \n  \nUserspace can supply an iova and uptr such that the target iova alignment  \nbecomes really big and ALIGN() overflows which corrupts the selected area  \nrange during allocation. CONFIG_IOMMUFD_TEST can detect this:  \n  \n   WARNING: CPU: 1 PID: 5092 at drivers/iommu/iommufd/io_pagetable.c:268 iopt_alloc_area_pages drivers/iommu/iommufd/io_pagetable.c:268 [inline]  \n   WARNING: CPU: 1 PID: 5092 at drivers/iommu/iommufd/io_pagetable.c:268 iopt_map_pages+0xf95/0x1050 drivers/iommu/iommufd/io_pagetable.c:352  \n   Modules linked in:  \n   CPU: 1 PID: 5092 Comm: syz-executor294 Not tainted 6.10.0-rc5-syzkaller-00294-g3ffea9a7a6f7 #0  \n   Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024  \n   RIP: 0010:iopt_alloc_area_pages drivers/iommu/iommufd/io_pagetable.c:268 [inline]  \n   RIP: 0010:iopt_map_pages+0xf95/0x1050 drivers/iommu/iommufd/io_pagetable.c:352  \n   Code: fc e9 a4 f3 ff ff e8 1a 8b 4c fc 41 be e4 ff ff ff e9 8a f3 ff ff e8 0a 8b 4c fc 90 0f 0b 90 e9 37 f5 ff ff e8 fc 8a 4c fc 90 <0f0b 90 e9 68 f3 ff ff 48 c7 c1 ec 82 ad 8f 80 e1 07 80 c1 03 38  \n   RSP: 0018:ffffc90003ebf9e0 EFLAGS: 00010293  \n   RAX: ffffffff85499fa4 RBX: 00000000ffffffef RCX: ffff888079b49e00  \n   RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000  \n   RBP: ffffc90003ebfc50 R08: ffffffff85499b30 R09: ffffffff85499942  \n   R10: 0000000000000002 R11: ffff888079b49e00 R12: ffff8880228e0010  \n   R13: 0000000000000000 R14: 1ffff920007d7f68 R15: ffffc90003ebfd00  \n   FS:  000055557d760380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000  \n   CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n   CR2: 00000000005fdeb8 CR3: 000000007404a000 CR4: 00000000003506f0  \n   DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \n   DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \n   Call Trace:  \n      \n    iommufd_ioas_copy+0x610/0x7b0 drivers/iommu/iommufd/ioas.c:274  \n    iommufd_fops_ioctl+0x4d9/0x5a0 drivers/iommu/iommufd/main.c:421  \n    vfs_ioctl fs/ioctl.c:51 [inline]  \n    __do_sys_ioctl fs/ioctl.c:907 [inline]  \n    __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893  \n    do_syscall_x64 arch/x86/entry/common.c:52 [inline]  \n    do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  \n    entry_SYSCALL_64_after_hwframe+0x77/0x7f  \n  \nCap the automatic alignment to the huge page size, which is probably a  \nbetter idea overall. Huge automatic alignments can fragment and chew up  \nthe available IOVA space without any reason. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:39.000000Z"}, {"uuid": "ff71bd3d-c47c-43e0-be7a-cc5aaa2ca4d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47720", "type": "seen", "source": "https://t.me/cvedetector/8457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47720 - AMD display driver null pointer dereference vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47720 \nPublished : Oct. 21, 2024, 12:15 p.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func  \n  \nThis commit adds a null check for the set_output_gamma function pointer  \nin the  dcn30_set_output_transfer_func function. Previously,  \nset_output_gamma was being checked for nullity at line 386, but then it  \nwas being dereferenced without any nullity check at line 401. This  \ncould potentially lead to a null pointer dereference error if  \nset_output_gamma is indeed null.  \n  \nTo fix this, we now ensure that set_output_gamma is not null before  \ndereferencing it. We do this by adding a nullity check for  \nset_output_gamma before the call to set_output_gamma at line 401. If  \nset_output_gamma is null, we log an error message and do not call the  \nfunction.  \n  \nThis fix prevents a potential null pointer dereference error.  \n  \ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c:401 dcn30_set_output_transfer_func()  \nerror: we previously assumed 'mpc->funcs->set_output_gamma' could be null (see line 386)  \n  \ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c  \n    373 bool dcn30_set_output_transfer_func(struct dc *dc,  \n    374                                 struct pipe_ctx *pipe_ctx,  \n    375                                 const struct dc_stream_state *stream)  \n    376 {  \n    377         int mpcc_id = pipe_ctx->plane_res.hubp->inst;  \n    378         struct mpc *mpc = pipe_ctx->stream_res.opp->ctx->dc->res_pool->mpc;  \n    379         const struct pwl_params *params = NULL;  \n    380         bool ret = false;  \n    381  \n    382         /* program OGAM or 3DLUT only for the top pipe*/  \n    383         if (pipe_ctx->top_pipe == NULL) {  \n    384                 /*program rmu shaper and 3dlut in MPC*/  \n    385                 ret = dcn30_set_mpc_shaper_3dlut(pipe_ctx, stream);  \n    386                 if (ret == false && mpc->funcs->set_output_gamma) {  \n                                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ If this is NULL  \n  \n    387                         if (stream->out_transfer_func.type == TF_TYPE_HWPWL)  \n    388                                 params = &stream->out_transfer_func.pwl;  \n    389                         else if (pipe_ctx->stream->out_transfer_func.type ==  \n    390                                         TF_TYPE_DISTRIBUTED_POINTS &&  \n    391                                         cm3_helper_translate_curve_to_hw_format(  \n    392                                         &stream->out_transfer_func,  \n    393                                         &mpc->blender_params, false))  \n    394                                 params = &mpc->blender_params;  \n    395                          /* there are no ROM LUTs in OUTGAM */  \n    396                         if (stream->out_transfer_func.type == TF_TYPE_PREDEFINED)  \n    397                                 BREAK_TO_DEBUGGER();  \n    398                 }  \n    399         }  \n    400  \n--> 401         mpc->funcs->set_output_gamma(mpc, mpcc_id, params);  \n                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Then it will crash  \n  \n    402         return ret;  \n    403 } \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T15:09:38.000000Z"}, {"uuid": "cc89619c-190d-4360-9809-023760ad203f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47634", "type": "seen", "source": "https://t.me/cvedetector/8437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47634 - \"WooCommerce CartBounty CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47634 \nPublished : Oct. 20, 2024, 11:15 a.m. | 44\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Streamline.Lv CartBounty \u2013 Save and recover abandoned carts for WooCommerce allows Cross Site Request Forgery.This issue affects CartBounty \u2013 Save and recover abandoned carts for WooCommerce: from n/a through 8.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-20T14:05:14.000000Z"}, {"uuid": "3ebf58b1-b163-43c1-a697-6c9afc0bb528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47948", "type": "seen", "source": "https://t.me/cvedetector/7369", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47948 - JetBrains TeamCity Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47948 \nPublished : Oct. 8, 2024, 4:15 p.m. | 21\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T18:43:27.000000Z"}, {"uuid": "e2633c70-e938-4d92-b056-92e70cff08d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47161", "type": "seen", "source": "https://t.me/cvedetector/7368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47161 - JetBrains TeamCity Password Exposure via Sonar Runner REST API\", \n  \"Content\": \"CVE ID : CVE-2024-47161 \nPublished : Oct. 8, 2024, 4:15 p.m. | 21\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T18:43:27.000000Z"}, {"uuid": "3e231a57-9b7c-45dd-920a-74c6b9458f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47951", "type": "seen", "source": "https://t.me/cvedetector/7366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47951 - JetBrains TeamCity Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47951 \nPublished : Oct. 8, 2024, 4:15 p.m. | 21\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T18:43:25.000000Z"}, {"uuid": "a0ec2631-c44a-4bd9-a959-28fde7053440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47565", "type": "seen", "source": "https://t.me/cvedetector/7336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47565 - Siemens SINEC Security Monitor Input Validation Denial of Configuration Integrity Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47565 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values.  \nThis could allow an authenticated remote attacker to compromise the integrity of the configuration of the affected application. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:10.000000Z"}, {"uuid": "d97474a6-7316-47e5-8d7f-ba3932bfaa5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47950", "type": "seen", "source": "https://t.me/cvedetector/7371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47950 - JetBrains TeamCity Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47950 \nPublished : Oct. 8, 2024, 4:15 p.m. | 21\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T18:43:32.000000Z"}, {"uuid": "60f41adb-8199-47c1-9335-e7b5fadc6f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47949", "type": "seen", "source": "https://t.me/cvedetector/7370", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47949 - JetBrains TeamCity FTP Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47949 \nPublished : Oct. 8, 2024, 4:15 p.m. | 21\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T18:43:28.000000Z"}, {"uuid": "7798cc25-323f-47db-bb8c-f993c0e61d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47594", "type": "seen", "source": "https://t.me/cvedetector/7302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47594 - \"Cross-Site Scripting in SAP NetWeaver Enterprise Portal KMC\"\", \n  \"Content\": \"CVE ID : CVE-2024-47594 \nPublished : Oct. 8, 2024, 4:15 a.m. | 37\u00a0minutes ago \nDescription : SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick the user into clicking it. When a victim who is registered on the portal clicks on such link, confidentiality and integrity of their web browser session could be compromised. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T07:00:58.000000Z"}, {"uuid": "9553f362-3383-4f8d-afa9-ca6f3d8602e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47046", "type": "seen", "source": "https://t.me/cvedetector/7343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47046 - \"Simcenter Nastran BDF File Memory Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47046 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran 2312 (All versions), Simcenter Nastran 2406 (All versions < V2406.5000). The affected application is vulnerable to memory corruption while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:21.000000Z"}, {"uuid": "58dc4fea-5cb7-4918-9022-e8468beb80f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47553", "type": "seen", "source": "https://t.me/cvedetector/7340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47553 - Siemens SINEC Security Monitor Remote Code Execution as Root\", \n  \"Content\": \"CVE ID : CVE-2024-47553 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate user input to the ```ssmctl-client``` command.  \nThis could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root privileges on the underlying OS. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:16.000000Z"}, {"uuid": "5f3f1658-603c-41fe-8cbf-178b6f57da2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47196", "type": "seen", "source": "https://t.me/cvedetector/7339", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47196 - \"ModelSim & Questa Local File Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47196 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vsimk.exe in affected applications allows a specific tcl file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch vsimk.exe from a user-writable directory. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:15.000000Z"}, {"uuid": "c8b46489-de2b-446b-a5ec-2df67f48cca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47195", "type": "seen", "source": "https://t.me/cvedetector/7338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47195 - ModelSim/Questa Local Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47195 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch gdb.exe from a user-writable directory. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:14.000000Z"}, {"uuid": "1001fb22-5890-4805-ba49-6688e0b7f617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47194", "type": "seen", "source": "https://t.me/cvedetector/7337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47194 - Questa and ModelSim DLL Loading Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47194 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch vish2.exe from a user-writable directory. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:14.000000Z"}, {"uuid": "66083b07-1ae5-4d82-8a15-a476eb7a6a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47563", "type": "seen", "source": "https://t.me/cvedetector/7335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47563 - Siemens SINEC Security Monitor File Path Validation Vulnerability (Path Traversal)\", \n  \"Content\": \"CVE ID : CVE-2024-47563 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files.  \nThis could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:09.000000Z"}, {"uuid": "15d6fb1a-f6f3-408f-a753-0e89aeb0f10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47562", "type": "seen", "source": "https://t.me/cvedetector/7334", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47562 - Siemens SINEC Security Monitor Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47562 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` command.  \nThis could allow an authenticated, lowly privileged local attacker to execute privileged commands in the underlying OS. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:08.000000Z"}, {"uuid": "f6809b3c-ad3b-474f-b012-6628e91c8709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47095", "type": "seen", "source": "https://t.me/cvedetector/7331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47095 - Follet School Solutions Destiny Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47095 \nPublished : Oct. 8, 2024, 8:15 a.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T11:11:57.000000Z"}, {"uuid": "84455bba-16cc-4d61-86d5-318eb4346167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47972", "type": "seen", "source": "https://t.me/cvedetector/7266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47972 - Solidigm DC Arbitrary Resource Controller\", \n  \"Content\": \"CVE ID : CVE-2024-47972 \nPublished : Oct. 7, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the resource. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T22:39:19.000000Z"}, {"uuid": "a4358826-f67f-4bef-932e-45cffaacc59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47781", "type": "seen", "source": "https://t.me/cvedetector/7294", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47781 - Miraheze CreateWiki XSS Vulnerability (Cross-Site Scripting)\", \n  \"Content\": \"CVE ID : CVE-2024-47781 \nPublished : Oct. 7, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped on Special:RequestWikiQueue, so a user can insert arbitrary HTML that is displayed in the request wiki queue when requesting a wiki. If a wiki creator comes across the XSS payload, their user session can be abused to retrieve deleted wiki requests, which typically contains private information. Likewise, this can also be abused on those with the ability to suppress requests to view sensitive information. This issue has been patched with commit `693a220` and all users are advised to apply the patch. Users unable to upgrade should disable Javascript and/or prevent access to the vulnerable page (Special:RequestWikiQueue). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T01:10:03.000000Z"}, {"uuid": "b878854a-0a19-4a22-8123-c6dbc2d9b7a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47969", "type": "seen", "source": "https://t.me/cvedetector/7292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47969 - Solidigm DC Products Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-47969 \nPublished : Oct. 7, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T01:10:02.000000Z"}, {"uuid": "3e6cba44-697d-4875-bf33-8c5f4e1f29ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47976", "type": "seen", "source": "https://t.me/cvedetector/7269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47976 - Solidigm DC Products Firmware Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47976 \nPublished : Oct. 7, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T22:39:21.000000Z"}, {"uuid": "b9d6c9c9-c875-41ec-9d4b-7efb5c7aa788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47971", "type": "seen", "source": "https://t.me/cvedetector/7268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47971 - SSD DC Products Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47971 \nPublished : Oct. 7, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T22:39:20.000000Z"}, {"uuid": "78787eee-1613-466b-83a9-9352e1e075fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47817", "type": "seen", "source": "https://t.me/cvedetector/7297", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47817 - Lara-Zeus Artemis XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47817 \nPublished : Oct. 7, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a paragraph widget is rendered. Users are advised to upgrade to the appropriate fix versions detailed in the advisory metadata. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T01:10:08.000000Z"}, {"uuid": "e0856147-2527-4c0c-a695-81bb11839f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47814", "type": "seen", "source": "https://t.me/cvedetector/7296", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47814 - \"Vim Use-After-Free Buffer Crash Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47814 \nPublished : Oct. 7, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 3.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T01:10:08.000000Z"}, {"uuid": "02710bbe-9c8d-4c5e-8cf2-5500745c35bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47782", "type": "seen", "source": "https://t.me/cvedetector/7295", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47782 - WikiDiscover XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47782 \nPublished : Oct. 7, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lists all wikis on the wiki farm. However, the special page does not make any effort to escape the wiki name or description. Therefore, if a wiki sets its name and/or description to an XSS payload, the XSS will execute whenever the wiki is shown on Special:WikiDiscover. This issue has been patched with commit `2ce846dd93` and all users are advised to apply that patch. User unable to upgrade should block access to `Special:WikiDiscover`. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T01:10:07.000000Z"}, {"uuid": "86ecb267-83d7-466f-a124-f51733ba1b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47968", "type": "seen", "source": "https://t.me/cvedetector/7291", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47968 - Solidigm DC Products Resource Shutdown Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-47968 \nPublished : Oct. 7, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T01:10:01.000000Z"}, {"uuid": "fbe85b06-d08c-4bb3-b043-100768a54456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47818", "type": "seen", "source": "https://t.me/cvedetector/7290", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47818 - Saltcorn Filesystem Deletion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47818 \nPublished : Oct. 7, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : Saltcorn is an extensible, open source, no-code database application builder. A logged-in user with any role can delete arbitrary files on the filesystem by calling the `sync/clean_sync_dir` endpoint. The `dir_name` POST parameter is not validated/sanitized and is used to construct the `syncDir` that is deleted by calling `fs.rm`. This issue has been addressed in release version 1.0.0-beta16 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T01:10:00.000000Z"}, {"uuid": "73576341-7174-48ce-9fc9-7290f0c2660f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47079", "type": "seen", "source": "https://t.me/cvedetector/7267", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47079 - Meshtastic Firmware Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47079 \nPublished : Oct. 7, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote hardware control message was received should be considered valid. This issue has been addressed in release version 2.5.1. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T22:39:19.000000Z"}, {"uuid": "fba9dbc7-79f9-4578-a477-327bb9aafde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47975", "type": "seen", "source": "https://t.me/cvedetector/7262", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47975 - Solidigm DC Product Firmware Access Control Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47975 \nPublished : Oct. 7, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access or an attacker with local access to potentially enable denial of service. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T21:49:10.000000Z"}, {"uuid": "c645845f-5c27-4994-bcc6-6190df6e6f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47974", "type": "seen", "source": "https://t.me/cvedetector/7279", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47974 - Solidigm DC Products Resource Shutdown Denial of Service vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47974 \nPublished : Oct. 7, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T00:19:42.000000Z"}, {"uuid": "171a16ad-2b7c-47c6-824a-8e20a2d74471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47967", "type": "seen", "source": "https://t.me/cvedetector/7278", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47967 - Solidigm DC Products Firmware Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47967 \nPublished : Oct. 7, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T00:19:39.000000Z"}, {"uuid": "e9909132-7026-48a0-a6b8-8d6b33ea3e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47772", "type": "seen", "source": "https://t.me/cvedetector/7277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47772 - Discourse Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47772 \nPublished : Oct. 7, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by sending a maliciously crafted chat message and replying to it. This issue only affects sites with CSP disabled. This problem is patched in the latest version of Discourse. All users are advised to upgrade. Users unable to upgrade should ensure CSP is enabled on the forum. Users who do upgrade should also consider enabling a CSP as well as a proactive measure. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T00:19:38.000000Z"}, {"uuid": "faed493d-107f-43c3-ba35-e27ee8d9763d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47610", "type": "seen", "source": "https://t.me/cvedetector/7276", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47610 - InvenTree Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47610 \nPublished : Oct. 7, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a registered user to store javascript in markdown notes fields, which are then displayed to other logged in users who visit the same page and executed. The vulnerability has been addressed as follows: 1. HTML sanitization has been enabled in the front-end markdown rendering library - `easymde`. 2. Stored markdown is also validated on the backend, to ensure that malicious markdown is not stored in the database. These changes are available in release versions 0.16.5 and later. All users are advised to upgrade. There are no workarounds, an update is required to get the new validation functions. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T00:19:37.000000Z"}, {"uuid": "4bb4bcd2-186b-49a8-a8e0-43e7484e993e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47973", "type": "seen", "source": "https://t.me/cvedetector/7275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47973 - Solidigm DC Products Path Redirecting Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47973 \nPublished : Oct. 7, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T00:19:36.000000Z"}, {"uuid": "3972f223-c2fc-4ffd-abbf-caabd6ce20c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47827", "type": "seen", "source": "https://t.me/cvedetector/9139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47827 - Argo Workflows Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-47827 \nPublished : Oct. 28, 2024, 4:15 p.m. | 34\u00a0minutes ago \nDescription : Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerability is fixed in 3.6.0-rc2. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T17:50:19.000000Z"}, {"uuid": "14bccee4-312a-4147-8d91-05325123f38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47884", "type": "seen", "source": "https://t.me/cvedetector/7745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47884 - Firefox File Permission Disclosure in Foxmarks\", \n  \"Content\": \"CVE ID : CVE-2024-47884 \nPublished : Oct. 11, 2024, 8:15 p.m. | 32\u00a0minutes ago \nDescription : foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp directory with read permissions for all users containing a copy of Firefox's database of bookmarks, history, input history, visits counter, use counter, view counter and more confidential information about the history of using Firefox. Permissions default to 0o600 for NamedTempFile. However, after copying the database, its permissions were copied with it resulting in an insecure file with 0x644 permissions. A malicious user is able to read the database when the targeted user executes foxmarks bookmarks or foxmarks history. This vulnerability is patched in v2.1.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T22:55:00.000000Z"}, {"uuid": "3201e601-30d9-488a-86a3-af4082e6ae66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47505", "type": "seen", "source": "https://t.me/cvedetector/7703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47508 - Juniper Networks Junos OS Evolved PFE Management Daemon Resource Allocation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47508 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.2R3-S8-EVO,  \n  *  21.3 versions before 21.3R3-EVO;  \n  *  21.4 versions before 22.1R2-EVO,  \n  \n  *  22.1 versions before\u00a022.1R1-S1-EVO, 22.1R2-EVO.  \n  \n  \n  \n  \n  \nPlease note that this issue is similar to, but different from CVE-2024-47505 and CVE-2024-47509. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:57.000000Z"}, {"uuid": "dc1dc7a0-c4d3-4a9a-8a17-d787f90374a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47801", "type": "seen", "source": "https://t.me/cvedetector/8897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47801 - Sharp and Toshiba Tec MFPs Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47801 \nPublished : Oct. 25, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability.  \nAccessing a crafted URL which points to an affected product may cause malicious script executed on the web browser. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T10:23:31.000000Z"}, {"uuid": "da192ba9-db67-47f3-82b0-fcf570a9d5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47549", "type": "seen", "source": "https://t.me/cvedetector/8896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47549 - Sharp and Toshiba Tec MFPs HTTP Response Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47549 \nPublished : Oct. 25, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers.  \nAccessing a crafted URL which points to an affected product may cause malicious script executed on the web browser. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T10:23:30.000000Z"}, {"uuid": "dec14e97-3471-4ff0-b898-854c2944e79b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47821", "type": "seen", "source": "https://t.me/cvedetector/9001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47821 - PyLoad Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47821 \nPublished : Oct. 25, 2024, 11:15 p.m. | 41\u00a0minutes ago \nDescription : pyLoad is a free and open-source Download Manager. The folder `/.pyload/scripts` has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executable file to a folder in /scripts and performing the respective action, remote code execution can be achieved in versions on the 0.5 branch prior to 0.5.0b3.dev87. A file can be downloaded to such a folder by changing the download folder to a folder in `/scripts` path and using the `/flashgot` API to download the file. This vulnerability allows an attacker with access to change the settings on a pyload server to execute arbitrary code and completely compromise the system. Version 0.5.0b3.dev87 fixes this issue. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-26T02:17:20.000000Z"}, {"uuid": "708d2d98-14fd-41a6-b0e4-1be01f991629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47025", "type": "seen", "source": "https://t.me/cvedetector/8930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47025 - Google DRM Buffer Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47025 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:27.000000Z"}, {"uuid": "ede328ca-e30e-4c02-87a6-61823e4c229a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47035", "type": "seen", "source": "https://t.me/cvedetector/8927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47035 - Virtio Ring Out-of-Bounds Write Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47035 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:25.000000Z"}, {"uuid": "aa8e271b-d18f-4421-9e53-3d8870a9a01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47034", "type": "seen", "source": "https://t.me/cvedetector/8926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47034 - Apache HTTPD Out-of-Bounds Read Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47034 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:21.000000Z"}, {"uuid": "df1946a5-56e2-470b-8460-7adcd7f2a813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47033", "type": "seen", "source": "https://t.me/cvedetector/8924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47033 - \"Lwis Allocator Free Memory Corruption Elevation of Privilege\"\", \n  \"Content\": \"CVE ID : CVE-2024-47033 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:19.000000Z"}, {"uuid": "27bd97cd-6610-49d3-87b8-95695cc82eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47029", "type": "seen", "source": "https://t.me/cvedetector/8923", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47029 - Trusty Shared Memory Manager Out-of-Bounds Read (Local Information Disclosure)\", \n  \"Content\": \"CVE ID : CVE-2024-47029 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:19.000000Z"}, {"uuid": "5bc97c61-cfac-4126-a71e-5a6381d1c1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47030", "type": "seen", "source": "https://t.me/cvedetector/8922", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47030 - Apache HTTP Server Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-47030 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : N/A \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:18.000000Z"}, {"uuid": "47113eeb-d5a8-4702-9f1f-4e38a16f529d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47027", "type": "seen", "source": "https://t.me/cvedetector/8921", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47027 - \"QEMU Smart Memory Arpbitrary Physical Memory Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47027 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:14.000000Z"}, {"uuid": "ce6d817c-9e73-405c-ab3d-6537fe635333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47028", "type": "seen", "source": "https://t.me/cvedetector/8920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47028 - FFU.c ffu_flash_pack Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47028 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:13.000000Z"}, {"uuid": "f7827398-3fa9-4bd0-93b0-28d701caaf51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47481", "type": "seen", "source": "https://t.me/cvedetector/8919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47481 - \"Dell Data Lakehouse Denial of Service Improper Access Control Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47481 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:12.000000Z"}, {"uuid": "25201ffb-d2c8-459a-99b1-73dca1362349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47014", "type": "seen", "source": "https://t.me/cvedetector/8934", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47014 - Cache Publishing CMS Server-Side Request Forgery (SSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-47014 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : N/A \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:33.000000Z"}, {"uuid": "8fe4d98c-771c-4ecd-865b-5d5814e64e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47015", "type": "seen", "source": "https://t.me/cvedetector/8933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47015 - Qualcomm Snapdragon ProtocolMisc Hw Config Change Adapter Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47015 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:32.000000Z"}, {"uuid": "65d6070c-b0ba-44d2-bd0d-6f801cf9ec67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47013", "type": "seen", "source": "https://t.me/cvedetector/8932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47013 - Intel FlexPMU Uninitialized Data Arbitrary Write Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47013 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:31.000000Z"}, {"uuid": "205358e8-3894-43ed-bc8a-f08a73728593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47483", "type": "seen", "source": "https://t.me/cvedetector/8931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47483 - Dell Data Lakehouse SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47483 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:28.000000Z"}, {"uuid": "67e6dd99-d8d2-43bc-9095-3fb89b644929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47023", "type": "seen", "source": "https://t.me/cvedetector/8929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47023 - Adobe Flash Man-in-the-Middle Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47023 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:26.000000Z"}, {"uuid": "2de0d0e7-ad82-4e93-a8db-24d3ad75c09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47016", "type": "seen", "source": "https://t.me/cvedetector/8936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47016 - Apache HTTP Server Insecure Default Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47016 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:34.000000Z"}, {"uuid": "a6bae9bb-c92e-45aa-b232-9ed0ce0ece5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47017", "type": "seen", "source": "https://t.me/cvedetector/8935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47017 - \"UFS Stack Variable Use After Free Vulnerability in ufshc_scsi_cmd\"\", \n  \"Content\": \"CVE ID : CVE-2024-47017 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:34.000000Z"}, {"uuid": "84afe663-fd2f-40d0-9ce2-55c6f9881e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47173", "type": "seen", "source": "https://t.me/cvedetector/8843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47173 - Aimeos GraphQL API Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47173 \nPublished : Oct. 24, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T21:50:51.000000Z"}, {"uuid": "bace406a-df54-4987-a062-13411083d9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47041", "type": "seen", "source": "https://t.me/cvedetector/8928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47041 - \"Git LSM J.VALID_ADDRESS Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-47041 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:25.000000Z"}, {"uuid": "e8ec9d75-d065-44bf-96ae-67000cf3cc05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47026", "type": "seen", "source": "https://t.me/cvedetector/8918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47026 - Citrix GSC GSA Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47026 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:11.000000Z"}, {"uuid": "f635f95e-5c2d-4214-815b-c8b4eccc42a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47024", "type": "seen", "source": "https://t.me/cvedetector/8917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47024 - Virtio Ring Integer Overflow Out-of-Bounds Write Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47024 \nPublished : Oct. 25, 2024, 11:15 a.m. | 24\u00a0minutes ago \nDescription : In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T13:44:11.000000Z"}, {"uuid": "c448fcc3-4e29-4558-97e2-2e06aff762a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47406", "type": "seen", "source": "https://t.me/cvedetector/8895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47406 - Sharp and Toshiba Tec MFPs HTTP Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47406 \nPublished : Oct. 25, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T10:23:29.000000Z"}, {"uuid": "fb3810dc-ab6f-406c-836d-ef1f0200bd17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47158", "type": "seen", "source": "https://t.me/cvedetector/8905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47158 - N-Line Browser Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47158 \nPublished : Oct. 25, 2024, 8:15 a.m. | 42\u00a0minutes ago \nDescription : N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T11:13:43.000000Z"}, {"uuid": "ef4af3ba-a61d-4e44-b555-f61a0b20ad66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47005", "type": "seen", "source": "https://t.me/cvedetector/8894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47005 - Sharp and Toshiba Tec MFPs Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47005 \nPublished : Oct. 25, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted.  \nA non-administrative user may execute some configuration APIs. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T10:23:26.000000Z"}, {"uuid": "0073003e-901b-4955-8753-38accfecec18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47883", "type": "seen", "source": "https://t.me/cvedetector/8857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47883 - Apache Simile Butterfly File System Access and Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47883 \nPublished : Oct. 24, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : The OpenRefine fork of the MIT Simile Butterfly server is a modular web application framework. The Butterfly framework uses the `java.net.URL` class to refer to (what are expected to be) local resource files, like images or templates. This works: \"opening a connection\" to these URLs opens the local file. However, prior to version 1.2.6, if a `file:/` URL is directly given where a relative path (resource name) is expected, this is also accepted in some code paths; the app then fetches the file, from a remote machine if indicated, and uses it as if it was a trusted part of the app's codebase. This leads to multiple weaknesses and potential weaknesses. An attacker that has network access to the application could use it to gain access to files, either on the the server's filesystem (path traversal) or shared by nearby machines (server-side request forgery with e.g. SMB). An attacker that can lead or redirect a user to a crafted URL belonging to the app could cause arbitrary attacker-controlled JavaScript to be loaded in the victim's browser (cross-site scripting). If an app is written in such a way that an attacker can influence the resource name used for a template, that attacker could cause the app to fetch and execute an attacker-controlled template (remote code execution). Version 1.2.6 contains a patch. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T00:21:33.000000Z"}, {"uuid": "2081b217-4017-49d2-81b4-89ddfce1d642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47882", "type": "seen", "source": "https://t.me/cvedetector/8856", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47882 - OpenRefine HTML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47882 \nPublished : Oct. 24, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in \"Something went wrong!\" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an error with an attacker-influenced message. It appears that the only way to reach this code in OpenRefine itself is for an attacker to somehow convince a victim to import a malicious file, which may be difficult.  However, out-of-tree extensions may add their own calls to `respondWithErrorPage`. Version 3.8.3 has a fix for this issue. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T00:21:33.000000Z"}, {"uuid": "3407f455-ba77-4d6c-be36-85475fab215e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47879", "type": "seen", "source": "https://t.me/cvedetector/8864", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47879 - OpenRefine CSRF rststem Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47879 \nPublished : Oct. 24, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross-site request forgery protection on the `preview-expression` command means that visiting a malicious website could cause an attacker-controlled expression to be executed. The expression can contain arbitrary Clojure or Python code. The attacker must know a valid project ID of a project that contains at least one row, and the attacker must convince the victim to open a malicious webpage. Version 3.8.3 fixes the issue. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T00:21:44.000000Z"}, {"uuid": "275d7819-95c0-4c42-bca1-00eab1efd0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47881", "type": "seen", "source": "https://t.me/cvedetector/8862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47881 - OpenRefine SQLite Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47881 \nPublished : Oct. 24, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the \"enable_load_extension\" property can be set for the SQLite integration, enabling an attacker to load (local or remote) extension DLLs and so run arbitrary code on the server. The attacker needs to have network access to the OpenRefine instance. Version 3.8.3 fixes this issue. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T00:21:40.000000Z"}, {"uuid": "4784d70d-2bea-45ce-922f-6173ec032851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47880", "type": "seen", "source": "https://t.me/cvedetector/8861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47880 - OpenRefine Remote Code Execution via `export-rows` Command\", \n  \"Content\": \"CVE ID : CVE-2024-47880 \nPublished : Oct. 24, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `export-rows` command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains  embedded JavaScript code. This code would then be included in the response, along with an attacker-controlled `Content-Type` header, and so potentially executed in the victim's browser as if it was part of OpenRefine. The attacker-provided code can do anything the user can do, including deleting projects, retrieving database passwords, or executing arbitrary Jython or Closure expressions, if those extensions are also present. The attacker must know a valid project ID of a project that contains at least one row. Version 3.8.3 fixes the issue. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T00:21:39.000000Z"}, {"uuid": "f5c99eeb-8cb0-47bf-b2be-053655b7d930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47878", "type": "seen", "source": "https://t.me/cvedetector/8860", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47878 - OpenRefine Unvalidated Script Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47878 \nPublished : Oct. 24, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `/extension/gdata/authorized` endpoint includes the `state` GET parameter verbatim in a `\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T00:21:38.000000Z"}, {"uuid": "13e5f576-83a3-41a7-83c9-e8fccc165353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47943", "type": "seen", "source": "https://t.me/cvedetector/7894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47943 - Rittal IoT Interface & CMC III Processing Unit HMAC Verification Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47943 \nPublished : Oct. 15, 2024, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The firmware upgrade function in the admin web interface of the Rittal\u00a0IoT Interface & CMC III Processing Unit devices checks if   \nthe patch files are signed before executing the containing run.sh   \nscript. The signing process is kind of an HMAC with a long string as key  \n which is hard-coded in the firmware and is freely available for   \ndownload. This allows crafting malicious \"signed\" .patch files in order   \nto compromise the device and execute arbitrary code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T11:55:12.000000Z"}, {"uuid": "72423682-dd41-438b-a174-02f12065ed7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47008", "type": "seen", "source": "https://t.me/cvedetector/7388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47008 - Ivanti Avalanche SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-47008 \nPublished : Oct. 8, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T20:24:04.000000Z"}, {"uuid": "fc8fcd3d-1916-4ced-9b94-9b6a211ae7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47885", "type": "seen", "source": "https://t.me/cvedetector/7859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47885 - Astro DOM Clobbering Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47885 \nPublished : Oct. 14, 2024, 7:15 p.m. | 21\u00a0minutes ago \nDescription : The Astro web framework has a DOM Clobbering gadget in the client-side router starting in version 3.0.0 and prior to version 4.16.1. It can lead to cross-site scripting (XSS) in websites enables Astro's client-side routing and has *stored* attacker-controlled scriptless HTML elements (i.e., `iframe` tags with unsanitized `name` attributes) on the destination pages. This vulnerability can result in cross-site scripting (XSS) attacks on websites that built with Astro that enable the client-side routing with `ViewTransitions` and store the user-inserted scriptless HTML tags without properly sanitizing the `name` attributes on the page. Version 4.16.1 contains a patch for this issue. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T21:42:09.000000Z"}, {"uuid": "67322b61-0228-4856-a113-0721453e7bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47831", "type": "seen", "source": "https://t.me/cvedetector/7846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47831 - Next.js Excessive CPU Consumption DoS\", \n  \"Content\": \"CVE ID : CVE-2024-47831 \nPublished : Oct. 14, 2024, 6:15 p.m. | 30\u00a0minutes ago \nDescription : Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption. Neither the `next.config.js` file that is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value nor the Next.js application that is hosted on Vercel are affected. This issue was fully patched in Next.js `14.2.7`. As a workaround, ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:51:43.000000Z"}, {"uuid": "207d9c9b-a476-457d-bfd1-bbce4dc9ee9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47674", "type": "seen", "source": "https://t.me/cvedetector/7904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47674 - Linux Kernel PFN Mapping Key Immediate Object Destruction\", \n  \"Content\": \"CVE ID : CVE-2024-47674 \nPublished : Oct. 15, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm: avoid leaving partial pfn mappings around in error case  \n  \nAs Jann points out, PFN mappings are special, because unlike normal  \nmemory mappings, there is no lifetime information associated with the  \nmapping - it is just a raw mapping of PFNs with no reference counting of  \na 'struct page'.  \n  \nThat's all very much intentional, but it does mean that it's easy to  \nmess up the cleanup in case of errors.  Yes, a failed mmap() will always  \neventually clean up any partial mappings, but without any explicit  \nlifetime in the page table mapping itself, it's very easy to do the  \nerror handling in the wrong order.  \n  \nIn particular, it's easy to mistakenly free the physical backing store  \nbefore the page tables are actually cleaned up and (temporarily) have  \nstale dangling PTE entries.  \n  \nTo make this situation less error-prone, just make sure that any partial  \npfn mapping is torn down early, before any other error handling. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T14:25:43.000000Z"}, {"uuid": "4f9a4d88-6f86-4309-aa57-66f832823296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47945", "type": "seen", "source": "https://t.me/cvedetector/7900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47945 - VMware Predictable Session ID Vulnerability (Session Hijacking)\", \n  \"Content\": \"CVE ID : CVE-2024-47945 \nPublished : Oct. 15, 2024, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The devices are vulnerable to session hijacking due to insufficient   \nentropy in its session ID generation algorithm. The session IDs are   \npredictable, with only 32,768 possible values per user, which allows   \nattackers to pre-generate valid session IDs, leading to unauthorized   \naccess to user sessions. This is not only due to the use of an   \n(insecure) rand() function call but also because of missing   \ninitialization via srand(). As a result only the PIDs are effectively   \nused as seed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T12:45:26.000000Z"}, {"uuid": "19d94c1c-4436-49ba-92ee-11560fb86cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47944", "type": "seen", "source": "https://t.me/cvedetector/7895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47944 - D-Link USB Firmware Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47944 \nPublished : Oct. 15, 2024, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the\u00a0firmware upgrade function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T11:55:13.000000Z"}, {"uuid": "cd531de9-b84a-48cf-a27d-34e318378f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47826", "type": "seen", "source": "https://t.me/cvedetector/7854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47826 - eLabFTW Cross-Site Scripting (XSS) vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47826 \nPublished : Oct. 14, 2024, 6:15 p.m. | 30\u00a0minutes ago \nDescription : eLabFTW is an open source electronic lab notebook for research labs. A vulnerability in versions prior to 5.1.5 allows an attacker to inject arbitrary HTML tags in the pages: \"experiments.php\" (show mode), \"database.php\" (show mode) or \"search.php\". It works by providing HTML code in the extended search string, which will then be displayed back to the user in the error message. This means that injected HTML will appear in a red \"alert/danger\" box, and be part of an error message. Due to some other security measures, it is not possible to execute arbitrary javascript from this attack. As such, this attack is deemed low impact. Users should upgrade to at least version 5.1.5 to receive a patch. No known workarounds are available. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:51:56.000000Z"}, {"uuid": "b03a64f9-f30f-40f6-ab7d-104aab9cf58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47767", "type": "seen", "source": "https://t.me/cvedetector/7853", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47767 - Tuleap Inadvertent Tracker Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47767 \nPublished : Oct. 14, 2024, 6:15 p.m. | 30\u00a0minutes ago \nDescription : Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, users might see tracker names they should not have access to. Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:51:52.000000Z"}, {"uuid": "25323914-9154-4330-982a-dfcce6e48252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47766", "type": "seen", "source": "https://t.me/cvedetector/7852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47766 - \"Tuleap Unrestricted Cross-Tracker Search Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47766 \nPublished : Oct. 14, 2024, 6:15 p.m. | 30\u00a0minutes ago \nDescription : Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, administrators of a project can access the content of trackers with permissions restrictions of project they are members of but not admin via the cross tracker search widget. Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:51:51.000000Z"}, {"uuid": "25c392b1-8d8e-4702-8dd8-ac60acbb52ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47083", "type": "seen", "source": "https://t.me/cvedetector/6361", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47083 - Power Platform Terraform Provider Unmasked Client Secret Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47083 \nPublished : Sept. 25, 2024, 10:15 p.m. | 40\u00a0minutes ago \nDescription : Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the `client_secret` used in the service principal authentication, may be exposed in logs. This exposure occurs due to an error in the logging code that causes the `client_secret` to not be properly masked when logs are persisted or viewed. Users should upgrade to version 3.0.0 to receive a patched version of the provider that removes all logging of sensitive content. Users who have used this provider with the affected versions should take the following additional steps to mitigate the risk: Immediately rotate the `client_secret` for any service principal that has been configured using this Terraform provider. This will invalidate any potentially exposed secrets. Those who have set the `TF_LOG_PATH` environment variable or configured Terraform to persist logs to a file or an external system, consider disabling this until they have updated to a fixed version of the provider. Those who have existing logs that may contain the `client_secret` should remove or sanitize these logs to prevent unauthorized access. This includes logs on disk, in monitoring systems, or in logging services. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T01:14:45.000000Z"}, {"uuid": "a3c0065e-5e5b-4f71-bb6d-02d6e42fc3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47877", "type": "seen", "source": "https://t.me/cvedetector/7712", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47877 - Extract Library Symlink Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47877 \nPublished : Oct. 11, 2024, 5:15 p.m. | 16\u00a0minutes ago \nDescription : Extract is aA Go library to extract archives in zip, tar.gz or tar.bz2 formats. A maliciously crafted archive may allow an attacker to create a symlink outside the extraction target directory. This vulnerability is fixed in 4.0.0. If you're using the Extractor.FS interface, then upgrading to /v4 will require to implement the new methods that have been added. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T19:33:22.000000Z"}, {"uuid": "15d51804-6020-4404-b226-bedd4ec4398d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47496", "type": "seen", "source": "https://t.me/cvedetector/7710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47496 - \"Juniper Networks Junos OS Packet Forwarding Engine NULL Pointer Dereference Denial-of-Service\"\", \n  \"Content\": \"CVE ID : CVE-2024-47496 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : A\u00a0NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service (DoS).  \n  \nWhen a specific command is executed, the pfe crashes.\u00a0This will cause traffic forwarding to be interrupted until the system self-recovers. Repeated execution will create a sustained DoS condition.  \n  \n This issue only affects MX Series devices with Line cards MPC1-MPC9.  \nThis issue affects:  \nJunos OS on MX Series:   \n  \n  \n  *  All versions before 21.4R3-S9,   \n  *  from 22.2 before 22.2R3-S5,\u00a0  \n  *  from 22.3 before 22.3R3-S4,   \n  *  from 22.4 before 22.4R3-S2,   \n  *  from 23.2 before 23.2R2-S1,   \n  *  from 23.4 before 23.4R2. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:43:15.000000Z"}, {"uuid": "05079451-d75a-42a2-a9a0-16f5ae11f4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47648", "type": "seen", "source": "https://t.me/cvedetector/7627", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47648 - EventPrime Events Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47648 \nPublished : Oct. 10, 2024, 7:15 p.m. | 31\u00a0minutes ago \nDescription : URL Redirection to Untrusted Site ('Open Redirect') vulnerability in EventPrime Events EventPrime.This issue affects EventPrime: from n/a through 4.0.4.5. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T21:47:24.000000Z"}, {"uuid": "db3c3fa3-1cf9-4129-a230-9fefd4757459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47506", "type": "seen", "source": "https://t.me/cvedetector/7702", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47506 - \"Juniper Networks Junos OS SRX Series Deadlock Denial of Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47506 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : A Deadlock vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).  \n  \nWhen a large amount of traffic is processed by ATP Cloud inspection, a deadlock can occur which will result in a PFE crash and restart. Whether the crash occurs, depends on system internal timing that is outside the attackers control.  \n  \n  \n  \nThis issue affects Junos OS on SRX Series:  \n  \n  \n  \n  *  All versions before 21.3R3-S1,  \n  *  21.4 versions before 21.4R3,  \n  *  22.1 versions before 22.1R2,  \n  *  22.2 versions before 22.2R1-S2, 22.2R2. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:55.000000Z"}, {"uuid": "afa306a8-cdf5-44aa-bbb2-de108346dcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47636", "type": "seen", "source": "https://t.me/cvedetector/7626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47636 - Eyecix JobSearch Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47636 \nPublished : Oct. 10, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.9. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T20:57:15.000000Z"}, {"uuid": "415e7343-eb39-4fe6-8664-5644ad4341b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47353", "type": "seen", "source": "https://t.me/cvedetector/7726", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47353 - \"QuomodoSoft ElementsReady Addons for Elementor Open Redirect Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47353 \nPublished : Oct. 11, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : URL Redirection to Untrusted Site ('Open Redirect') vulnerability in QuomodoSoft ElementsReady Addons for Elementor.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.2. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T22:04:06.000000Z"}, {"uuid": "dadd5ebf-3f35-42b1-b704-5e5e3c839019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47331", "type": "seen", "source": "https://t.me/cvedetector/7730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47331 - NinjaTeam Contact Form SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47331 \nPublished : Oct. 11, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NinjaTeam Multi Step for Contact Form allows SQL Injection.This issue affects Multi Step for Contact Form: from n/a through 2.7.7. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T22:04:14.000000Z"}, {"uuid": "96a3ed78-9f5b-4b05-ab08-0523656dcad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47504", "type": "seen", "source": "https://t.me/cvedetector/7709", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47504 - Juniper Networks Junos OS IPv4 Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47504 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine (pfe) Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated, network based attacker to cause a Denial of Service (Dos).  \n  \nWhen a non-clustered SRX5000 device receives a specifically malformed packet this will cause a flowd crash and restart.  \n  \nThis issue affects Junos OS:  \n  \n  *  22.1 releases 22.1R1 and later before 22.2R3-S5,  \n  *  22.3 releases before 22.3R3-S4,  \n  *  22.4 releases before 22.4R3-S4,  \n  *  23.2 releases before 23.2R2-S2,  \n  *  23.4 releases before 23.4R2-S1,  \n  *  24.2 releases before 24.2R1-S1, 24.2R2.  \n  \n  \nPlease note that the PR does indicate that earlier versions have been fixed as well, but these won't be adversely impacted by this. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:43:12.000000Z"}, {"uuid": "3570c71f-7c42-4f94-a9ea-de0e0ef3551f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47503", "type": "seen", "source": "https://t.me/cvedetector/7708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47503 - Juniper Networks Junos OS Denial-of-Service IPv6 Routing DoS\", \n  \"Content\": \"CVE ID : CVE-2024-47503 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX4600 and\u00a0SRX5000 Series allows an unauthenticated and logically adjacent attacker to cause a Denial-of-Service (DoS).  \n  \nIf in a multicast scenario a sequence of   \n  \nspecific\u00a0PIM packets is received, this will cause a flowd crash and restart, which leads to momentary service interruption.  \nThis issue affects Junos OS on SRX 4600 and SRX 5000 Series:  \n  \n  \n  \n  *  All versions before 21.4R3-S9,  \n  *  22.2 versions before 22.2R3-S5,  \n  *  22.3 versions before 22.3R3-S4,  \n  *  22.4 versions before 22.4R3-S4,  \n  *  23.2 versions before 23.2R2-S2,  \n  *  23.4 versions before 23.4R2,\u00a0  \n  *  24.2 versions before 24.2R1-S1, 24.2R2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:43:10.000000Z"}, {"uuid": "a56db1a0-d784-4fb9-b27b-6d5b43886ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47502", "type": "seen", "source": "https://t.me/cvedetector/7707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47502 - Juniper Networks Junos OS Evolved TCP Session Exhaustion DoS\", \n  \"Content\": \"CVE ID : CVE-2024-47502 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).  \n  \nIn specific cases the state of TCP sessions that are terminated is not cleared, which over time leads to an exhaustion of resources, preventing new connections to the control plane from being established.  \n  \nA continuously increasing number of connections shown by:  \n  \n  \n  \nuser@host > show system connections  \n  \n  \n  \nis indicative of the problem. To recover the respective RE needs to be restarted manually.  \n  \nThis issue only affects IPv4 but does not affect IPv6.  \nThis issue only affects TCP sessions established in-band (over an interface on an FPC) but not out-of-band (over the management ethernet port on the routing-engine).  \n  \nThis issue affects Junos OS Evolved:\u00a0  \n  \n  *  All versions before 21.4R3-S9-EVO,  \n  *  22.2 versions before 22.2R3-S4-EVO,  \n  *  22.4 version before 22.4R3-S3-EVO,  \n  *  23.2 versions before 23.2R2-S1-EVO,  \n  *  23.4 versions before 23.4R2-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:43:08.000000Z"}, {"uuid": "65f0a97e-22bb-4805-a2db-03d8796abb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47501", "type": "seen", "source": "https://t.me/cvedetector/7706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47501 - Juniper Networks Junos OS Null Pointer Dereference Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47501 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : A NULL Pointer Dereference vulnerability in the   \n  \npacket forwarding engine (pfe)\u00a0of Juniper Networks Junos OS on MX304, MX with MPC10/11/LC9600, and\u00a0EX9200 with EX9200-15C allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS).  \n  \nIn a VPLS or Junos Fusion scenario, the execution of specific show commands will cause all FPCs hosting VPLS sessions or connecting to satellites to crash and restart.  \n  \nThis issue affects Junos on\u00a0MX304, MX with MPC10/11/LC9600 and EX9200 with EX9200-15C:\u00a0  \n  \n  \n  \n  *  All version before 21.2R3-S1,  \n  *  21.3 versions before 21.3R3,\u00a0  \n  *  21.4 versions before 21.4R2. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:43:06.000000Z"}, {"uuid": "09df132d-955e-4f72-a07d-16fc9e25a626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47507", "type": "seen", "source": "https://t.me/cvedetector/7705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47507 - Juniper Networks Junos OS Routing Protocol Daemon ASN Zero Acceptance and Propagation Vulnerability (Improper Check)\", \n  \"Content\": \"CVE ID : CVE-2024-47507 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an integrity impact to the downstream devices.  \n  \nWhen a peer sends a BGP update message which contains the aggregator attribute with an ASN value of zero (0), rpd accepts and propagates this attribute, which can cause issues for downstream BGP peers receiving this.  \n  \n  \n  \nThis issue affects:  \n  \nJunos OS:  \n  \n  \n  \n  *  All versions before 21.4R3-S6,  \n  *  22.2 versions before 22.2R3-S3,  \n  *  22.4 versions before 22.4R3;\u00a0  \n  \n  \n  \n  \n  \n  \n  \nJunos OS Evolved:\u00a0  \n  \n  \n  \n  *  All versions before 21.4R3-S7-EVO,  \n  *  22.2 versions before 22.2R3-S4-EVO,  \n  *  22.4 versions before 22.4R3-EVO. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:43:05.000000Z"}, {"uuid": "98d3a803-f8de-409a-a2e9-91ebf40f565f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47509", "type": "seen", "source": "https://t.me/cvedetector/7704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47505 - Juniper Networks Junos OS Evolved: PFE Management Daemon Unchecked Resource Allocation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47505 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.4R3-S7-EVO,  \n  *  22.1 versions before 22.1R3-S6-EVO,  \n  *  22.2 versions before 22.2R3-EVO,\u00a0  \n  \n  *  22.3 versions before 22.3R3-EVO,  \n  *  22.4 versions before 22.4R2-EVO.  \n  \n  \n  \nPlease note that this issue is similar to, but different from\u00a0CVE-2024-47508 and CVE-2024-47509. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:58.000000Z"}, {"uuid": "d54e5926-eb38-451c-9f5a-78ff13cce2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47505", "type": "seen", "source": "https://t.me/cvedetector/7704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47505 - Juniper Networks Junos OS Evolved: PFE Management Daemon Unchecked Resource Allocation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47505 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.4R3-S7-EVO,  \n  *  22.1 versions before 22.1R3-S6-EVO,  \n  *  22.2 versions before 22.2R3-EVO,\u00a0  \n  \n  *  22.3 versions before 22.3R3-EVO,  \n  *  22.4 versions before 22.4R2-EVO.  \n  \n  \n  \nPlease note that this issue is similar to, but different from\u00a0CVE-2024-47508 and CVE-2024-47509. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:58.000000Z"}, {"uuid": "908a78ba-5141-4eba-a15e-482a09757b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47508", "type": "seen", "source": "https://t.me/cvedetector/7704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47505 - Juniper Networks Junos OS Evolved: PFE Management Daemon Unchecked Resource Allocation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47505 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.4R3-S7-EVO,  \n  *  22.1 versions before 22.1R3-S6-EVO,  \n  *  22.2 versions before 22.2R3-EVO,\u00a0  \n  \n  *  22.3 versions before 22.3R3-EVO,  \n  *  22.4 versions before 22.4R2-EVO.  \n  \n  \n  \nPlease note that this issue is similar to, but different from\u00a0CVE-2024-47508 and CVE-2024-47509. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:58.000000Z"}, {"uuid": "ebb5b743-dbed-4075-a37d-7a1dac655070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47509", "type": "seen", "source": "https://t.me/cvedetector/7703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47508 - Juniper Networks Junos OS Evolved PFE Management Daemon Resource Allocation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47508 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.2R3-S8-EVO,  \n  *  21.3 versions before 21.3R3-EVO;  \n  *  21.4 versions before 22.1R2-EVO,  \n  \n  *  22.1 versions before\u00a022.1R1-S1-EVO, 22.1R2-EVO.  \n  \n  \n  \n  \n  \nPlease note that this issue is similar to, but different from CVE-2024-47505 and CVE-2024-47509. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:57.000000Z"}, {"uuid": "2207d2cd-945f-498f-91a3-de9894c02334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47508", "type": "seen", "source": "https://t.me/cvedetector/7703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47508 - Juniper Networks Junos OS Evolved PFE Management Daemon Resource Allocation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47508 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.2R3-S8-EVO,  \n  *  21.3 versions before 21.3R3-EVO;  \n  *  21.4 versions before 22.1R2-EVO,  \n  \n  *  22.1 versions before\u00a022.1R1-S1-EVO, 22.1R2-EVO.  \n  \n  \n  \n  \n  \nPlease note that this issue is similar to, but different from CVE-2024-47505 and CVE-2024-47509. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:57.000000Z"}, {"uuid": "114891f1-ed29-4573-bdeb-aff71f282049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47509", "type": "seen", "source": "https://t.me/cvedetector/7697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47509 - Juniper Networks Junos OS Evolved PFE Management Daemon GUID Resource Exhaustion DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47509 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.4R2-EVO,  \n  *  22.1 versions before 22.1R2-EVO.  \n  \n  \n  \n  \n  \nPlease note that this issue is similar to, but different from CVE-2024-47505 and CVE-2024-47508. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:41.000000Z"}, {"uuid": "adfe6a51-ec77-4013-b961-120c84692457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47505", "type": "seen", "source": "https://t.me/cvedetector/7697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47509 - Juniper Networks Junos OS Evolved PFE Management Daemon GUID Resource Exhaustion DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47509 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.4R2-EVO,  \n  *  22.1 versions before 22.1R2-EVO.  \n  \n  \n  \n  \n  \nPlease note that this issue is similar to, but different from CVE-2024-47505 and CVE-2024-47508. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:41.000000Z"}, {"uuid": "c91c2a2e-e940-472b-9b51-1348ee8470e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47508", "type": "seen", "source": "https://t.me/cvedetector/7697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47509 - Juniper Networks Junos OS Evolved PFE Management Daemon GUID Resource Exhaustion DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47509 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : An Allocation of Resources Without Limits or Throttling\u00a0vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover.  \n  \nGUID exhaustion will trigger a syslog message like one of the following:  \n  \nevo-pfemand[]: get_next_guid: Ran out of Guid Space ...  \nevo-aftmand-zx[]: get_next_guid: Ran out of Guid Space ...  \nThe leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids:  \n  \n  \n  \n  \n  \nuser@host> show platform application-info allocations app evo-pfemand/evo-pfemand  \n  \n  \n  \nIn case one or more of these values are constantly increasing the leak is happening.  \n  \nThis issue affects Junos OS Evolved:  \n  \n  \n  \n  *  All versions before 21.4R2-EVO,  \n  *  22.1 versions before 22.1R2-EVO.  \n  \n  \n  \n  \n  \nPlease note that this issue is similar to, but different from CVE-2024-47505 and CVE-2024-47508. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:41.000000Z"}, {"uuid": "4c10c373-788b-4e31-8aa3-50333c0c2abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47875", "type": "seen", "source": "https://t.me/cvedetector/7686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47875 - DOMPurify Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47875 \nPublished : Oct. 11, 2024, 3:15 p.m. | 31\u00a0minutes ago \nDescription : DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T17:51:49.000000Z"}, {"uuid": "a50df78c-64ff-4db7-8b0a-ba1342f9d91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47830", "type": "seen", "source": "https://t.me/cvedetector/7685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47830 - Plane Open-Source Project Management Server Side Request Forgery (SSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-47830 \nPublished : Oct. 11, 2024, 3:15 p.m. | 31\u00a0minutes ago \nDescription : Plane is an open-source project management tool. Plane uses the ** wildcard support to retrieve the image from any hostname as in /web/next.config.js. This may permit an attacker to induce the server side into performing requests to unintended locations. This vulnerability is fixed in 0.23.0. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T17:51:36.000000Z"}, {"uuid": "2da8ee06-8a0e-4be6-85da-f48c0ea2d264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47074", "type": "seen", "source": "https://t.me/cvedetector/7684", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47074 - DataEase PostgreSQL JDBC Deserialization Vulnerability (Remote Code Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-47074 \nPublished : Oct. 11, 2024, 3:15 p.m. | 31\u00a0minutes ago \nDescription : DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java, PgConfiguration class don't filter any parameters, directly concat user input. So, if the attacker adds some parameters in JDBC url, and connect to evil PG server, the attacker can trigger the PG jdbc deserialization vulnerability, and eventually the attacker can execute through the deserialization vulnerability system commands and obtain server privileges. The vulnerability has been fixed in v1.18.25. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T17:51:34.000000Z"}, {"uuid": "53816315-4198-4a01-b0d8-e48fce9dbe1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47164", "type": "seen", "source": "https://t.me/cvedetector/7645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47164 - Gradio Directory Traversal Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47164 \nPublished : Oct. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal checks** within the `is_in_or_equal` function. This function, intended to check if a file resides within a given directory, can be bypassed with certain payloads that manipulate file paths using `..` (parent directory) sequences. Attackers could potentially access restricted files if they are able to exploit this flaw, although the difficulty is high. This primarily impacts users relying on Gradio\u2019s blocklist or directory access validation, particularly when handling file uploads. Users are advised to upgrade to `gradio>=5.0` to address this issue. As a workaround, users can manually sanitize and normalize file paths in their Gradio deployment before passing them to the `is_in_or_equal` function. Ensuring that all file paths are properly resolved and absolute can help mitigate the bypass vulnerabilities caused by the improper handling of `..` sequences or malformed paths. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:07:55.000000Z"}, {"uuid": "0177f49c-04c6-4e5d-b025-4e251aa3ed55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47084", "type": "seen", "source": "https://t.me/cvedetector/7644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47084 - Gradio CORS Origin Validation Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47084 \nPublished : Oct. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to **CORS origin validation**, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker\u2019s website to make unauthorized requests to a local Gradio server. Potentially, attackers can upload files, steal authentication tokens, and access user data if the victim visits a malicious website while logged into Gradio. This impacts users who have deployed Gradio locally and use basic authentication. Users are advised to upgrade to `gradio>4.44` to address this issue. As a workaround, users can manually enforce stricter CORS origin validation by modifying the `CustomCORSMiddleware` class in their local Gradio server code. Specifically, they can bypass the condition that skips CORS validation for requests containing cookies to prevent potential exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:07:55.000000Z"}, {"uuid": "6cf25798-9736-482b-b93f-c2da8c7eaeb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47354", "type": "seen", "source": "https://t.me/cvedetector/7630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47354 - \"Simple Membership Open Redirect\"\", \n  \"Content\": \"CVE ID : CVE-2024-47354 \nPublished : Oct. 10, 2024, 7:15 p.m. | 31\u00a0minutes ago \nDescription : URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple Membership After Login Redirection.This issue affects Simple Membership After Login Redirection: from n/a through 1.6. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T21:47:26.000000Z"}, {"uuid": "8d8ec0e3-6b6e-4ffa-bc41-b17b959bcf27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47165", "type": "seen", "source": "https://t.me/cvedetector/7646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47165 - Gradio CORS Origin Validation Null Origin Tampering\", \n  \"Content\": \"CVE ID : CVE-2024-47165 \nPublished : Oct. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a null origin**. When a Gradio server is deployed locally, the `localhost_aliases` variable includes \"null\" as a valid origin. This allows attackers to make unauthorized requests from sandboxed iframes or other sources with a null origin, potentially leading to data theft, such as user authentication tokens or uploaded files. This impacts users running Gradio locally, especially those using basic authentication. Users are advised to upgrade to `gradio>=5.0` to address this issue. As a workaround, users can manually modify the `localhost_aliases` list in their local Gradio deployment to exclude \"null\" as a valid origin. By removing this value, the Gradio server will no longer accept requests from sandboxed iframes or sources with a null origin, mitigating the potential for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:07:56.000000Z"}, {"uuid": "80cc50cf-df84-43e0-957d-67871cf91375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47872", "type": "seen", "source": "https://t.me/cvedetector/7654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47872 - Gradio Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47872 \nPublished : Oct. 10, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **Cross-Site Scripting (XSS)** on any Gradio server that allows file uploads. Authenticated users can upload files such as HTML, JavaScript, or SVG files containing malicious scripts. When other users download or view these files, the scripts will execute in their browser, allowing attackers to perform unauthorized actions or steal sensitive information from their sessions. This impacts any Gradio server that allows file uploads, particularly those using components that process or display user-uploaded files. Users are advised to upgrade to `gradio>=5` to address this issue. As a workaround, users can restrict the types of files that can be uploaded to the Gradio server by limiting uploads to non-executable file types such as images or text. Additionally, developers can implement server-side validation to sanitize uploaded files, ensuring that HTML, JavaScript, and SVG files are properly handled or rejected before being stored or displayed to users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:58:10.000000Z"}, {"uuid": "27f949ee-20b9-4e65-a5b3-3bdc9e345eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47871", "type": "seen", "source": "https://t.me/cvedetector/7653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47871 - Gradio FRP Insecure Communication RCE\", \n  \"Content\": \"CVE ID : CVE-2024-47871 \nPublished : Oct. 10, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **insecure communication** between the FRP (Fast Reverse Proxy) client and server when Gradio's `share=True` option is used. HTTPS is not enforced on the connection, allowing attackers to intercept and read files uploaded to the Gradio server, as well as modify responses or data sent between the client and server. This impacts users who are sharing Gradio demos publicly over the internet using `share=True` without proper encryption, exposing sensitive data to potential eavesdroppers. Users are advised to upgrade to `gradio>=5` to address this issue. As a workaround, users can avoid using `share=True` in production environments and instead host their Gradio applications on servers with HTTPS enabled to ensure secure communication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:58:10.000000Z"}, {"uuid": "91eba377-a6d6-4ac5-91e3-cae0733bcfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47868", "type": "seen", "source": "https://t.me/cvedetector/7651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47868 - Gradio File Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47868 \nPublished : Oct. 10, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This is a **data validation vulnerability** affecting several Gradio components, which allows arbitrary file leaks through the post-processing step. Attackers can exploit these components by crafting requests that bypass expected input constraints. This issue could lead to sensitive files being exposed to unauthorized users, especially when combined with other vulnerabilities, such as issue TOB-GRADIO-15. The components most at risk are those that return or handle file data. Vulnerable Components: 1. **String to FileData:** DownloadButton, Audio, ImageEditor, Video, Model3D, File, UploadButton. 2. **Complex data to FileData:** Chatbot, MultimodalTextbox. 3. **Direct file read in preprocess:** Code. 4. **Dictionary converted to FileData:** ParamViewer, Dataset. Exploit Scenarios: 1. A developer creates a Dropdown list that passes values to a DownloadButton. An attacker bypasses the allowed inputs, sends an arbitrary file path (like `/etc/passwd`), and downloads sensitive files. 2. An attacker crafts a malicious payload in a ParamViewer component, leaking sensitive files from a server through the arbitrary file leak. This issue has been resolved in `gradio>5.0`. Upgrading to the latest version will mitigate this vulnerability. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:58:05.000000Z"}, {"uuid": "df857615-bfd3-47f4-9c0f-62d6519c3296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47123", "type": "seen", "source": "https://t.me/cvedetector/6441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47123 - GoTenna Pro AES-CTR Malleability Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-47123 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna Pro series use AES CTR mode for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to any attacker that can access the message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:06.000000Z"}, {"uuid": "04cdf1b7-3089-4707-876d-fc48fa390487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47867", "type": "seen", "source": "https://t.me/cvedetector/7650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47867 - Gradio FRP Client Integrity Verification Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47867 \nPublished : Oct. 10, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloaded FRP client, which could potentially allow attackers to introduce malicious code. If an attacker gains access to the remote URL from which the FRP client is downloaded, they could modify the binary without detection, as the Gradio server does not verify the file's checksum or signature.  Any users utilizing the Gradio server's sharing mechanism that downloads the FRP client could be affected by this vulnerability, especially those relying on the executable binary for secure data tunneling. There is no direct workaround for this issue without upgrading. However, users can manually validate the integrity of the downloaded FRP client by implementing checksum or signature verification in their own environment to ensure the binary hasn't been tampered with. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:58:05.000000Z"}, {"uuid": "32ef39e6-3157-407c-98fb-a4c059aad1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47869", "type": "seen", "source": "https://t.me/cvedetector/7649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47869 - Gradio Timing Hash Comparison Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47869 \nPublished : Oct. 10, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **timing attack** in the way Gradio compares hashes for the `analytics_dashboard` function. Since the comparison is not done in constant time, an attacker could exploit this by measuring the response time of different requests to infer the correct hash byte-by-byte. This can lead to unauthorized access to the analytics dashboard, especially if the attacker can repeatedly query the system with different keys. Users are advised to upgrade to `gradio>4.44` to mitigate this issue. To mitigate the risk before applying the patch, developers can manually patch the `analytics_dashboard` dashboard to use a **constant-time comparison** function for comparing sensitive values, such as hashes. Alternatively, access to the analytics dashboard can be disabled. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:58:04.000000Z"}, {"uuid": "f0aa7ed9-5403-4ba1-a4bc-47cb3ce38940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47870", "type": "seen", "source": "https://t.me/cvedetector/7648", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47870 - Gradio URL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47870 \nPublished : Oct. 10, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **race condition** in the `update_root_in_config` function, allowing an attacker to modify the `root` URL used by the Gradio frontend to communicate with the backend. By exploiting this flaw, an attacker can redirect user traffic to a malicious server. This could lead to the interception of sensitive data such as authentication credentials or uploaded files. This impacts all users who connect to a Gradio server, especially those exposed to the internet, where malicious actors could exploit this race condition. Users are advised to upgrade to `gradio>=5` to address this issue. There are no known workarounds for this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:58:03.000000Z"}, {"uuid": "b116d061-09bd-4cb5-a19e-8b3a827fce75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47166", "type": "seen", "source": "https://t.me/cvedetector/7647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47166 - Gradio Path Traverse Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47166 \nPublished : Oct. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in the `/custom_component` endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the request. Although the traversal is limited to a single directory level, it could expose proprietary or sensitive code that developers intended to keep private. This impacts users who have developed custom Gradio components and are hosting them on publicly accessible servers. Users are advised to upgrade to `gradio>=4.44` to address this issue. As a workaround, developers can sanitize the file paths and ensure that components are not stored in publicly accessible directories. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:07:57.000000Z"}, {"uuid": "1bd7a478-2c3c-4eb5-99aa-3a9ff61b01f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47168", "type": "seen", "source": "https://t.me/cvedetector/7641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47168 - Gradio Unsecured Monitoring Dashboard Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47168 \nPublished : Oct. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enable_monitoring flag not properly disabling monitoring when set to False. Even when monitoring is supposedly disabled, an attacker or unauthorized user can still access the monitoring dashboard by directly requesting the /monitoring endpoint. This means that sensitive application analytics may still be exposed, particularly in environments where monitoring is expected to be disabled. Users who set enable_monitoring=False to prevent unauthorized access to monitoring data are impacted. Users are advised to upgrade to gradio>=4.44 to address this issue. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:07:50.000000Z"}, {"uuid": "4dd0b3b6-3cd6-4dfb-9dcc-0fc7e44fb936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47167", "type": "seen", "source": "https://t.me/cvedetector/7640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47167 - Gradio SSRF Server-Side Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2024-47167 \nPublished : Oct. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio\u2019s `async_save_url_to_cache` function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This could enable attackers to target internal servers or services within a local network and possibly exfiltrate data or cause unwanted internal requests. Additionally, the content from these URLs is stored locally, making it easier for attackers to upload potentially malicious files to the server. This impacts users deploying Gradio servers that use components like the Video component which involve URL fetching. Users are advised to upgrade to `gradio>=5` to address this issue.  As a workaround, users can disable or heavily restrict URL-based inputs in their Gradio applications to trusted domains only. Additionally, implementing stricter URL validation (such as allowinglist-based validation) and ensuring that local or internal network addresses cannot be requested via the `/queue/join` endpoint can help mitigate the risk of SSRF attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T01:07:49.000000Z"}, {"uuid": "4f642b5a-b4ee-4f4f-b7db-47880295bb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "https://t.me/cvedetector/7622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47963 - Delta Electronics CNCSoft-G2 Buffer Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47963 \nPublished : Oct. 10, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T20:57:09.000000Z"}, {"uuid": "d11a87b5-c3c1-494f-a0fc-48e01506f15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "https://t.me/cvedetector/7621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47962 - Delta Electronics CNCSoft-G2 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-47962 \nPublished : Oct. 10, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T20:57:08.000000Z"}, {"uuid": "b79a7b8f-f500-4af8-991a-eb2b36ece748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47966", "type": "seen", "source": "https://t.me/cvedetector/7625", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47966 - Delta Electronics CNCSoft-G2 Uninitialized Memory Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47966 \nPublished : Oct. 10, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T20:57:14.000000Z"}, {"uuid": "e39f2be2-3efc-4ce9-928d-dae191b09e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47965", "type": "seen", "source": "https://t.me/cvedetector/7624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47965 - Delta Electronics CNCSoft-G2 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-47965 \nPublished : Oct. 10, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T20:57:14.000000Z"}, {"uuid": "7260cb4d-6fec-4150-8193-81d5d9ac11e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47812", "type": "seen", "source": "https://t.me/cvedetector/7526", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47812 - mediawiki XSSunga Extension\", \n  \"Content\": \"CVE ID : CVE-2024-47812 \nPublished : Oct. 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : ImportDump is an extension for mediawiki designed to automate user import requests. Anyone who can edit the interface strings of a wiki (typically administrators and interface admins) can embed XSS payloads in the messages for dates, and thus XSS anyone who views Special:RequestImportQueue. This issue has been patched in commit `d054b95` and all users are advised to apply this commit to their branch. Users unable to upgrade may either Prevent access to Special:RequestImportQueue on all wikis, except for the global wiki; and If an interface administrator (or equivalent) level protection is available (which is not provided by default) on the global wiki, protect the affected messages up to that level. This causes the XSS to be virtually useless as users with those rights can already edit Javascript pages. Or Prevent access to Special:RequestImportQueue altogether. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T22:21:06.000000Z"}, {"uuid": "f62f643b-3675-4976-b6a7-d7b2bbbc5ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47964", "type": "seen", "source": "https://t.me/cvedetector/7623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47964 - Delta Electronics CNCSoft-G2 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47964 \nPublished : Oct. 10, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T20:57:10.000000Z"}, {"uuid": "198e4731-5ffb-4911-a842-1771ad6d8817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47410", "type": "seen", "source": "https://t.me/cvedetector/7457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47410 - Adobe Animate Stack-based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47410 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:29.000000Z"}, {"uuid": "92da4395-6e57-4ce5-b3d0-53a4290dadb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47763", "type": "seen", "source": "https://t.me/cvedetector/7518", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47763 - Wasmtime WebAssembly Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47763 \nPublished : Oct. 9, 2024, 6:15 p.m. | 18\u00a0minutes ago \nDescription : Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The runtime crash may be undefined behavior if Wasmtime was compiled with Rust 1.80 or prior. The runtime crash is a deterministic process abort when Wasmtime is compiled with Rust 1.81 and later. WebAssembly tail calls are a proposal which relatively recently reached stage 4 in the standardization process. Wasmtime first enabled support for tail calls by default in Wasmtime 21.0.0, although that release contained a bug where it was only on-by-default for some configurations. In Wasmtime 22.0.0 tail calls were enabled by default for all configurations. The specific crash happens when an exported function in a WebAssembly module (or component) performs a `return_call` (or `return_call_indirect` or `return_call_ref`) to an imported host function which captures a stack trace (for example, the host function raises a trap). In this situation, the stack-walking code previously assumed there was always at least one WebAssembly frame on the stack but with tail calls that is no longer true. With the tail-call proposal it's possible to have an entry trampoline appear as if it directly called the exit trampoline. This situation triggers an internal assert in the stack-walking code which raises a Rust `panic!()`. When Wasmtime is compiled with Rust versions 1.80 and prior this means that an `extern \"C\"` function in Rust is raising a `panic!()`. This is technically undefined behavior and typically manifests as a process abort when the unwinder fails to unwind Cranelift-generated frames. When Wasmtime is compiled with Rust versions 1.81 and later this panic becomes a deterministic process abort. Overall the impact of this issue is that this is a denial-of-service vector where a malicious WebAssembly module or component can cause the host to crash. There is no other impact at this time other than availability of a service as the result of the crash is always a crash and no more. This issue was discovered by routine fuzzing performed by the Wasmtime project via Google's OSS-Fuzz infrastructure. We have no evidence that it has ever been exploited by an attacker in the wild. All versions of Wasmtime which have tail calls enabled by default have been patched: * 21.0.x - patched in 21.0.2 * 22.0.x - patched in 22.0.1 * 23.0.x - patched in 23.0.3  * 24.0.x - patched in 24.0.1 * 25.0.x - patched in 25.0.2. Wasmtime versions from 12.0.x (the first release with experimental tail call support) to 20.0.x (the last release with tail-calls off-by-default) have support for tail calls but the support is disabled by default. These versions are not affected in their default configurations, but users who explicitly enabled tail call support will need to either disable tail call support or upgrade to a patched version of Wasmtime. The main workaround for this issue is to disable tail support for tail calls in Wasmtime, for example with `Config::wasm_tail_call(false)`. Users are otherwise encouraged to upgrade to patched versions. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T20:40:38.000000Z"}, {"uuid": "e890858b-c556-4bc5-b645-caf869d911ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47813", "type": "seen", "source": "https://t.me/cvedetector/7517", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47813 - Wasmtime Concurrent Type Registry Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47813 \nPublished : Oct. 9, 2024, 6:15 p.m. | 18\u00a0minutes ago \nDescription : Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption could, following an additional and particular sequence of concurrent events, lead to violations of WebAssembly's control-flow integrity (CFI) and type safety. Users that do not use `wasmtime::Engine` across multiple threads are not affected. Users that only create new modules across threads over time are additionally not affected. Reproducing this bug requires creating and dropping multiple type instances (such as `wasmtime::FuncType` or `wasmtime::ArrayType`) concurrently on multiple threads, where all types are associated with the same `wasmtime::Engine`. **Wasm guests cannot trigger this bug.** See the \"References\" section below for a list of Wasmtime types-related APIs that are affected. Wasmtime maintains an internal registry of types within a `wasmtime::Engine` and an engine is shareable across threads. Types can be created and referenced through creation of a `wasmtime::Module`, creation of `wasmtime::FuncType`, or a number of other APIs where the host creates a function (see \"References\" below). Each of these cases interacts with an engine to deduplicate type information and manage type indices that are used to implement type checks in WebAssembly's `call_indirect` function, for example. This bug is a race condition in this management where the internal type registry could be corrupted to trigger an assert or contain invalid state. Wasmtime's internal representation of a type has individual types (e.g. one-per-host-function) maintain a registration count of how many time it's been used. Types additionally have state within an engine behind a read-write lock such as lookup/deduplication information. The race here is a time-of-check versus time-of-use (TOCTOU) bug where one thread atomically decrements a type entry's registration count, observes zero registrations, and then acquires a lock in order to unregister that entry. However, between when this first thread observed the zero-registration count and when it acquires that lock, another thread could perform the following sequence of events: re-register another copy of the type, which deduplicates to that same entry, resurrecting it and incrementing its registration count; then drop the type and decrement its registration count; observe that the registration count is now zero; acquire the type registry lock; and finally unregister the type. Now, when the original thread finally acquires the lock and unregisters the entry, it is the second time this entry has been unregistered. This bug was originally introduced in Wasmtime 19's development of the WebAssembly GC proposal. This bug affects users who are not using the GC proposal, however, and affects Wasmtime in its default configuration even when the GC proposal is disabled. Wasmtime users using 19.0.0 and after are all affected by this issue. We have released the following Wasmtime versions, all of which have a fix for this bug: * 21.0.2 * 22.0.1 * 23.0.3 * 24.0.1 * 25.0.2. If your application creates and drops Wasmtime types on multiple threads concurrently, there are no known workarounds. Users are encouraged to upgrade to a patched release. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T20:40:38.000000Z"}, {"uuid": "ae10a13b-a043-4dac-b2e0-217a4b67a216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47780", "type": "seen", "source": "https://t.me/cvedetector/7398", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47780 - TYPO3 Unauthenticated Page Visibility Leak\", \n  \"Content\": \"CVE ID : CVE-2024-47780 \nPublished : Oct. 8, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to \"everybody.\" However, affected users could not manipulate these pages. Users are advised to update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described. There are no known workarounds for this vulnerability. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T21:14:20.000000Z"}, {"uuid": "2ebaa201-5479-402c-8ec6-f25adf54b931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47833", "type": "seen", "source": "https://t.me/cvedetector/7523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47833 - Taipy Cookie Insecure Session Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47833 \nPublished : Oct. 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T22:21:01.000000Z"}, {"uuid": "8927bfec-09a0-46e1-9f8f-caf93c3ce04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47832", "type": "seen", "source": "https://t.me/cvedetector/7522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47832 - \"SSOReady XML Signature Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-47832 \nPublished : Oct. 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : ssoready is a single sign on provider implemented via docker. Affected versions are vulnerable to XML signature bypass attacks. An attacker can carry out signature bypass if you have access to certain IDP-signed messages. The underlying mechanism exploits differential behavior between XML parsers. Users of , the public hosted instance of SSOReady, are unaffected. We advise folks who self-host SSOReady to upgrade to 7f92a06 or later. Do so by updating your SSOReady Docker images from sha-... to sha-7f92a06. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T22:21:00.000000Z"}, {"uuid": "f9cf98af-e731-4405-a368-e162244c6e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47828", "type": "seen", "source": "https://t.me/cvedetector/7521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47828 - Ampache Cross-Site Request Forgery (CSRF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47828 \nPublished : Oct. 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : ampache is a web based audio/video streaming application and file manager. A CSRF attack can be performed in order to delete objects (Playlist, smartlist etc.). Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they are currently authenticated. This vulnerability can be exploited by creating a malicious script with an arbitrary playlist ID belonging to another user. When the user submits the request, their playlist will be deleted. Any User with active sessions who are tricked into submitting a malicious request are impacted, as their playlists or other objects could be deleted without their consent. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T22:21:00.000000Z"}, {"uuid": "08fc99e0-1bd4-4fb2-b0cb-c3656e365746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47816", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/7520", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47816 - MediaWiki ImportDump Actor ID Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47816 \nPublished : Oct. 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : ImportDump is a mediawiki extension designed to automate user import requests. A user's local actor ID is stored in the database to tell who made what requests. Therefore, if a user on another wiki happens to have the same actor ID as someone on the central wiki, the user on the other wiki can act as if they're the original wiki requester. This can be abused to create new comments, edit the request, and view the request if it's marked private. This issue has been addressed in commit `5c91dfc` and all users are advised to update. Users unable to update may disable the special page outside of their global wiki. See `miraheze/mw-config@e566499` for details on that. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T22:20:59.000000Z"}, {"uuid": "5bf6f4d7-9e01-4ab1-8ba4-0457ee25dc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47815", "type": "seen", "source": "https://t.me/cvedetector/7519", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47815 - MediaWiki IncidentReporting Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47815 \nPublished : Oct. 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the `editincidents` right, some are available to those who can edit interface messages (typically administrators and interface admins), and one is available to those who can edit LocalSettings.php. These issues have been addressed in commit `43896a4` and all users are advised to upgrade. Users unable to upgrade should prevent access to the Special:IncidentReports page. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T22:20:58.000000Z"}, {"uuid": "2b72f871-74b0-483b-8577-e47c7025383a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47662", "type": "seen", "source": "https://t.me/cvedetector/7498", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47662 - AMD Display Security Register Read Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47662 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Remove register from DCN35 DMCUB diagnostic collection  \n  \n[Why]  \nThese registers should not be read from driver and triggering the  \nsecurity violation when DMCUB work times out and diagnostics are  \ncollected blocks Z8 entry.  \n  \n[How]  \nRemove the register read from DCN35. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:56.000000Z"}, {"uuid": "09186069-41f5-43dc-866d-798071b3500d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47659", "type": "seen", "source": "https://t.me/cvedetector/7469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47659 - \"Linux Smack TCP IPv4 Labeling Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47659 \nPublished : Oct. 9, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsmack: tcp: ipv4, fix incorrect labeling  \n  \nCurrently, Smack mirrors the label of incoming tcp/ipv4 connections:  \nwhen a label 'foo' connects to a label 'bar' with tcp/ipv4,  \n'foo' always gets 'foo' in returned ipv4 packets. So,  \n1) returned packets are incorrectly labeled ('foo' instead of 'bar')  \n2) 'bar' can write to 'foo' without being authorized to write.  \n  \nHere is a scenario how to see this:  \n  \n* Take two machines, let's call them C and S,  \n   with active Smack in the default state  \n   (no settings, no rules, no labeled hosts, only builtin labels)  \n  \n* At S, add Smack rule 'foo bar w'  \n   (labels 'foo' and 'bar' are instantiated at S at this moment)  \n  \n* At S, at label 'bar', launch a program  \n   that listens for incoming tcp/ipv4 connections  \n  \n* From C, at label 'foo', connect to the listener at S.  \n   (label 'foo' is instantiated at C at this moment)  \n   Connection succeedes and works.  \n  \n* Send some data in both directions.  \n* Collect network traffic of this connection.  \n  \nAll packets in both directions are labeled with the CIPSO  \nof the label 'foo'. Hence, label 'bar' writes to 'foo' without  \nbeing authorized, and even without ever being known at C.  \n  \nIf anybody cares: exactly the same happens with DCCP.  \n  \nThis behavior 1st manifested in release 2.6.29.4 (see Fixes below)  \nand it looks unintentional. At least, no explanation was provided.  \n  \nI changed returned packes label into the 'bar',  \nto bring it into line with the Smack documentation claims. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T17:19:14.000000Z"}, {"uuid": "b5e5d8fe-c741-4e1e-a274-ca31a2a435c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47191", "type": "seen", "source": "https://t.me/cvedetector/7428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47191 - Apache pam_oath.so Root Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-47191 \nPublished : Oct. 9, 2024, 5:15 a.m. | 42\u00a0minutes ago \nDescription : pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T08:07:12.000000Z"}, {"uuid": "384d20b8-6a0f-4ffb-953e-03c0ded084f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47011", "type": "seen", "source": "https://t.me/cvedetector/7384", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47011 - Ivanti Avalanche Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47011 \nPublished : Oct. 8, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T20:24:01.000000Z"}, {"uuid": "a5e7bc64-8618-4f4e-99a9-06883e4ae5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47010", "type": "seen", "source": "https://t.me/cvedetector/7383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47010 - Ivanti Avalanche Path Traversal Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47010 \nPublished : Oct. 8, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T20:23:58.000000Z"}, {"uuid": "ab806600-e20f-4797-acbc-9dc2dc1c0309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47673", "type": "seen", "source": "https://t.me/cvedetector/7497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47673 - Intel iwlwifi Firmware Stop State Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47673 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: iwlwifi: mvm: pause TCM when the firmware is stopped  \n  \nNot doing so will make us send a host command to the transport while the  \nfirmware is not alive, which will trigger a WARNING.  \n  \nbad state = 0  \nWARNING: CPU: 2 PID: 17434 at drivers/net/wireless/intel/iwlwifi/iwl-trans.c:115 iwl_trans_send_cmd+0x1cb/0x1e0 [iwlwifi]  \nRIP: 0010:iwl_trans_send_cmd+0x1cb/0x1e0 [iwlwifi]  \nCall Trace:  \n   \n iwl_mvm_send_cmd+0x40/0xc0 [iwlmvm]  \n iwl_mvm_config_scan+0x198/0x260 [iwlmvm]  \n iwl_mvm_recalc_tcm+0x730/0x11d0 [iwlmvm]  \n iwl_mvm_tcm_work+0x1d/0x30 [iwlmvm]  \n process_one_work+0x29e/0x640  \n worker_thread+0x2df/0x690  \n ? rescuer_thread+0x540/0x540  \n kthread+0x192/0x1e0  \n ? set_kthread_struct+0x90/0x90  \n ret_from_fork+0x22/0x30 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:55.000000Z"}, {"uuid": "1d470563-1358-4ace-a8c5-70764fa03c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47664", "type": "seen", "source": "https://t.me/cvedetector/7496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47664 - \"Hisi-Kunpeng SPI Firmware Validation Divide-by-Zero Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47664 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nspi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware  \n  \nIf the value of max_speed_hz is 0, it may cause a division by zero  \nerror in hisi_calc_effective_speed().  \nThe value of max_speed_hz is provided by firmware.  \nFirmware is generally considered as a trusted domain. However, as  \ndivision by zero errors can cause system failure, for defense measure,  \nthe value of max_speed is validated here. So 0 is regarded as invalid  \nand an error code is returned. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:55.000000Z"}, {"uuid": "39359980-5db2-4c75-9388-97b205279231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47666", "type": "seen", "source": "https://t.me/cvedetector/7494", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47666 - \"Marvell PM80xx Memory Corruption\"\", \n  \"Content\": \"CVE ID : CVE-2024-47666 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nscsi: pm80xx: Set phy->enable_completion only when we wait for it  \n  \npm8001_phy_control() populates the enable_completion pointer with a stack  \naddress, sends a PHY_LINK_RESET / PHY_HARD_RESET, waits 300 ms, and  \nreturns. The problem arises when a phy control response comes late.  After  \n300 ms the pm8001_phy_control() function returns and the passed  \nenable_completion stack address is no longer valid. Late phy control  \nresponse invokes complete() on a dangling enable_completion pointer which  \nleads to a kernel crash. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:53.000000Z"}, {"uuid": "b5d5988a-9331-4e29-bf35-b3c158d072b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47667", "type": "seen", "source": "https://t.me/cvedetector/7493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47667 - Texas Instruments AM65x/DRA80xM PCIe Buffer Overflow Hang Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47667 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nPCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)  \n  \nErrata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0  \n(SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an  \ninbound PCIe TLP spans more than two internal AXI 128-byte bursts,  \nthe bus may corrupt the packet payload and the corrupt data may  \ncause associated applications or the processor to hang.  \n  \nThe workaround for Errata #i2037 is to limit the maximum read  \nrequest size and maximum payload size to 128 bytes. Add workaround  \nfor Errata #i2037 here.  \n  \nThe errata and workaround is applicable only to AM65x SR 1.0 and  \nlater versions of the silicon will have this fixed.  \n  \n[1] ->  \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:49.000000Z"}, {"uuid": "366e8a28-d6dc-4ce5-9d07-63acd631cda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47665", "type": "seen", "source": "https://t.me/cvedetector/7492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47665 - Linux Kernel i3c Mipi-I3c-Hci DMA Alignment Error\", \n  \"Content\": \"CVE ID : CVE-2024-47665 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ni3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup  \n  \nDefinitely condition dma_get_cache_alignment * defined value > 256  \nduring driver initialization is not reason to BUG_ON(). Turn that to  \ngraceful error out with -EINVAL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:49.000000Z"}, {"uuid": "4dc62e33-33b2-43dd-b9b4-cf20aec53f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47663", "type": "seen", "source": "https://t.me/cvedetector/7491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47663 - Linux Kernel AD9834 Division by Zero Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47663 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nstaging: iio: frequency: ad9834: Validate frequency parameter value  \n  \nIn ad9834_write_frequency() clk_get_rate() can return 0. In such case  \nad9834_calc_freqreg() call will lead to division by zero. Checking  \n'if (fout > (clk_freq / 2))' doesn't protect in case of 'fout' is 0.  \nad9834_write_frequency() is called from ad9834_write(), where fout is  \ntaken from text buffer, which can contain any value.  \n  \nModify parameters checking.  \n  \nFound by Linux Verification Center (linuxtesting.org) with SVACE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:48.000000Z"}, {"uuid": "611a7510-5e26-4991-942a-b7cc59deba7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47661", "type": "seen", "source": "https://t.me/cvedetector/7490", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47661 - AMD Display Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47661 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Avoid overflow from uint32_t to uint8_t  \n  \n[WHAT & HOW]  \ndmub_rb_cmd's ramping_boundary has size of uint8_t and it is assigned  \n0xFFFF. Fix it by changing it to uint8_t with value of 0xFF.  \n  \nThis fixes 2 INTEGER_OVERFLOW issues reported by Coverity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:47.000000Z"}, {"uuid": "2d012a0d-824e-4f40-aa44-1a9735322ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47671", "type": "seen", "source": "https://t.me/cvedetector/7489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47671 - Linux Kernel: USB usbtmc Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47671 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nUSB: usbtmc: prevent kernel-usb-infoleak  \n  \nThe syzbot reported a kernel-usb-infoleak in usbtmc_write,  \nwe need to clear the structure before filling fields. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:47.000000Z"}, {"uuid": "e315762c-2a17-4198-9261-8b31a70f2c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47669", "type": "seen", "source": "https://t.me/cvedetector/7488", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47669 - \"Nilfs2 Linux Kernel Log Writing Function Error Handling Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47669 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnilfs2: fix state management in error path of log writing function  \n  \nAfter commit a694291a6211 (\"nilfs2: separate wait function from  \nnilfs_segctor_write\") was applied, the log writing function  \nnilfs_segctor_do_construct() was able to issue I/O requests continuously  \neven if user data blocks were split into multiple logs across segments,  \nbut two potential flaws were introduced in its error handling.  \n  \nFirst, if nilfs_segctor_begin_construction() fails while creating the  \nsecond or subsequent logs, the log writing function returns without  \ncalling nilfs_segctor_abort_construction(), so the writeback flag set on  \npages/folios will remain uncleared.  This causes page cache operations to  \nhang waiting for the writeback flag.  For example,  \ntruncate_inode_pages_final(), which is called via nilfs_evict_inode() when  \nan inode is evicted from memory, will hang.  \n  \nSecond, the NILFS_I_COLLECTED flag set on normal inodes remain uncleared.   \nAs a result, if the next log write involves checkpoint creation, that's  \nfine, but if a partial log write is performed that does not, inodes with  \nNILFS_I_COLLECTED set are erroneously removed from the \"sc_dirty_files\"  \nlist, and their data and b-tree blocks may not be written to the device,  \ncorrupting the block mapping.  \n  \nFix these issues by uniformly calling nilfs_segctor_abort_construction()  \non failure of each step in the loop in nilfs_segctor_do_construct(),  \nhaving it clean up logs and segment usages according to progress, and  \ncorrecting the conditions for calling nilfs_redirty_inodes() to ensure  \nthat the NILFS_I_COLLECTED flag is cleared. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:43.000000Z"}, {"uuid": "bd9ce6f9-d89b-4e70-b5f7-c7e5df5ab525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47668", "type": "seen", "source": "https://t.me/cvedetector/7487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47668 - Linux kernel Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-47668 \nPublished : Oct. 9, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nlib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()  \n  \nIf we need to increase the tree depth, allocate a new node, and then  \nrace with another thread that increased the tree depth before us, we'll  \nstill have a preallocated node that might be used later.  \n  \nIf we then use that node for a new non-root node, it'll still have a  \npointer to the old root instead of being zeroed - fix this by zeroing it  \nin the cmpxchg failure path. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T18:09:42.000000Z"}, {"uuid": "f4c394d7-a812-4d81-bb3a-bb40f12f8fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47419", "type": "seen", "source": "https://t.me/cvedetector/7449", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47419 - Animate Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47419 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:17.000000Z"}, {"uuid": "51983278-c997-44a3-9d3f-32690815e5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47418", "type": "seen", "source": "https://t.me/cvedetector/7448", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47418 - Animate: Use After Free Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47418 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:16.000000Z"}, {"uuid": "cf4dc2bc-9ff7-4b79-bb4f-9d6b3802a6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47417", "type": "seen", "source": "https://t.me/cvedetector/7447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47417 - Animate Heap-based Buffer Overflow Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47417 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:16.000000Z"}, {"uuid": "2cb158f8-614e-470e-967e-547471d4b150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47658", "type": "seen", "source": "https://t.me/cvedetector/7468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47658 - Intel STM32 Crypto Spinlock Recursion\", \n  \"Content\": \"CVE ID : CVE-2024-47658 \nPublished : Oct. 9, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncrypto: stm32/cryp - call finalize with bh disabled  \n  \nThe finalize operation in interrupt mode produce a produces a spinlock  \nrecursion warning. The reason is the fact that BH must be disabled  \nduring this process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T17:19:11.000000Z"}, {"uuid": "e4ccf72b-9372-4ee6-9795-3dfcae566f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47660", "type": "seen", "source": "https://t.me/cvedetector/7470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47660 - \"Linux filesystem Denial of Service (DoS) Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47660 \nPublished : Oct. 9, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfsnotify: clear PARENT_WATCHED flags lazily  \n  \nIn some setups directories can have many (usually negative) dentries.  \nHence __fsnotify_update_child_dentry_flags() function can take a  \nsignificant amount of time. Since the bulk of this function happens  \nunder inode->i_lock this causes a significant contention on the lock  \nwhen we remove the watch from the directory as the  \n__fsnotify_update_child_dentry_flags() call from fsnotify_recalc_mask()  \nraces with __fsnotify_update_child_dentry_flags() calls from  \n__fsnotify_parent() happening on children. This can lead upto softlockup  \nreports reported by users.  \n  \nFix the problem by calling fsnotify_update_children_dentry_flags() to  \nset PARENT_WATCHED flags only when parent starts watching children.  \n  \nWhen parent stops watching children, clear false positive PARENT_WATCHED  \nflags lazily in __fsnotify_parent() for each accessed child. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T17:19:15.000000Z"}, {"uuid": "f003ad27-06dd-46b2-99a6-9c9cecf38712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47411", "type": "seen", "source": "https://t.me/cvedetector/7458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47411 - Animate Uninitialized Pointer Access Vulnerability (Arbitrary Code Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-47411 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:30.000000Z"}, {"uuid": "0e6d498a-47ad-4f02-924a-bc1b6e89613d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1491", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "842639e6-579e-44c2-bbe9-ea7edf3285d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47334", "type": "seen", "source": "https://t.me/cvedetector/7460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47334 - Zoho Flow SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47334 \nPublished : Oct. 9, 2024, 11:15 a.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Flow Zoho Flow for WordPress allows SQL Injection.This issue affects Zoho Flow for WordPress: from n/a through 2.7.1. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T15:28:59.000000Z"}, {"uuid": "a5dec8be-dc1f-4ef1-8813-9a1073d6070f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47416", "type": "seen", "source": "https://t.me/cvedetector/7456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47416 - Animate Integer Overflow Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47416 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:26.000000Z"}, {"uuid": "db366484-80f0-42d9-89ba-5056b1b5d5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47415", "type": "seen", "source": "https://t.me/cvedetector/7455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47415 - Animate Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47415 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:25.000000Z"}, {"uuid": "54e2c9d8-f921-4bf6-8402-3683a7943341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47414", "type": "seen", "source": "https://t.me/cvedetector/7454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47414 - Animate Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47414 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:24.000000Z"}, {"uuid": "ea2d55b5-28be-4bb5-8ae5-c45ffdf329e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47413", "type": "seen", "source": "https://t.me/cvedetector/7453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47413 - Animate: Use After Free Vulnerability in File Handler\", \n  \"Content\": \"CVE ID : CVE-2024-47413 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:23.000000Z"}, {"uuid": "5c2a61fe-a1ec-4b38-ac83-c65eb1cf94c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47412", "type": "seen", "source": "https://t.me/cvedetector/7452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47412 - Animate Use After Free vulnerabilities can lead to Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47412 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:22.000000Z"}, {"uuid": "bb3e9419-68ee-4307-a664-c46f3968b2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47420", "type": "seen", "source": "https://t.me/cvedetector/7450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47420 - Animate Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47420 \nPublished : Oct. 9, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T13:08:18.000000Z"}, {"uuid": "1b27d231-e5e1-45c4-b87a-aecd5bb929b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47007", "type": "seen", "source": "https://t.me/cvedetector/7387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47007 - Ivanti Avalanche NULL Pointer Dereference DoS\", \n  \"Content\": \"CVE ID : CVE-2024-47007 \nPublished : Oct. 8, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T20:24:04.000000Z"}, {"uuid": "2610fba4-e9c2-4c57-b463-8ba4c7ed2ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47773", "type": "seen", "source": "https://t.me/cvedetector/7397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47773 - Discourse Cache Poisoning Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-47773 \nPublished : Oct. 8, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without any preloaded data. This issue only affects anonymous visitors of the site. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable anonymous cache by setting the `DISCOURSE_DISABLE_ANON_CACHE` environment variable to a non-empty value. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T21:14:19.000000Z"}, {"uuid": "02dac6f5-ced9-4519-9e2b-35aa5d40dda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47822", "type": "seen", "source": "https://t.me/cvedetector/7393", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47822 - Directus Exposed Access Token Log Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47822 \nPublished : Oct. 8, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in `req.query` is not redacted when the `LOG_STYLE` is set to `raw`. If these logs are not properly sanitized or protected, an attacker with access to it can potentially gain administrative control, leading to unauthorized data access and manipulation. This impacts systems where the `LOG_STYLE` is set to `raw`. The `access_token` in the query could potentially be a long-lived static token. Users with impacted systems should rotate their static tokens if they were provided using query string. This vulnerability has been patched in release version 10.13.2 and subsequent releases as well. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T21:14:13.000000Z"}, {"uuid": "80a2ba83-b609-4748-b9fa-2281e3d92885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47823", "type": "seen", "source": "https://t.me/cvedetector/7392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47823 - Livewire PHP Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47823 \nPublished : Oct. 8, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP. In livewire/livewire `< v3.5.2`, the file extension of an uploaded file is guessed based on the MIME type. As a result, the actual file extension from the file name is not validated. An attacker can therefore bypass the validation by uploading a file with a valid MIME type (e.g., `image/png`) and a \u201c.php\u201d file extension. If the following criteria are met, the attacker can carry out an RCE attack: 1. Filename is composed of the original file name using `$file->getClientOriginalName()`. 2. Files stored directly on your server in a public storage disk. 3. Webserver is configured to execute \u201c.php\u201d files. This issue has been addressed in release version 3.5.2. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T21:14:12.000000Z"}, {"uuid": "8a862fce-dfd7-40db-b60a-4a38a454b959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47009", "type": "seen", "source": "https://t.me/cvedetector/7390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47009 - Ivanti Avalanche Path Traversal Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47009 \nPublished : Oct. 8, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T20:24:09.000000Z"}, {"uuid": "bf49ad8f-00e5-4b89-a989-fbd991e28ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47115", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1491", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "3ce7501b-c5ca-48f6-b864-bb76eb0aa9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47045", "type": "seen", "source": "https://t.me/cvedetector/6368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47045 - Nippon Telegraph and Telephone East Corporation Home GateWay/Hikari Denwa Router IPv6 WAN-Side Misrepresentation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47045 \nPublished : Sept. 26, 2024, 4:15 a.m. | 40\u00a0minutes ago \nDescription : User interface (UI) misrepresentation of critical information issue exists in multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, affects products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T07:05:52.000000Z"}, {"uuid": "f4b59ebc-7a94-4f17-9110-31c7daacaf33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47330", "type": "seen", "source": "https://t.me/cvedetector/6367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47330 - Supsystic Slider and Social Share Buttons Missing Authorization\", \n  \"Content\": \"CVE ID : CVE-2024-47330 \nPublished : Sept. 26, 2024, 3:15 a.m. | 39\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/a through 2.2.9. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T06:15:43.000000Z"}, {"uuid": "37921cd2-2712-4f1f-8ade-a690f0da221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47122", "type": "seen", "source": "https://t.me/cvedetector/6448", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47122 - goTenna Pro - Unsecured Encryption Key Storage\", \n  \"Content\": \"CVE ID : CVE-2024-47122 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : In the goTenna Pro application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted communications that include P2P, Group, and broadcast messages that use these keys. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:16.000000Z"}, {"uuid": "02db667c-8df7-454a-bf44-6b3ca677a59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47129", "type": "seen", "source": "https://t.me/cvedetector/6447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47129 - GoTenna Pro Payload Length Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47129 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna Pro has a payload length vulnerability that makes it possible to tell the length of the payload regardless of the encryption used. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:15.000000Z"}, {"uuid": "12fd0b55-41b6-46ad-b498-a245328c485d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47128", "type": "seen", "source": "https://t.me/cvedetector/6446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47128 - goTenna Pro Location Leak BUG\", \n  \"Content\": \"CVE ID : CVE-2024-47128 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna Pro broadcast key name is always sent unencrypted and could reveal the location of operation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:14.000000Z"}, {"uuid": "63579666-2d84-493b-a67e-41e03e237d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47127", "type": "seen", "source": "https://t.me/cvedetector/6445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47127 - GoTenna Pro SDR Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47127 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : In the goTenna Pro there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing gotenna mesh networks. This vulnerability can be exploited if the device is being used in a unencrypted environment or if the cryptography has already been compromised. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:10.000000Z"}, {"uuid": "7beaf4f7-f6b2-4341-bdac-863bc6b9b16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47126", "type": "seen", "source": "https://t.me/cvedetector/6444", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47126 - GoTenna Pro Cryptographic Key Generation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47126 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna Pro series does not use SecureRandom when generating its cryptographic keys. The random function in use is not suitable for cryptographic use. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:09.000000Z"}, {"uuid": "344cbab7-6d7b-419a-8744-4e2e6bc07b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47125", "type": "seen", "source": "https://t.me/cvedetector/6443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47125 - GoTenna Pro Series RSA Key Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47125 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna Pro series does not authenticate public keys which allows an unauthenticated attacker to intercept and manipulate messages. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:08.000000Z"}, {"uuid": "e17c9c74-86f9-42bf-af6c-ea87cc8f4e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47124", "type": "seen", "source": "https://t.me/cvedetector/6442", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47124 - goTenna Unencrypted Callsign Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47124 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna pro series does not encrypt the callsigns of its users. These callsigns reveal information about the users and can also be leveraged for other vulnerabilities. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:07.000000Z"}, {"uuid": "370ff213-e585-4069-9b1c-910b3db1ce1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47174", "type": "seen", "source": "https://t.me/cvedetector/6440", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47174 - Nix TLS Certificate Verification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47174 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, `` did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle (MITM) attack. `` is also known as the builtin derivation builder `builtin:fetchurl`. It's not to be confused with the evaluation-time function `builtins.fetchurl`, which was not affected by this issue. A user may be affected by the risk of leaking credentials if they have a `netrc` file for authentication, or rely on derivations with `impureEnvVars` set to use credentials from the environment. In addition, the commonplace trust-on-first-use (TOFU) technique of updating dependencies by specifying an invalid hash and obtaining it from a remote  store was also vulnerable to a MITM injecting arbitrary store objects. This also applied to the impure derivations experimental feature. Note that this may also happen when using Nixpkgs fetchers to obtain new hashes when not using the fake hash method, although that mechanism is not implemented in Nix itself but rather in Nixpkgs using a fixed-output derivation. The behavior was introduced in version 1.11 to make it consistent with the Nixpkgs `pkgs.fetchurl` and to make `` work in the derivation builder sandbox, which back then did not have access to the CA bundles by default. Nowadays, CA bundles are bind-mounted on Linux. This issue has been fixed in Nix 2.18.8 and 2.24.8. As a workaround, implement (authenticated) fetching with `pkgs.fetchurl` from Nixpkgs, using `impureEnvVars` and `curlOpts` as needed. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:05.000000Z"}, {"uuid": "a1245f9d-52ef-48f6-bfcd-130700b148c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47171", "type": "seen", "source": "https://t.me/cvedetector/6439", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47171 - Agnai File Upload Vulnerability (Remote File Write)\", \n  \"Content\": \"CVE ID : CVE-2024-47171 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for defacement. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. Version 1.0.330 fixes this vulnerability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:04.000000Z"}, {"uuid": "5c15f4a3-ef04-40d0-ac05-d08834d1dfe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47170", "type": "seen", "source": "https://t.me/cvedetector/6438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47170 - Agnai JSON Storage Unauthorized File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47170 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue can lead to unauthorized access to sensitive information and exposure of confidential configuration files. This only affects installations with `JSON_STORAGE` enabled which is intended to local/self-hosting only. Version 1.0.330 fixes this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:04.000000Z"}, {"uuid": "c500da9b-ddc4-4c11-9cae-2faa5b675eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47169", "type": "seen", "source": "https://t.me/cvedetector/6437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47169 - Agnai Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47169 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaScript, enabling the execution of commands within those files. This issue could result in unauthorized access, full server compromise, data leakage, and other critical security threats. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. This does affect publicly hosted installs without S3-compatible storage. Version 1.0.330 fixes this vulnerability. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:03.000000Z"}, {"uuid": "37db5a18-2f94-4e7a-9beb-12519fd16f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47130", "type": "seen", "source": "https://t.me/cvedetector/6436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47130 - GoTenna Pro Authentication Bypass Remote Update Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47130 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna Pro series allows unauthenticated attackers to remotely update the local public keys used for P2P and Group messages. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:01.000000Z"}, {"uuid": "ea4d431c-3189-4221-b6f8-dd40401d8b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47145", "type": "seen", "source": "https://t.me/cvedetector/6390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47145 - Mattermost Unauthorized Access to Archived Channels\", \n  \"Content\": \"CVE ID : CVE-2024-47145 \nPublished : Sept. 26, 2024, 8:15 a.m. | 36\u00a0minutes ago \nDescription : Mattermost versions 9.5.x <=\nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T11:16:58.000000Z"}, {"uuid": "ef610ebe-095e-4ad6-80e5-dd96d8ae183d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47003", "type": "seen", "source": "https://t.me/cvedetector/6389", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47003 - Mattermost Inconsistent Permalink Message Type Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-47003 \nPublished : Sept. 26, 2024, 8:15 a.m. | 36\u00a0minutes ago \nDescription : Mattermost versions 9.11.x <=<=\nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T11:16:57.000000Z"}, {"uuid": "845102d6-a7f6-46bb-9514-049aad7a9b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47197", "type": "seen", "source": "https://t.me/cvedetector/6388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47197 - Maven Archetype Plugin: Sensitive Credit Card Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47197 \nPublished : Sept. 26, 2024, 8:15 a.m. | 36\u00a0minutes ago \nDescription : Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin.  \n  \nThis issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0.  \n  \nUsers are recommended to upgrade to version 3.3.0, which fixes the issue.  \n  \nArchetype integration testing creates a file  \ncalled ./target/classes/archetype-it/archetype-settings.xml  \nThis file contains all the content from the users ~/.m2/settings.xml file,  \nwhich often contains information they do not want to publish. We expect that on many developer machines, this also contains  \ncredentials.  \n  \nWhen the user runs mvn verify again (without a mvn clean), this file becomes part of  \nthe final artifact.  \n  \nIf a developer were to publish this into Maven Central or any other remote repository (whether as a release  \nor a snapshot) their credentials would be published without them knowing. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T11:16:57.000000Z"}, {"uuid": "5edd17d2-683b-4f45-b969-f2eb68b76c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47337", "type": "seen", "source": "https://t.me/cvedetector/6396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47337 - Joy Of Text Lite Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47337 \nPublished : Sept. 26, 2024, 9:15 a.m. | 38\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Stuart Wilson Joy Of Text Lite.This issue affects Joy Of Text Lite: from n/a through 2.3.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T12:07:14.000000Z"}, {"uuid": "440c7080-25eb-41c8-b2d0-a4c680a41849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47044", "type": "seen", "source": "https://t.me/cvedetector/6395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47044 - \"NTT East Home Gateway/Wikari Denwa Router Weak Access Control\"\", \n  \"Content\": \"CVE ID : CVE-2024-47044 \nPublished : Sept. 26, 2024, 9:15 a.m. | 38\u00a0minutes ago \nDescription : Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T12:07:13.000000Z"}, {"uuid": "06ba555a-145d-428c-b006-5270757519f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4712", "type": "seen", "source": "https://t.me/cvedetector/6362", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8405 - PaperCut NG/MF Web Print Arbitrary File Creation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-8405 \nPublished : Sept. 26, 2024, 2:15 a.m. | 16\u00a0minutes ago \nDescription : An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don\u2019t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.  \n  \nNote:   \n  \nThis CVE has been split from CVE-2024-4712. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T04:35:24.000000Z"}, {"uuid": "c2c22418-c5a4-4a1b-8e8d-a2c41a3f3152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47315", "type": "seen", "source": "https://t.me/cvedetector/6359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47315 - GiveWP CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47315 \nPublished : Sept. 25, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in GiveWP.This issue affects GiveWP: from n/a through 3.15.1. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T21:03:44.000000Z"}, {"uuid": "e1ff41ff-1790-4781-bc23-812e5d55d7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47082", "type": "seen", "source": "https://t.me/cvedetector/6358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47082 - Strawberry GraphQL CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47082 \nPublished : Sept. 25, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable to cross-site request forgery (CSRF) attacks if users did not explicitly enable CSRF preventing security mechanism for their servers. Additionally, the Django HTTP view integration, in particular, had an exemption for Django's built-in CSRF protection (i.e., the `CsrfViewMiddleware` middleware) by default. In affect, all Strawberry integrations were vulnerable to CSRF attacks by default. Version `v0.243.0` is the first `strawberry-graphql` including a patch. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T21:03:43.000000Z"}, {"uuid": "38127f25-289a-4de7-8941-ebc3479d1618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47078", "type": "seen", "source": "https://t.me/cvedetector/6331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47078 - Meshtastic MQTT Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47078 \nPublished : Sept. 25, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : Meshtastic is an open source, off-grid, decentralized, mesh network. Meshtastic uses MQTT to communicate over an internet connection to a shared or private MQTT Server. Nodes can communicate directly via an internet connection or proxied through a connected phone (i.e., via bluetooth). Prior to version 2.5.1, multiple weaknesses in the MQTT implementation allow for authentication and authorization bypasses resulting in unauthorized control of MQTT-connected nodes. Version 2.5.1 contains a patch. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T19:21:35.000000Z"}, {"uuid": "6492fd49-6d6f-434d-8768-d6892e4f795f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47305", "type": "seen", "source": "https://t.me/cvedetector/6354", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47305 - Dnesscarkey Use Any Font CSRF Cross Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2024-47305 \nPublished : Sept. 25, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through 6.3.08. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T21:03:39.000000Z"}, {"uuid": "fa4c50f9-2cc6-429d-a04c-c9abff1aa4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47303", "type": "seen", "source": "https://t.me/cvedetector/6299", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47303 - Livemesh Addons for Elementor Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47303 \nPublished : Sept. 25, 2024, 8:15 a.m. | 40\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addons for Elementor: from n/a through 8.5. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T10:58:16.000000Z"}, {"uuid": "021dc43c-3a07-4589-8697-e346a731bd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47888", "type": "seen", "source": "https://t.me/cvedetector/8123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47888 - Rails ReDoS Vulnerability in Action Text helper\", \n  \"Content\": \"CVE ID : CVE-2024-47888 \nPublished : Oct. 16, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the `plain_text_for_blockquote_node helper` in Action Text. Carefully crafted text can cause the `plain_text_for_blockquote_node` helper to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, or 7.2.1.1 or apply the relevant patch immediately. As a workaround, users can avoid calling `plain_text_for_blockquote_node` or upgrade to Ruby 3.2. Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends on Ruby 3.2 or greater so is unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T23:55:15.000000Z"}, {"uuid": "d895fce7-c3d9-4f9d-9eca-007ac3a6eb71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47887", "type": "seen", "source": "https://t.me/cvedetector/8122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47887 - Rails Action Pack HTTP Token Authentication ReDoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47887 \nPublished : Oct. 16, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. For applications using HTTP Token authentication via `authenticate_or_request_with_http_token` or similar, a carefully crafted header may cause header parsing to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, or 7.2.1.1 or apply the relevant patch immediately. One may choose to use Ruby 3.2 as a workaround.Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends on Ruby 3.2 or greater so is unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T23:05:06.000000Z"}, {"uuid": "ed2319da-534b-48ca-be55-e5737043ccdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47459", "type": "seen", "source": "https://t.me/cvedetector/8189", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47459 - Substance3D Sampler NULL Pointer Dereference DoS\", \n  \"Content\": \"CVE ID : CVE-2024-47459 \nPublished : Oct. 17, 2024, 3:15 p.m. | 41\u00a0minutes ago \nDescription : Substance3D - Sampler versions 4.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-17T18:19:03.000000Z"}, {"uuid": "e86cbbf6-71f3-4c2b-a3d0-068592cbbb71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47889", "type": "seen", "source": "https://t.me/cvedetector/8125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47889 - Rails Block Format Redos Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47889 \nPublished : Oct. 16, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the block_format helper in Action Mailer. Carefully crafted text can cause the block_format helper to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, or 7.2.1.1 or apply the relevant patch immediately. As a workaround, users can avoid calling the `block_format` helper or upgrade to Ruby 3.2. Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 requires Ruby 3.2 or greater so is unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T23:55:16.000000Z"}, {"uuid": "37e1e5f1-be90-46cc-94f8-64c1d190f8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1491", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "a4d2769d-2ac0-40bc-9040-10a302097079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1491", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "794260ae-a31c-448e-9b2d-7b7f552e5ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47771", "type": "seen", "source": "https://t.me/cvedetector/7926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47771 - Element Desktop Token Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47771 \nPublished : Oct. 15, 2024, 3:15 p.m. | 29\u00a0minutes ago \nDescription : Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T18:24:54.000000Z"}, {"uuid": "bff51b33-1863-423c-a0fd-32e1f22e5da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47836", "type": "seen", "source": "https://t.me/cvedetector/8121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47836 - Admidio Deserialization Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47836 \nPublished : Oct. 16, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T23:05:05.000000Z"}, {"uuid": "749652ec-d91a-4469-825e-92f02cd27220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47522", "type": "seen", "source": "https://t.me/cvedetector/8120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47522 - Suricata TLS/QUIC ALPN Parsing Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-47522 \nPublished : Oct. 16, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, invalid ALPN in TLS/QUIC traffic when JA4 matching/logging is enabled can lead to Suricata aborting with a panic. This issue has been addressed in 7.0.7. One may disable ja4 as a workaround. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T23:05:04.000000Z"}, {"uuid": "9d6b2c0a-8f5c-4e82-8310-fd43f1797ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47188", "type": "seen", "source": "https://t.me/cvedetector/8117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47188 - Suricata Predictable Hash Table Behavior Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47188 \nPublished : Oct. 16, 2024, 7:15 p.m. | 36\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for \"thash\" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker forcing lots of data into a single hash bucket, leading to severe performance degradation. This issue has been addressed in 7.0.7. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T22:14:55.000000Z"}, {"uuid": "fcf6499f-947f-482b-bfd4-d86456a79089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47187", "type": "seen", "source": "https://t.me/cvedetector/8116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47187 - Suricata Predictable \"thash\" Hash Table Behavior\", \n  \"Content\": \"CVE ID : CVE-2024-47187 \nPublished : Oct. 16, 2024, 7:15 p.m. | 36\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for \"thash\" leads to datasets having predictable hash table behavior. This can lead to dataset file loading to use excessive time to load, as well as runtime performance issues during traffic handling. This issue has been addressed in 7.0.7. As a workaround, avoid loading datasets from untrusted sources. Avoid dataset rules that track traffic in rules. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T22:14:54.000000Z"}, {"uuid": "4428a9c9-3c15-487d-9836-1c187a8d3755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47139", "type": "seen", "source": "https://t.me/cvedetector/8090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47139 - BIG-IQ Configuration Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47139 \nPublished : Oct. 16, 2024, 3:15 p.m. | 41\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.  \n  \n\u00a0  \n  \n  \nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T18:03:52.000000Z"}, {"uuid": "62475ba9-8272-489f-a7c3-76192bebab9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47874", "type": "seen", "source": "https://t.me/cvedetector/7931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47874 - Starlette Multipart Form Field Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47874 \nPublished : Oct. 15, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and cause Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests. Verison 0.40.0 fixes this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T18:36:50.000000Z"}, {"uuid": "201d31b9-0ec0-44a4-8883-ab6297e91889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47762", "type": "seen", "source": "https://t.me/cvedetector/6917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47762 - Backstage APP_CONFIG Configuration Setting Insecure Secrets\", \n  \"Content\": \"CVE ID : CVE-2024-47762 \nPublished : Oct. 3, 2024, 6:15 p.m. | 27\u00a0minutes ago \nDescription : Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backend_listen_port=7007, where unexpectedly ignoring the visibility defined in configuration schema. This occurred even if the configuration schema specified that they should have backend or secret visibility. This was an intended feature of the APP_CONFIG_* way of supplying configuration, but now clearly goes against the expected behavior of the configuration system. This behavior leads to a risk of potentially exposing sensitive configuration details intended to remain private or restricted to backend processes. The issue has been resolved in version 0.3.75 of the @backstage/plugin-app-backend package. As a temporary measure, avoid supplying secrets using the APP_CONFIG_ configuration pattern. Consider alternative methods for setting secrets, such as the environment substitution available for Backstage configuration. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T20:48:03.000000Z"}, {"uuid": "84edbc90-6be3-48ef-90ae-2f5e8348242f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47771", "type": "seen", "source": "https://t.me/cvedetector/7937", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47779 - Element Web Matrix Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47779 \nPublished : Oct. 15, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : Element is a Matrix web client built using the Matrix React SDK .Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Note that despite superficial similarity to CVE-2024-47771, this is an entirely separate vulnerability, caused by a separate piece of code included only in Element Web. Element Web and Element Desktop share most but not all, of their code and this vulnerability exists in the part of the code base which is not shared between the projects. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T18:37:01.000000Z"}, {"uuid": "972a4a21-52a4-4e51-ae4d-6ba1c7beb1cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47779", "type": "seen", "source": "https://t.me/cvedetector/7937", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47779 - Element Web Matrix Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47779 \nPublished : Oct. 15, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : Element is a Matrix web client built using the Matrix React SDK .Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Note that despite superficial similarity to CVE-2024-47771, this is an entirely separate vulnerability, caused by a separate piece of code included only in Element Web. Element Web and Element Desktop share most but not all, of their code and this vulnerability exists in the part of the code base which is not shared between the projects. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T18:37:01.000000Z"}, {"uuid": "78360e78-7af6-4e96-9490-3a678c17a400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47612", "type": "seen", "source": "https://t.me/cvedetector/6831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47612 - DataDump Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47612 \nPublished : Oct. 2, 2024, 3:15 p.m. | 41\u00a0minutes ago \nDescription : DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped (more specifically, (datadump-table-column-queued), (datadump-table-column-in-progress), (datadump-table-column-completed), (datadump-table-column-failed)). If these messages are edited (which requires the (editinterface) right by default), anyone who can view Special:DataDump (which requires the (view-dump) right by default) can be XSSed. This vulnerability is fixed with 601688ee8e8808a23b102fa305b178f27cbd226d. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:02:00.000000Z"}, {"uuid": "f1b718c3-a812-434e-93a5-7badef7cbca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47657", "type": "seen", "source": "https://t.me/cvedetector/6974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47657 - Shilpi Net Back Office Unauthenticated Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47657 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive information belonging to other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:12.000000Z"}, {"uuid": "1f2bfc9f-ce81-4440-88eb-8e5c7329728f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47876", "type": "seen", "source": "https://t.me/cvedetector/7932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47876 - Sakai Roleview Kernel User Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47876 \nPublished : Oct. 15, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T18:36:54.000000Z"}, {"uuid": "b1be3038-6273-4371-bd72-a6c7f2589d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47824", "type": "seen", "source": "https://t.me/cvedetector/7930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47824 - Matrix React SDK Message Key Stealing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47824 \nPublished : Oct. 15, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that room, via injection of a malicious device controlled by the homeserver. This is possible because matrix-react-sdk before 3.102.0 shared historical message keys on invite. Version 3.102.0 fixes this issue by disabling sharing message keys on invite by removing calls to the vulnerable functionality. No known workarounds are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T18:36:49.000000Z"}, {"uuid": "4e244bfa-ff64-4d1d-bc67-dd5da8fbf215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47211", "type": "seen", "source": "https://t.me/cvedetector/7003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47211 - Apache OpenStack Ironic Unauthenticated Image Source File Tampering Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47211 \nPublished : Oct. 4, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T21:03:14.000000Z"}, {"uuid": "a1521399-e26e-4de1-a8c3-67db469a114d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47080", "type": "seen", "source": "https://t.me/cvedetector/7925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47080 - \"Matrix JS SDK Unverified Shared History Key Interception Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47080 \nPublished : Oct. 15, 2024, 3:15 p.m. | 29\u00a0minutes ago \nDescription : matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method `MatrixClient.sendSharedHistoryKeys` is vulnerable to interception by malicious homeservers.  The method was introduced by MSC3061) and is commonly used to share historical message keys with newly invited users, granting them access to past messages in the room. However, it unconditionally sends these \"shared\" keys to all of the invited user's devices, regardless of whether the user's cryptographic identity is verified or whether the user's devices are signed by that identity. This allows the attacker to potentially inject its own devices to receive sensitive historical keys without proper security checks. Note that this only affects clients running the SDK with the legacy crypto stack. Clients using the new Rust cryptography stack (i.e. those that call `MatrixClient.initRustCrypto()` instead of `MatrixClient.initCrypto()`) are unaffected by this vulnerability, because `MatrixClient.sendSharedHistoryKeys()` raises an exception in such environments. The vulnerability was fixed in matrix-js-sdk 34.8.0 by removing the vulnerable functionality. As a workaround, remove use of affected functionality from clients. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T17:46:36.000000Z"}, {"uuid": "6674d6b9-e31c-4114-a54b-fab8bd1c1865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47183", "type": "seen", "source": "https://t.me/cvedetector/6989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47183 - Parse Server Custom ObjectId Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47183 \nPublished : Oct. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. If the Parse Server option allowCustomObjectId: true is set, an attacker that is allowed to create a new user can set a custom object ID for that new user that exploits the vulnerability and acquires privileges of a specific role. This vulnerability is fixed in 6.5.9 and 7.3.0. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T17:42:41.000000Z"}, {"uuid": "c52520e8-ce8a-4085-b5ab-6342e9a8a609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47769", "type": "seen", "source": "https://t.me/cvedetector/6992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47769 - IDURAR LFI/VBS Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-47769 \nPublished : Oct. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the public endpoint is accessible to an unauthenticated user. The user's input is directly appended to the join statement without additional checks. This allows an attacker to send URL encoded malicious payload. The directory structure can be escaped to read system files by adding an encoded string (payload) at subpath location. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T17:42:43.000000Z"}, {"uuid": "b6f7c500-4b66-463d-a8f5-fa1ad2c50d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47765", "type": "seen", "source": "https://t.me/cvedetector/6991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47765 - Minecraft MOTD Parser XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47765 \nPublished : Oct. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : Minecraft MOTD Parser is a PHP library to parse minecraft server motd. The HtmlGenerator class is subject to potential cross-site scripting (XSS) attack through a parsed malformed Minecraft server MOTD. The HtmlGenerator iterates through objects of MotdItem that are contained in an object of MotdItemCollection to generate a HTML string. An attacker can make malicious inputs to the color and text properties of MotdItem to inject own HTML into a web page during web page generation. For example by sending a malicious MOTD from a Minecraft server under their control that was queried and passed to the HtmlGenerator. This XSS vulnerability exists because the values of these properties are neither filtered nor escaped. This vulnerability is fixed in 1.0.6. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T17:42:42.000000Z"}, {"uuid": "6aa1647d-6757-4197-9e8c-e64f5be32c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47768", "type": "seen", "source": "https://t.me/cvedetector/6990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47768 - Lif Authentication Server Account Takeover Vulnerability (Authentication Bypass)\", \n  \"Content\": \"CVE ID : CVE-2024-47768 \nPublished : Oct. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : Lif Authentication Server is a server used by Lif to do various tasks regarding Lif accounts. This vulnerability has to do with the account recovery system where there does not appear to be a check to make sure the user has been sent the recovery email and entered the correct code. If the attacker knew the email of the target, they could supply the email and immediately prompt the server to update the password without ever needing the code. This issue has been patched in version 1.7.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T17:42:41.000000Z"}, {"uuid": "32d62c11-4703-40ed-8cbc-f56a1fb606fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47790", "type": "seen", "source": "https://t.me/cvedetector/6976", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47790 - D3D Security IP Camera Unauthenticated Remote Live Feed Takeover\", \n  \"Content\": \"CVE ID : CVE-2024-47790 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming.  A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed of the targeted device.    NOTE: This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:13.000000Z"}, {"uuid": "0880fab0-b372-47a5-9f39-fad3d64d60ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47789", "type": "seen", "source": "https://t.me/cvedetector/6975", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47789 - D3D Security IP Camera Unvalidated User Credentials Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47789 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP packet leading to exposure of user credentials of the targeted device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:13.000000Z"}, {"uuid": "c72d737f-f6f1-4f7d-8dee-69e15d25cb70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47854", "type": "seen", "source": "https://t.me/cvedetector/6964", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47854 - Veritas Data Insight Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47854 \nPublished : Oct. 4, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP request that could reflect back to an authenticated user without sanitization if executed by that user. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T09:20:49.000000Z"}, {"uuid": "a5b53de5-c1fe-4d06-9d66-5fdeda475af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47653", "type": "seen", "source": "https://t.me/cvedetector/6985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47653 - Shilpi Client Dashboard Unauthenticated Request Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47653 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : This vulnerability exists in Shilpi Client Dashboard due to lack of authorization for modification and cancellation requests through certain API endpoints. An authenticated remote attacker could exploit this vulnerability by placing or cancelling requests through API request body leading to unauthorized modification of requests belonging to the other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:24.000000Z"}, {"uuid": "b86f3413-052e-407d-b440-957ee12a2fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47652", "type": "seen", "source": "https://t.me/cvedetector/6984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47652 - Shilpi Client Dashboard Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47652 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile number. A remote attacker could exploit this vulnerability by providing mobile number of targeted user, to obtain complete access to the targeted user account. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:24.000000Z"}, {"uuid": "87333b89-2a9a-4168-9cab-7785afdb7a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47656", "type": "seen", "source": "https://t.me/cvedetector/6983", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47656 - Shilpi Client Dashboard Unauthenticated Password Brute Force Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47656 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on password, which could lead to gain unauthorized access to other user accounts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:23.000000Z"}, {"uuid": "7aa75d6f-ac65-4f0f-8d5a-5a1aa33ff783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47655", "type": "seen", "source": "https://t.me/cvedetector/6982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47655 - Shilpi Client Dashboard Remote File Upload RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47655 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded other than the specified extension. An authenticated remote attacker could exploit this vulnerability by uploading malicious file, which could lead to remote code execution on targeted application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:22.000000Z"}, {"uuid": "bc21aa4d-8983-4f49-aa4a-c77c2700ea6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47654", "type": "seen", "source": "https://t.me/cvedetector/6981", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47654 - Shilpi Client Dashboard OTP Bombing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47654 \nPublished : Oct. 4, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API endpoint. An unauthenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints, which could lead to the OTP bombing on the targeted system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T16:02:18.000000Z"}, {"uuid": "5897686e-2257-4a1c-95d9-de37a0f4b71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47651", "type": "seen", "source": "https://t.me/cvedetector/6970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47651 - Shilpi Client Dashboard User ID Parameter Overwrite\", \n  \"Content\": \"CVE ID : CVE-2024-47651 \nPublished : Oct. 4, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by including multiple \u201cuserid\u201d parameters in the API request body leading to unauthorized access of sensitive information belonging to other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T15:11:59.000000Z"}, {"uuid": "93970d80-6a24-42b8-ad9e-9cf27dfa23fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47855", "type": "seen", "source": "https://t.me/cvedetector/6962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47855 - JSON-lib Comment Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47855 \nPublished : Oct. 4, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T09:20:45.000000Z"}, {"uuid": "f5e70e4d-4cc4-4626-998e-d96113e720d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47617", "type": "seen", "source": "https://t.me/cvedetector/6900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47617 - Sulu CMS SuluMediaBundle Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47617 \nPublished : Oct. 3, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle component. The vulnerability is a Reflected Cross-Site Scripting (XSS) issue, which could potentially allow attackers to steal sensitive information, manipulate the website's content, or perform actions on behalf of the victim. This vulnerability is fixed in 2.6.5 and 2.5.21. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T18:17:22.000000Z"}, {"uuid": "25f685ad-7c05-4492-b1f7-e0b4f8124cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47614", "type": "seen", "source": "https://t.me/cvedetector/6899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47614 - Async-GraphQL Excessive Directives Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47614 \nPublished : Oct. 3, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fixed in 7.0.10. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T18:17:19.000000Z"}, {"uuid": "672a6dee-89e1-4ded-8a46-844a2ab9eda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47807", "type": "seen", "source": "https://t.me/cvedetector/6842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47807 - Jenkins OpenId Connect Authentication Plugin Open Redirect\", \n  \"Content\": \"CVE ID : CVE-2024-47807 \nPublished : Oct. 2, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:52:20.000000Z"}, {"uuid": "0bf93056-06e7-4b2a-8e6c-8dba925c929e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47806", "type": "seen", "source": "https://t.me/cvedetector/6841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47806 - Jenkins OpenId Connect Authentication Plugin OAuth Assertion Relay\", \n  \"Content\": \"CVE ID : CVE-2024-47806 \nPublished : Oct. 2, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:52:19.000000Z"}, {"uuid": "3dcfe8f4-722e-4894-8de2-14128c3abddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47805", "type": "seen", "source": "https://t.me/cvedetector/6840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47805 - Jenkins Credentials Plugin Credentials Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47805 \nPublished : Oct. 2, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:52:19.000000Z"}, {"uuid": "113e55dd-31dd-4fd1-bf55-46dbf3038880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47618", "type": "seen", "source": "https://t.me/cvedetector/6895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47618 - Sulu Cross-Site Scripting (XSS) via Media SVG File Upload\", \n  \"Content\": \"CVE ID : CVE-2024-47618 \nPublished : Oct. 3, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the \u201cMedia\u201d section can upload an SVG file with a malicious payload. Once uploaded and accessed, the malicious javascript will be executed on the victims\u2019 (other users including admins) browsers. This issue is fixed in 2.6.5. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T18:17:15.000000Z"}, {"uuid": "4b28c5d8-7a91-42ea-add8-57057c7358d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47554", "type": "seen", "source": "https://t.me/cvedetector/6894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47554 - Apache Commons IO CPU Exhaustion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47554 \nPublished : Oct. 3, 2024, 12:15 p.m. | 33\u00a0minutes ago \nDescription : Uncontrolled Resource Consumption vulnerability in Apache Commons IO.  \n  \nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.  \n  \n  \nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.  \n  \nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T14:56:37.000000Z"}, {"uuid": "7eaa0b7a-1883-42bb-90a1-8b2676a105fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/cvedetector/6892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47561 - Apache Avro Java SDK Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47561 \nPublished : Oct. 3, 2024, 11:15 a.m. | 42\u00a0minutes ago \nDescription : Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.  \nUsers are recommended to upgrade to version 1.11.4\u00a0 or 1.12.0, which fix this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T14:06:25.000000Z"}, {"uuid": "d146973c-163c-48f4-a5f2-6fe6a0a763db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47136", "type": "seen", "source": "https://t.me/cvedetector/6888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47136 - Kostac PLC Denial-of-Service and Remote Code Execution vulnerabilit\", \n  \"Content\": \"CVE ID : CVE-2024-47136 \nPublished : Oct. 3, 2024, 3:15 a.m. | 27\u00a0minutes ago \nDescription : Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T05:44:43.000000Z"}, {"uuid": "18433b29-1155-4fbe-b890-fd3bf7b76820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47135", "type": "seen", "source": "https://t.me/cvedetector/6887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47135 - Kostac PLC Programming Software Stack-based Buffer Overflow Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47135 \nPublished : Oct. 3, 2024, 3:15 a.m. | 27\u00a0minutes ago \nDescription : Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T05:44:42.000000Z"}, {"uuid": "2a28b9c9-88a4-4712-9f2b-d9e408007b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47134", "type": "seen", "source": "https://t.me/cvedetector/6886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47134 - Kostac PLC Programming Software Denial-of-Service and Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47134 \nPublished : Oct. 3, 2024, 3:15 a.m. | 27\u00a0minutes ago \nDescription : Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T05:44:41.000000Z"}, {"uuid": "6575e506-c780-40d6-b720-a2f14bb3e3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47616", "type": "seen", "source": "https://t.me/cvedetector/6884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47616 - \"Pomerium Databroker Incomplete JWT Validation Leaves Services Open to Abuse\"\", \n  \"Content\": \"CVE ID : CVE-2024-47616 \nPublished : Oct. 2, 2024, 10:15 p.m. | 24\u00a0minutes ago \nDescription : Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the databroker service API are authorized by the presence of a JSON Web Token (JWT) signed by a key known by all Pomerium services in the same deployment. However, incomplete validation of this JWT meant that some service account access tokens would incorrectly be treated as valid for the purpose of databroker API authorization. Improper access to the databroker API could allow exfiltration of user info, spoofing of user sessions, or tampering with Pomerium routes, policies, and other settings. A Pomerium deployment is susceptible to this issue if all of the following conditions are met, you have issued a service account access token using Pomerium Zero or Pomerium Enterprise, the access token has an explicit expiration date in the future, and the core Pomerium databroker gRPC API is not otherwise secured by network access controls. This vulnerability is fixed in 0.27.1. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T00:43:47.000000Z"}, {"uuid": "e4bab1de-aac9-476c-aa04-609b50105698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47529", "type": "seen", "source": "https://t.me/cvedetector/6875", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47529 - OpenC3 COSMOS Unencrypted User Password Storage\", \n  \"Content\": \"CVE ID : CVE-2024-47529 \nPublished : Oct. 2, 2024, 8:15 p.m. | 43\u00a0minutes ago \nDescription : OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting (see GHSL-2024-128). This vulnerability is fixed in 5.19.0. This only affects Open Source edition, and not OpenC3 COSMOS Enterprise Edition. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T23:03:26.000000Z"}, {"uuid": "010b75d5-170f-49ee-92d5-5b58f1125942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47608", "type": "seen", "source": "https://t.me/cvedetector/6781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47608 - Logicytics Shell Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47608 \nPublished : Oct. 1, 2024, 5:15 p.m. | 39\u00a0minutes ago \nDescription : Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromised devices from shell injections. This vulnerability is fixed in 2.3.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T20:17:11.000000Z"}, {"uuid": "63575dfb-3b9d-49ec-8683-120970320b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47534", "type": "seen", "source": "https://t.me/cvedetector/6780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47534 - Go-Tuf Delegation Tracing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47534 \nPublished : Oct. 1, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : go-tuf is a Go implementation of The Update Framework (TUF). The go-tuf client inconsistently traces the delegations. For example, if targets delegate to \"A\", and to \"B\", and \"B\" delegates to \"C\", then the client should trace the delegations in the order \"A\" then \"B\" then \"C\" but it may incorrectly trace the delegations \"B\"->\"C\"->\"A\". This vulnerability is fixed in 2.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T18:36:29.000000Z"}, {"uuid": "d6ca8544-04cc-4adb-b65f-a3796df300ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47071", "type": "seen", "source": "https://t.me/cvedetector/6779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47071 - \"FreePBX OSS Endpoint Manager File Access Authorization Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-47071 \nPublished : Oct. 1, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T18:36:25.000000Z"}, {"uuid": "32dbfb4a-5722-4e15-be2a-7aab7a7004ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/4110", "content": "\ud83d\udea8PoC Honeypot for Detecting Exploit Attempts Against CVE-2024-47177\n\nhttps://darkwebinformer.com/poc-honeypot-for-detecting-exploit-attempts-against-cve-2024-47177/", "creation_timestamp": "2024-09-27T17:23:58.000000Z"}, {"uuid": "3383353f-b8a9-4569-9cc7-014674716b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47804", "type": "seen", "source": "https://t.me/cvedetector/6839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47804 - Jenkins Item Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47804 \nPublished : Oct. 2, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only deleting it from disk, allowing attackers with Item/Configure permission to save the item to persist it, effectively bypassing the item creation restriction. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:52:18.000000Z"}, {"uuid": "e32de305-734e-4ce3-9489-75de39cd4380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47803", "type": "seen", "source": "https://t.me/cvedetector/6838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47803 - Jenkins Secret Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47803 \nPublished : Oct. 2, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:52:14.000000Z"}, {"uuid": "70854f02-ff32-4a5f-acda-a7ae13a61635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47611", "type": "seen", "source": "https://t.me/cvedetector/6832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47611 - XZ Utils Windows Command Line Argument Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47611 \nPublished : Oct. 2, 2024, 3:15 p.m. | 41\u00a0minutes ago \nDescription : XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows (MinGW-w64 or MSVC), the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters (for example, filenames) that don't exist in the current legacy code page, the characters are converted to similar-looking characters with best-fit mapping. Some best-fit mappings result in ASCII characters that change the meaning of the command line, which can be exploited with malicious filenames to do argument injection or directory traversal attacks. This vulnerability is fixed in 5.6.3. Command line tools built for Cygwin or MSYS2 are unaffected. liblzma is unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:02:01.000000Z"}, {"uuid": "aea2741c-03e1-40e6-aa70-265d19b33da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47604", "type": "seen", "source": "https://t.me/cvedetector/6775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47604 - NuGet Gallery Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47604 \nPublished : Oct. 1, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T18:36:21.000000Z"}, {"uuid": "3157837c-e6bf-458b-8763-5c0befcd02a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47527", "type": "seen", "source": "https://t.me/cvedetector/6798", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47527 - LibreNMS Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47527 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the \"Device Dependencies\" feature allows authenticated users to inject arbitrary JavaScript through the device name (\"hostname\" parameter). This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions. This vulnerability is fixed in 24.9.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:38:02.000000Z"}, {"uuid": "6cf19605-bb5c-49cd-9122-5a0fb54fb933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47526", "type": "seen", "source": "https://t.me/cvedetector/6797", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47526 - LibreNMS Self-XSS Vulnerability in Alert Templates\", \n  \"Content\": \"CVE ID : CVE-2024-47526 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulnerability in the \"Alert Templates\" feature allows users to inject arbitrary JavaScript into the alert template's name. This script executes immediately upon submission but does not persist after a page refresh. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:38:01.000000Z"}, {"uuid": "16632a15-c552-46c2-959c-3fc90e9deaf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47525", "type": "seen", "source": "https://t.me/cvedetector/6796", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47525 - \"LibreNMS Alert Rules Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-47525 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the \"Alert Rules\" feature allows authenticated users to inject arbitrary JavaScript through the \"Title\" field. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions. This vulnerability is fixed in 24.9.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:38:00.000000Z"}, {"uuid": "0e5585b3-ac0c-4dbc-b334-62fa9835c28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47524", "type": "seen", "source": "https://t.me/cvedetector/6795", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47524 - LibreNMS Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47524 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can create a Device Groups, the application did not properly sanitize the user input in the Device Groups name, when user see the detail of the Device Group, if java script code is inside the name of the Device Groups, its will be trigger. This vulnerability is fixed in 24.9.0. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:37:56.000000Z"}, {"uuid": "6ad3a590-dc9f-4192-b08e-dbf36d048f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47523", "type": "seen", "source": "https://t.me/cvedetector/6794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47523 - LibreNMS Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47523 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the \"Alert Transports\" feature allows authenticated users to inject arbitrary JavaScript through the \"Details\" section (which contains multiple fields depending on which transport is selected at that moment). This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions. This vulnerability is fixed in 24.9.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:37:55.000000Z"}, {"uuid": "67285b3a-9628-4799-90d3-08a350f37e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47609", "type": "seen", "source": "https://t.me/cvedetector/6792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47609 - Tonic gRPC DoS Attack Vulnerability (Denial of Service)\", \n  \"Content\": \"CVE ID : CVE-2024-47609 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that were not covered correctly causing the accept loop to exit. Upgrading to tonic 0.12.3 and above contains the fix. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:37:54.000000Z"}, {"uuid": "aa568321-4153-46e7-b238-e4e291f91b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47528", "type": "seen", "source": "https://t.me/cvedetector/6791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47528 - LibreNMS Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47528 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting (XSS) can be achieved by uploading a new Background for a Custom Map. Users with \"admin\" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload which will trigger on load. This led to Stored Cross-Site Scripting (XSS). The vulnerability is fixed in 24.9.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:37:53.000000Z"}, {"uuid": "3f28f9f0-d508-4809-b8fb-3e8b2044874e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47396", "type": "seen", "source": "https://t.me/cvedetector/6696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47396 - Move Addons for Elementor Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47396 \nPublished : Oct. 1, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.3. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T05:12:33.000000Z"}, {"uuid": "37ba32c4-f3f4-40e1-839a-16175e6dbbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47290", "type": "seen", "source": "https://t.me/cvedetector/6501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47290 - Cisco USB Service Module Input Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47290 \nPublished : Sept. 27, 2024, 11:15 a.m. | 45\u00a0minutes ago \nDescription : Input validation vulnerability in the USB service module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T14:12:47.000000Z"}, {"uuid": "ad9bac78-4913-4905-9baa-9e914af20f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/cvedetector/6699", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47295 - Seiko Epson Web Config Password Vault Dump\", \n  \"Content\": \"CVE ID : CVE-2024-47295 \nPublished : Oct. 1, 2024, 4:15 a.m. | 32\u00a0minutes ago \nDescription : Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References]. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T06:52:51.000000Z"}, {"uuid": "dd655a3b-d1de-4efd-8243-c1f41c07cfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47560", "type": "seen", "source": "https://t.me/cvedetector/6693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47560 - RevoWorks Cloud Client Unrestricted Sandbox Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47560 \nPublished : Oct. 1, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T05:12:30.000000Z"}, {"uuid": "1b5a9107-5c5a-4014-b6b8-96146964d4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47536", "type": "seen", "source": "https://t.me/cvedetector/6668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47536 - Citizen MediaWiki XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47536 \nPublished : Sept. 30, 2024, 5:15 p.m. | 37\u00a0minutes ago \nDescription : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. A user with the editmyprivateinfo right or who can otherwise change their name can XSS themselves by setting their \"real name\" to an XSS payload. This vulnerability is fixed in 2.31.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T20:00:17.000000Z"}, {"uuid": "069f1496-1870-443a-ab91-fa547c9c8bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47532", "type": "seen", "source": "https://t.me/cvedetector/6666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47532 - \"RestrictedPython - Information Disclosure thru Attribute Error\"\", \n  \"Content\": \"CVE ID : CVE-2024-47532 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application does not require access to the module string, it can remove it from RestrictedPython.Utilities.utility_builtins or otherwise do not make it available in the restricted execution environment. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:10:08.000000Z"}, {"uuid": "6db222e5-26e0-4e99-8458-e95bd5389b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47530", "type": "seen", "source": "https://t.me/cvedetector/6665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47530 - \"Scout Web Visualizer Open Redirect and Downgrade Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47530 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:10:08.000000Z"}, {"uuid": "24b8b01c-1788-4cc3-9730-55adfe3f8648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47178", "type": "seen", "source": "https://t.me/cvedetector/6664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47178 - Connect Basic Auth Timing Safe Comparison Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47178 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixed in basic-auth-connect 1.1.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:10:07.000000Z"}, {"uuid": "ca580a53-fdad-4625-9caa-0adaf0c5762e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47067", "type": "seen", "source": "https://t.me/cvedetector/6663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47067 - AList Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47067 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an application/xml response, opening it up to HTML tags via XHTML and thus leading to a XSS vulnerability. This vulnerability is fixed in 3.29.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:10:03.000000Z"}, {"uuid": "2c4b466c-6320-49c1-b8c0-a51e2f372a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47531", "type": "seen", "source": "https://t.me/cvedetector/6660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47531 - \"Scout File Extension Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47531 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious files with any extension. With malicious content injected inside the file data and users unknowingly downloading it and opening may lead to the compromise of users' devices or data. This vulnerability is fixed in 4.89. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:10:00.000000Z"}, {"uuid": "54d0a47f-4175-4234-a5c1-ea58d5b9efc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47172", "type": "seen", "source": "https://t.me/cvedetector/6657", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47172 - CVAT Information Disclosure and Configuration Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47172 \nPublished : Sept. 30, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account may retrieve certain information about any project, task, job or membership resource on the CVAT instance. The information exposed in this way is the same as the information returned on a GET request to the resource. In addition, the attacker can also alter the default source and target storage associated with any project or task. Upgrade to CVAT 2.19.1 or any later version to fix the issue. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T18:19:51.000000Z"}, {"uuid": "d9a13a45-3b60-4b79-b52f-3a20336972f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47063", "type": "seen", "source": "https://t.me/cvedetector/6656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47063 - CVAT Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-47063 \nPublished : Sept. 30, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If a malicious CVAT user with permissions to either create a task, or edit an existing task can trick another logged-in user into visiting a maliciously-constructed URL, they can initiate any API calls on that user's behalf. This gives the attacker temporary access to all data that the victim user has access to. Upgrade to CVAT 2.19.0 or a later version to fix this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T18:19:47.000000Z"}, {"uuid": "411e9f61-67fb-4b97-88b7-c8959b1375c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47064", "type": "seen", "source": "https://t.me/cvedetector/6653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47064 - CVAT Open API Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47064 \nPublished : Sept. 30, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If an attacker can trick a logged-in CVAT user into visiting a maliciously-constructed URL, they can initiate any API calls on that user's behalf. This gives the attacker temporary access to all data that the victim user has access to. Upgrade to CVAT 2.19.0 or a later version to fix this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T18:19:44.000000Z"}, {"uuid": "fbde70e5-4555-42f6-a020-0af51520d5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47641", "type": "seen", "source": "https://t.me/cvedetector/6650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47641 - WPDeveloper Confetti Fall Animation Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47641 \nPublished : Sept. 30, 2024, 1:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloperr Confetti Fall Animation allows Stored XSS.This issue affects Confetti Fall Animation: from n/a through 1.3.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T15:49:23.000000Z"}, {"uuid": "f2f392aa-7c00-4500-b1ae-c15f5c77d6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47186", "type": "seen", "source": "https://t.me/cvedetector/6583", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47186 - Filament Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47186 \nPublished : Sept. 27, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values passed to a `ColorColumn` or `ColumnEntry` are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a color column or entry is rendered. Filament v3.2.115 fixes this issue. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-28T00:16:13.000000Z"}, {"uuid": "552ad9eb-862d-458e-9760-73e0542ef1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/ton618cyber/5323", "content": "New scanner finds Linux, UNIX servers exposed to CUPS RCE attacks\n\nAn automated scanner has been released to help security professionals scan environments for devices vulnerable to the Common Unix Printing System (CUPS) RCE flaw tracked as CVE-2024-47176.\n\nBill Toulas | bleepingcomputer.com \u2022 Oct 8, 2024", "creation_timestamp": "2024-10-09T00:58:35.000000Z"}, {"uuid": "e416238a-7853-450f-a399-104851f78f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47070", "type": "seen", "source": "https://t.me/cvedetector/6552", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47070 - Authentik X-Forwarded-For Header Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47070 \nPublished : Sept. 27, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : authentik is an open-source identity provider. A vulnerability that exists in versions prior to 2024.8.3 and 2024.6.5 allows bypassing password login by adding X-Forwarded-For header with an unparsable IP address, e.g. `a`. This results in a possibility of logging into any account with a known login or email address. The vulnerability requires the authentik instance to trust X-Forwarded-For header provided by the attacker, thus it is not reproducible from external hosts on a properly configured environment.  The issue occurs due to the password stage having a policy bound to it, which skips the password stage if the Identification stage is setup to also contain a password stage. Due to the invalid X-Forwarded-For header, which does not get validated to be an IP Address early enough, the exception happens later and the policy fails. The default blueprint doesn't correctly set `failure_result` to `True` on the policy binding meaning that due to this exception the policy returns false and the password stage is skipped. Versions 2024.8.3 and 2024.6.5 fix this issue. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T19:14:39.000000Z"}, {"uuid": "4f558d05-7e7f-44d3-aac9-3f0df06cd71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47077", "type": "seen", "source": "https://t.me/cvedetector/6550", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47077 - Authentik Multi-Application Token Impersonation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47077 \nPublished : Sept. 27, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : authentik is an open-source identity provider. Prior to versions 2024.8.3 and 2024.6.5, access tokens issued to one application can be stolen by that application and used to impersonate the user against any other proxy provider. Also, a user can steal an access token they were legitimately issued for one application and use it to access another application that they aren't allowed to access. Anyone who has more than one proxy provider application with different trust domains or different access control is affected. Versions 2024.8.3 and 2024.6.5 fix the issue. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T19:14:38.000000Z"}, {"uuid": "3d831844-5343-4427-9826-63f4ee36e7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47184", "type": "seen", "source": "https://t.me/cvedetector/6537", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47184 - Ampache Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47184 \nPublished : Sept. 27, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Ampache is a web based audio/video streaming application and file manager. Prior to version 6.6.0, the Democratic Playlist Name is vulnerable to a stored cross-site scripting. Version 6.6.0 fixes this issue. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T16:43:53.000000Z"}, {"uuid": "36a5dfda-5fbc-49ee-b5ef-a0258596cf1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47182", "type": "seen", "source": "https://t.me/cvedetector/6536", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47182 - Dozzle Weak Password Storage\", \n  \"Content\": \"CVE ID : CVE-2024-47182 \nPublished : Sept. 27, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version 8.5.3. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T16:43:52.000000Z"}, {"uuid": "f2836749-b212-40ad-b7ff-da96f3e75b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47291", "type": "seen", "source": "https://t.me/cvedetector/6502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47291 - \"Android ActivityManagerService AMS Permission Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47291 \nPublished : Sept. 27, 2024, 11:15 a.m. | 45\u00a0minutes ago \nDescription : Permission vulnerability in the ActivityManagerService (AMS) module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T14:12:48.000000Z"}, {"uuid": "be77510f-631f-46ed-9665-58d66c29929a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47294", "type": "seen", "source": "https://t.me/cvedetector/6500", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47294 - \"VMware Input Method Framework Access Permission Verification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47294 \nPublished : Sept. 27, 2024, 11:15 a.m. | 45\u00a0minutes ago \nDescription : Access permission verification vulnerability in the input method framework module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T14:12:46.000000Z"}, {"uuid": "5a5f6994-2462-4b0e-adf3-a8f0a66056c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47293", "type": "seen", "source": "https://t.me/cvedetector/6499", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47293 - \"Qualcomm Snapdragon HAL-WIFI OOB Write Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-47293 \nPublished : Sept. 27, 2024, 11:15 a.m. | 45\u00a0minutes ago \nDescription : Out-of-bounds write vulnerability in the HAL-WIFI module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T14:12:45.000000Z"}, {"uuid": "93c32319-4692-48df-b3ba-6f992ca57104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47292", "type": "seen", "source": "https://t.me/cvedetector/6498", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47292 - Qualcomm Bluetooth Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47292 \nPublished : Sept. 27, 2024, 11:15 a.m. | 45\u00a0minutes ago \nDescription : Path traversal vulnerability in the Bluetooth module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T14:12:45.000000Z"}, {"uuid": "c9a23034-5eff-42f1-a4bc-45b8391c08bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47180", "type": "seen", "source": "https://t.me/cvedetector/6458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47180 - Shields.io Dynamic Badge JSONPath Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47180 \nPublished : Sept. 26, 2024, 8:15 p.m. | 46\u00a0minutes ago \nDescription : Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version < `server-2024-09-25` are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic JSON/Toml/Yaml badges. This vulnerability would allow any user with access to make a request to a URL on the instance to the ability to execute code by crafting a malicious JSONPath expression. All users who self-host an instance are vulnerable. This problem was fixed in server-2024-09-25. Those who follow the tagged releases should update to `server-2024-09-25` or later. Those who follow the rolling tag on DockerHub, `docker pull shieldsio/shields:next` to update to the latest version. As a workaround, blocking access to the endpoints `/badge/dynamic/json`, `/badge/dynamic/toml`, and `/badge/dynamic/yaml` (e.g: via a firewall or reverse proxy in front of your instance) would prevent the exploitable endpoints from being accessed. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T23:01:42.000000Z"}, {"uuid": "4079c902-a04e-4eae-a2f2-9b106b742b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47121", "type": "seen", "source": "https://t.me/cvedetector/6455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47121 - GoTenna Pro Weak Password Decryptability\", \n  \"Content\": \"CVE ID : CVE-2024-47121 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : The goTenna Pro series uses a weak password for the QR broadcast message. If the QR broadcast message is captured over RF it is possible to decrypt it and use it to decrypt all future and past messages sent via encrypted broadcast. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:25.000000Z"}, {"uuid": "9b9e6921-b043-4eec-a006-7cbfcc2248fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/cvedetector/6466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47177 - CUPS Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47177 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE_2024-47176, this can lead to remote command execution. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:07.000000Z"}, {"uuid": "8099ba9c-af52-4cb5-80aa-5abb592b6336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cvedetector/6465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47176 - Vulnerability Title: CUPS cups-browsed Remote Code Execution Over Network (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-47176 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL.  \n  \nDue to the service binding to `*:631 ( INADDR_ANY )`, multiple bugs in `cups-browsed` can be exploited in sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an attacker to execute arbitrary commands remotely on the target machine without authentication when a print job is started. This poses a significant security risk over the network. Notably, this vulnerability is particularly concerning as it can be exploited from the public internet, potentially exposing a vast number of systems to remote attacks if their CUPS services are enabled. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:06.000000Z"}, {"uuid": "bfd15121-a6db-4750-b4fa-eadb68df539f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cvedetector/6464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47175 - CUPS Libppd IPP Attribute Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47175 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:06.000000Z"}, {"uuid": "ecbf0255-4844-4c61-9ed5-c3302e9bf7f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/cvedetector/6464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47175 - CUPS Libppd IPP Attribute Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47175 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:06.000000Z"}, {"uuid": "dda3660d-6248-49aa-a16b-1828624bd04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/cvedetector/6463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47076 - CUPS IPP Attribute Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47076 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:05.000000Z"}, {"uuid": "ceabebb3-4847-4f11-b119-9e44a6ee0be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47179", "type": "seen", "source": "https://t.me/cvedetector/6460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47179 - RSSHub Artifact Poisoning privilege escalation vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47179 \nPublished : Sept. 26, 2024, 8:15 p.m. | 46\u00a0minutes ago \nDescription : RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning, which could have lead to a full repository takeover. Downstream users of RSSHub are not vulnerable to this issue, and commit 64e00e7 fixed the underlying issue and made the repository no longer vulnerable. The `docker-test-cont.yml` workflow gets triggered when the `PR - Docker build test` workflow completes successfully. It then collects some information about the Pull Request that triggered the triggering workflow and set some labels depending on the PR body and sender. If the PR also contains a `routes` markdown block, it will set the `TEST_CONTINUE` environment variable to `true`. The workflow then downloads and extracts an artifact uploaded by the triggering workflow which is expected to contain a single `rsshub.tar.zst` file. However, prior to commit 64e00e7, it did not validate and the contents were extracted in the root of the workspace overriding any existing files. Since the contents of the artifact were not validated, it is possible for a malicious actor to send a Pull Request which uploads, not just the `rsshub.tar.zst` compressed docker image, but also a malicious `package.json` file with a script to run arbitrary code in the context of the privileged workflow. As of commit 64e00e7, this scenario has been addressed and the RSSHub repository is no longer vulnerable. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T23:01:44.000000Z"}, {"uuid": "d012f6fe-2c2e-483b-a063-332a9af904c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47075", "type": "seen", "source": "https://t.me/cvedetector/6454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47075 - LayUI DOM Clobbering Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47075 \nPublished : Sept. 26, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerability that can lead to Cross-site Scripting (XSS) on web pages where attacker-controlled HTML elements (e.g., `img` tags with unsanitized `name` attributes) are present. Version 2.9.17 fixes this issue. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T21:21:24.000000Z"}, {"uuid": "6c218a18-3232-432d-859c-a6cc3d21bfc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47066", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/4027", "content": "\ud83d\udea8PoC for Lobe Chat CVE-2024-47066\n\nhttps://darkwebinformer.com/poc-for-lobe-chat-cve-2024-47066/", "creation_timestamp": "2024-09-24T19:46:07.000000Z"}, {"uuid": "f28f858d-1379-4e0f-95ba-24814c1fc97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47355", "type": "seen", "source": "https://t.me/cvedetector/7128", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47355 - CozyThemes Cozy Blocks Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47355 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.11. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:15.000000Z"}, {"uuid": "cce4c629-fc3f-49f5-8e21-ff742d2380ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47348", "type": "seen", "source": "https://t.me/cvedetector/7127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47348 - WaspThemes YellowPencil Visual CSS Style Editor - Reflected Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47348 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:14.000000Z"}, {"uuid": "547ed9fd-337d-430e-b706-78f5f37ee70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47363", "type": "seen", "source": "https://t.me/cvedetector/7125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47363 - Blockspare Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47363 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Blockspare allows Stored XSS.This issue affects Blockspare: from n/a through 3.2.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:12:04.000000Z"}, {"uuid": "63f3a0eb-e90a-48cb-b9dd-6f9908349a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47366", "type": "seen", "source": "https://t.me/cvedetector/7120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47366 - Elementor Addon Elements Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47366 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through 1.13.6. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:11:56.000000Z"}, {"uuid": "7ff857bb-a034-4399-938d-1961d6d13251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47365", "type": "seen", "source": "https://t.me/cvedetector/7119", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47365 - Atakan Au Automatic Categories Menu Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47365 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Atakan Au Automatically Hierarchic Categories in Menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through 2.0.5. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:11:56.000000Z"}, {"uuid": "c4b18be4-7590-4e61-a754-d182b9b2b8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47320", "type": "seen", "source": "https://t.me/cvedetector/7150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47320 - WS Form LITE Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47320 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WS Form WS Form LITE allows Stored XSS.This issue affects WS Form LITE: from n/a through 1.9.238. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:43.000000Z"}, {"uuid": "dd5567bf-f19e-4766-b1d3-93b597ffcc00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47313", "type": "seen", "source": "https://t.me/cvedetector/7149", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47313 - Catch Themes Catch Base Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47313 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Catch Themes Catch Base allows Stored XSS.This issue affects Catch Base: from n/a through 3.4.6. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:42.000000Z"}, {"uuid": "07dc6db9-0b42-47a2-b8cb-c6cf7c4497e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47310", "type": "seen", "source": "https://t.me/cvedetector/7148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47310 - ARI Soft ARI Fancy Lightbox Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47310 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ARI Soft ARI Fancy Lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through 1.3.17. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:41.000000Z"}, {"uuid": "9c5504a4-8b1b-4321-9029-080ac1183889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47322", "type": "seen", "source": "https://t.me/cvedetector/7147", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47322 - Ex-Themes WP Timeline Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47322 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ex-Themes WP Timeline \u2013 Vertical and Horizontal timeline plugin allows Reflected XSS.This issue affects WP Timeline \u2013 Vertical and Horizontal timeline plugin: from n/a through 3.6.7. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:41.000000Z"}, {"uuid": "cc6075e9-46e2-4807-9cd2-8c663c52efa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47332", "type": "seen", "source": "https://t.me/cvedetector/7145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47332 - WowDevs Sky Addons for Elementor Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47332 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor allows Stored XSS.This issue affects Sky Addons for Elementor: from n/a through 2.5.11. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:37.000000Z"}, {"uuid": "55917f51-1661-46e9-a8cc-e3adcae0977e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47329", "type": "seen", "source": "https://t.me/cvedetector/7144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47329 - \"Elementor QuomodoSoft ElementsReady Addons XSS Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-47329 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:36.000000Z"}, {"uuid": "f0642898-fe1d-46ff-9421-f9af8e773616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47344", "type": "seen", "source": "https://t.me/cvedetector/7211", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47344 - StylemixThemes uListing Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47344 \nPublished : Oct. 7, 2024, 6:15 a.m. | 36\u00a0minutes ago \nDescription : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StylemixThemes uListing.This issue affects uListing: from n/a through 2.1.5. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T09:16:21.000000Z"}, {"uuid": "4d96299f-be95-4db7-9daf-ca270d27f783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47335", "type": "seen", "source": "https://t.me/cvedetector/7212", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47335 - Bit Form Contact Form Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47335 \nPublished : Oct. 7, 2024, 6:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Form Bit Form \u2013 Contact Form Plugin allows SQL Injection.This issue affects Bit Form \u2013 Contact Form Plugin: from n/a through 2.13.11. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T09:16:22.000000Z"}, {"uuid": "7a23d4f6-0038-4241-9e8c-444e0f17750b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47307", "type": "seen", "source": "https://t.me/cvedetector/7155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47307 - Meta Slider Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47307 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Essential Plugin Meta slider and carousel with lightbox allows Stored XSS.This issue affects Meta slider and carousel with lightbox: from n/a through 2.0.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:50.000000Z"}, {"uuid": "bd76d9cc-8f94-4793-a789-4fb490e95078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47306", "type": "seen", "source": "https://t.me/cvedetector/7154", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47306 - \"A Web Page Generation Flaw in Copy Content Protection Team Secure Copy Content Protection and Content Locking Leads to Stored Cross-site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-47306 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 4.2.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:49.000000Z"}, {"uuid": "7ef0e91b-0244-4824-b8b8-906928e62ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47301", "type": "seen", "source": "https://t.me/cvedetector/7153", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47301 - Bit Form Contact Form Plugin Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47301 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bit Form Bit Form \u2013 Contact Form Plugin allows Stored XSS.This issue affects Bit Form \u2013 Contact Form Plugin: from n/a through 2.13.10. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:48.000000Z"}, {"uuid": "302f0a78-6ca5-4f2e-9136-6ec87fecdfc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47300", "type": "seen", "source": "https://t.me/cvedetector/7152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47300 - CubeWP Forms Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47300 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CubeWP CubeWP Forms \u2013 All-in-One Form Builder allows Stored XSS.This issue affects CubeWP Forms \u2013 All-in-One Form Builder: from n/a through 1.1.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:47.000000Z"}, {"uuid": "783b5bde-c7ee-48d9-85f6-096f472a30e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47356", "type": "seen", "source": "https://t.me/cvedetector/7126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47356 - Catch Themes Create Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47356 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Catch Themes Create allows Stored XSS.This issue affects Create: from n/a through 2.9.1. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:12:07.000000Z"}, {"uuid": "0f3aca91-2a56-4a67-aeeb-d4678ba8a6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47393", "type": "seen", "source": "https://t.me/cvedetector/7090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47393 - Quill Forms Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47393 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Quillforms Quill Forms allows Stored XSS.This issue affects Quill Forms: from n/a through 3.7.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:11.000000Z"}, {"uuid": "4db97b54-cc5c-4bb9-b47d-936de62f1fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47392", "type": "seen", "source": "https://t.me/cvedetector/7089", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47392 - BdThemes Element Pack Elementor Addons Stored Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47392 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.7.5. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:11.000000Z"}, {"uuid": "7a8583ca-028f-4486-84a7-2c2750a1003a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47380", "type": "seen", "source": "https://t.me/cvedetector/7098", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47380 - eBay WP-Lister Lite XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47380 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for eBay allows Reflected XSS.This issue affects WP-Lister Lite for eBay: from n/a through 3.6.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:24.000000Z"}, {"uuid": "8b87e60d-5078-438f-a529-96b910465b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47387", "type": "seen", "source": "https://t.me/cvedetector/7097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47387 - LinkGraph Search Atlas SEO Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47387 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LinkGraph Search Atlas SEO allows Stored XSS.This issue affects Search Atlas SEO: from n/a through 1.8.2. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:20.000000Z"}, {"uuid": "9c832a5c-68cf-4b2f-a2ee-ed0f320da9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47385", "type": "seen", "source": "https://t.me/cvedetector/7096", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47385 - \"WPDeveloper Essential Blocks for Gutenberg Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-47385 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through 4.8.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:19.000000Z"}, {"uuid": "4e5206f3-d8f5-4f2a-9cf0-0ca421bf5e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47389", "type": "seen", "source": "https://t.me/cvedetector/7095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47389 - Basix NEX-Forms XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47389 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Basix NEX-Forms \u2013 Ultimate Form Builder allows Reflected XSS.This issue affects NEX-Forms \u2013 Ultimate Form Builder: from n/a through 8.7.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:18.000000Z"}, {"uuid": "916455d2-849b-467b-a2a7-cfc92b359d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47388", "type": "seen", "source": "https://t.me/cvedetector/7094", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47388 - SliceWP Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47388 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SliceWP allows Reflected XSS.This issue affects SliceWP: from n/a through 1.1.18. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:18.000000Z"}, {"uuid": "1f390bbd-a206-43fa-a8ba-453be569b0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47390", "type": "seen", "source": "https://t.me/cvedetector/7087", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47390 - Jegtheme Jeg Elementor Kit Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47390 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegtheme Jeg Elementor Kit allows Stored XSS.This issue affects Jeg Elementor Kit: from n/a through 2.6.8. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:06.000000Z"}, {"uuid": "f621abde-f029-4c10-8643-f4e2a255b311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47350", "type": "seen", "source": "https://t.me/cvedetector/7167", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47350 - YITH WooCommerce Ajax Search SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47350 \nPublished : Oct. 6, 2024, 1:15 p.m. | 18\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Ajax Search allows SQL Injection.This issue affects YITH WooCommerce Ajax Search: from n/a through 2.8.0. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T15:43:12.000000Z"}, {"uuid": "e03de486-dc73-4e5f-8972-e8bf9a494234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47352", "type": "seen", "source": "https://t.me/cvedetector/7130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47352 - Xylus Themes WP Bulk Delete Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47352 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete allows Reflected XSS.This issue affects WP Bulk Delete: from n/a through 1.3.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:16.000000Z"}, {"uuid": "09498dfc-7abe-41f7-9ef8-16ee22fa2c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47349", "type": "seen", "source": "https://t.me/cvedetector/7129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47349 - WPMobile.App Reflected Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47349 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPMobile.App allows Reflected XSS.This issue affects WPMobile.App: from n/a through 11.50. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:16.000000Z"}, {"uuid": "e344c60a-f07b-43e7-9368-e70adcf09f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47644", "type": "seen", "source": "https://t.me/cvedetector/7059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47644 - Copyscape Indigo Stream Technologies CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47644 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Copyscape / Indigo Stream Technologies Copyscape Premium allows Stored XSS.This issue affects Copyscape Premium: from n/a through 1.3.6. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:17.000000Z"}, {"uuid": "a094cbab-ba1a-4345-a5f3-72b116117d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47646", "type": "seen", "source": "https://t.me/cvedetector/7060", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47646 - Payflex Payment Gateway Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47646 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payflex Payflex Payment Gateway.This issue affects Payflex Payment Gateway: from n/a through 2.6.1. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:21.000000Z"}, {"uuid": "3fbda8dd-9215-4d33-a0d4-7696995a4e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47650", "type": "seen", "source": "https://t.me/cvedetector/7169", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47650 - Axton WP-WebAuthn Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47650 \nPublished : Oct. 6, 2024, 1:15 p.m. | 18\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Axton WP-WebAuthn allows Stored XSS.This issue affects WP-WebAuthn: from n/a through 1.3.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T15:43:13.000000Z"}, {"uuid": "04868b8e-2f5f-475b-bcd9-d551fc66f15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47338", "type": "seen", "source": "https://t.me/cvedetector/7168", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47338 - WPExperts Square For GiveWP SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47338 \nPublished : Oct. 6, 2024, 1:15 p.m. | 18\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExpertsio WPExperts Square For GiveWP allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through 1.3. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T15:43:12.000000Z"}, {"uuid": "c127cb1b-6fe0-4a8d-9ffd-359ed1b75543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47298", "type": "seen", "source": "https://t.me/cvedetector/7158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47298 - BoldThemes Bold Page Builder Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47298 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 5.1.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:55.000000Z"}, {"uuid": "c338c31a-e7de-4e95-9a01-71620867f004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47297", "type": "seen", "source": "https://t.me/cvedetector/7157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47297 - CodePeople CP Polls Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47297 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople CP Polls allows Reflected XSS.This issue affects CP Polls: from n/a through 1.0.74. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:54.000000Z"}, {"uuid": "e43dec5b-3102-4585-82aa-4285794b79f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47360", "type": "seen", "source": "https://t.me/cvedetector/7124", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47360 - Booking Algorithms BA Book Everything Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47360 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Reflected XSS.This issue affects BA Book Everything: from n/a through 1.6.20. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:12:02.000000Z"}, {"uuid": "6d97c934-2db7-4098-9b4a-3a5a9b54d43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47357", "type": "seen", "source": "https://t.me/cvedetector/7123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47357 - Elementor Happy Addons Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47357 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.12.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:12:02.000000Z"}, {"uuid": "9efe4426-c569-4789-b253-10850a16b3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47299", "type": "seen", "source": "https://t.me/cvedetector/7151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47299 - SeedProd Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47299 \nPublished : Oct. 6, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd allows Stored XSS.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through 6.17.4. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:52:47.000000Z"}, {"uuid": "f37f0bfc-287f-4fed-a3b9-2504c3a75c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47391", "type": "seen", "source": "https://t.me/cvedetector/7088", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47391 - BoldThemes Bold Page Builder Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47391 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a before 5.1.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:10.000000Z"}, {"uuid": "4f19c071-027e-4169-bbcf-b9f97c0043aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47327", "type": "seen", "source": "https://t.me/cvedetector/7143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47327 - GEO my WordPress Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47327 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eyal Fitoussi GEO my WordPress allows Reflected XSS.This issue affects GEO my WordPress: from n/a through 4.5.0.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:35.000000Z"}, {"uuid": "d226d422-c3f5-4364-b01e-cb4411a61d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47326", "type": "seen", "source": "https://t.me/cvedetector/7142", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47326 - ILLID Share This Image Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47326 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ILLID Share This Image allows Reflected XSS.This issue affects Share This Image: from n/a through 2.01. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:35.000000Z"}, {"uuid": "b149b2f5-766d-4f11-9579-1a5b8ef87837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47339", "type": "seen", "source": "https://t.me/cvedetector/7141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47339 - James Ward WP Mail Catcher Reflected XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47339 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in James Ward WP Mail Catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through 2.1.9. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:31.000000Z"}, {"uuid": "0efd7933-ffd3-4872-8ddb-8afa70210b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47333", "type": "seen", "source": "https://t.me/cvedetector/7140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47333 - Team Tangible Loops & Logic Reflected Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47333 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Team Tangible Loops & Logic allows Reflected XSS.This issue affects Loops & Logic: from n/a through 4.1.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:30.000000Z"}, {"uuid": "4945bdb2-741f-4868-927b-17e133532a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47341", "type": "seen", "source": "https://t.me/cvedetector/7139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47341 - Lester \u2018GaMerZ\u2019 Chan WP-DownloadManager Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47341 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lester \u2018GaMerZ\u2019 Chan WP-DownloadManager allows Reflected XSS.This issue affects WP-DownloadManager: from n/a through 1.68.8. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:29.000000Z"}, {"uuid": "64dd234a-7f18-49a4-ab88-19f0a548eb3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47340", "type": "seen", "source": "https://t.me/cvedetector/7138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47340 - PickPlugins PickPlugin Stored Cross-Site Scripting Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-47340 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through 2.2.89. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:28.000000Z"}, {"uuid": "4b56f141-1514-4d43-a688-d5d571db0652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47336", "type": "seen", "source": "https://t.me/cvedetector/7137", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47336 - Vladimir Statsenko Terms Description Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47336 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions allows Stored XSS.This issue affects Terms descriptions: from n/a through 3.4.6. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:28.000000Z"}, {"uuid": "654ca1e8-22b0-4c64-8841-0b529debee4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47347", "type": "seen", "source": "https://t.me/cvedetector/7136", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47347 - Chartify Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47347 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chart Builder Team Chartify allows Reflected XSS.This issue affects Chartify: from n/a through 2.7.6. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:24.000000Z"}, {"uuid": "980cd819-6624-4f6a-a55d-f64b7b296be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47346", "type": "seen", "source": "https://t.me/cvedetector/7135", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47346 - Tribulant Newsletters Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47346 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.9.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:23.000000Z"}, {"uuid": "89e9e418-d4c7-46c3-bd04-1a99691fb6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47345", "type": "seen", "source": "https://t.me/cvedetector/7134", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47345 - Brainstorm Force Starter Templates Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47345 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Starter Templates allows Stored XSS.This issue affects Starter Templates: from n/a through 4.4.0. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:22.000000Z"}, {"uuid": "61198983-de66-424d-ab7b-4d315d8ceda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47343", "type": "seen", "source": "https://t.me/cvedetector/7133", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47343 - Kraftplugins Mega Elements Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47343 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.2.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:22.000000Z"}, {"uuid": "99d04c85-3603-4832-8224-c982fcaf8344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47342", "type": "seen", "source": "https://t.me/cvedetector/7132", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47342 - PickPlugins Accordion Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47342 \nPublished : Oct. 6, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins Accordion accordions allows Stored XSS.This issue affects Accordion: from n/a through 2.2.99. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T14:02:21.000000Z"}, {"uuid": "b3704b18-50d7-42eb-bee2-f869a6ea9d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47368", "type": "seen", "source": "https://t.me/cvedetector/7122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47368 - Leap13 Premium Blocks - Gutenberg Blocks for WordPress Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47368 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Leap13 Premium Blocks \u2013 Gutenberg Blocks for WordPress allows Stored XSS.This issue affects Premium Blocks \u2013 Gutenberg Blocks for WordPress: from n/a through 2.1.33. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:12:01.000000Z"}, {"uuid": "cb3e5b29-2412-44a0-94cf-e2b1a7b65ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47367", "type": "seen", "source": "https://t.me/cvedetector/7121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47367 - YITH WooCommerce Product Add-Ons Reflex XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47367 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.13.0. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:12:00.000000Z"}, {"uuid": "2d6f448a-3252-47e2-8492-f60b8e35a7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47370", "type": "seen", "source": "https://t.me/cvedetector/7112", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47370 - \"Paul Bearne Author Avatars Stored Cross-site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-47370 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.21. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:40.000000Z"}, {"uuid": "db091ea2-bb91-4426-901a-068a6424e4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47369", "type": "seen", "source": "https://t.me/cvedetector/7111", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47369 - WordPress WordPress Web Page Generation Stored Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47369 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPWeb Social Auto Poster allows Reflected XSS.This issue affects Social Auto Poster: from n/a through 5.3.15. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:40.000000Z"}, {"uuid": "1782f7ae-9dfd-46f8-b64e-8f17ee41bda2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47375", "type": "seen", "source": "https://t.me/cvedetector/7110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47375 - Ashraf XLTab Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47375 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ashraf XLTab \u2013 Accordions and Tabs for Elementor Page Builder allows Stored XSS.This issue affects XLTab \u2013 Accordions and Tabs for Elementor Page Builder: from n/a through 1.3. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:39.000000Z"}, {"uuid": "aef4211d-0cb1-41be-ab31-dee4831b37f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/cvedetector/7109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47374 - LiteSpeed Technologies LiteSpeed Cache Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47374 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 6.5.0.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:38.000000Z"}, {"uuid": "fd84d4c5-01ae-4c5e-9120-e0e2adc52072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47373", "type": "seen", "source": "https://t.me/cvedetector/7108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47373 - LiteSpeed Technologies LiteSpeed Cache Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47373 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 6.5.0.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:37.000000Z"}, {"uuid": "c6487c8c-4323-4a7f-8df0-93567d5539d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47372", "type": "seen", "source": "https://t.me/cvedetector/7107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47372 - TNC PDF Viewer Stored Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47372 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 3.1.0. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:33.000000Z"}, {"uuid": "5b15c6b3-4bc7-4ec5-a799-ebd99817aba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47364", "type": "seen", "source": "https://t.me/cvedetector/7118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47364 - Elementor Move Addons Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47364 \nPublished : Oct. 6, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Move addons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-06T13:11:55.000000Z"}, {"uuid": "18318b7f-3580-4230-967a-3e04209e8725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47381", "type": "seen", "source": "https://t.me/cvedetector/7099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47381 - Averta Depicter Slider Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47381 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.2.2. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:24.000000Z"}, {"uuid": "47712978-55d7-493f-adc8-ca58f1aa7709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47371", "type": "seen", "source": "https://t.me/cvedetector/7106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47371 - Walter Pinem WP MyLinks Stored Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47371 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Walter Pinem WP MyLinks allows Stored XSS.This issue affects WP MyLinks: from n/a through 1.0.6. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:32.000000Z"}, {"uuid": "56f18db6-7266-4224-b294-7c72e786ee9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47377", "type": "seen", "source": "https://t.me/cvedetector/7104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47377 - ThemeKraft BuddyForms Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47377 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeKraft BuddyForms allows Stored XSS.This issue affects BuddyForms: from n/a through 2.8.12. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:31.000000Z"}, {"uuid": "679d6495-8cbd-4955-ba2a-ceafd6e3719e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47376", "type": "seen", "source": "https://t.me/cvedetector/7103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47376 - Tribulant Slideshow Gallery Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47376 \nPublished : Oct. 5, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tribulant Slideshow Gallery allows Stored XSS.This issue affects Slideshow Gallery: from n/a through 1.8.3. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T18:48:30.000000Z"}, {"uuid": "fc97f229-4996-4e16-8475-0c26999c5c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47384", "type": "seen", "source": "https://t.me/cvedetector/7102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47384 - WP Compress Image Optimizer Reflected Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47384 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Compress WP Compress \u2013 Image Optimizer [All-In-One] allows Reflected XSS.This issue affects WP Compress \u2013 Image Optimizer [All-In-One]: from n/a through 6.20.13. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:27.000000Z"}, {"uuid": "376de22b-162d-4ccb-8f80-3035232e62fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47383", "type": "seen", "source": "https://t.me/cvedetector/7101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47383 - Webangon The Pack Elementor Stored Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47383 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webangon The Pack Elementor addons allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through 2.0.8.8. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:26.000000Z"}, {"uuid": "7314c97f-5302-4f07-96d0-8b9459d514d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47382", "type": "seen", "source": "https://t.me/cvedetector/7100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47382 - Webvitaly Page-list Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47382 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webvitaly Page-list allows Stored XSS.This issue affects Page-list: from n/a through 5.6. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:25.000000Z"}, {"uuid": "32a9522c-f5cc-4a15-aaed-6ce821de6fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47638", "type": "seen", "source": "https://t.me/cvedetector/7063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47638 - vcita WordPress Online Booking & Scheduling Calendar Reflected XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47638 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Reflected XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.6. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:24.000000Z"}, {"uuid": "add68930-09a4-483a-9291-24baec3595ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47635", "type": "seen", "source": "https://t.me/cvedetector/7062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47635 - TinyPNG CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47635 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in TinyPNG.This issue affects TinyPNG: from n/a through 3.4.3. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:23.000000Z"}, {"uuid": "87a4e093-d84f-4e7f-9988-9d5217bd3588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47633", "type": "seen", "source": "https://t.me/cvedetector/7061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47633 - Zoho Forms Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47633 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zoho Forms allows Stored XSS.This issue affects Zoho Forms: from n/a through 4.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:22.000000Z"}, {"uuid": "856e4d9f-0224-4493-83a1-ea5f809d7d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47386", "type": "seen", "source": "https://t.me/cvedetector/7093", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47386 - \"WP Extended XSS Reflected\"\", \n  \"Content\": \"CVE ID : CVE-2024-47386 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Extended The Ultimate WordPress Toolkit \u2013 WP Extended allows Reflected XSS.This issue affects The Ultimate WordPress Toolkit \u2013 WP Extended: from n/a through 3.0.8. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:17.000000Z"}, {"uuid": "24a10b0b-b115-4567-bc6d-119580321df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47395", "type": "seen", "source": "https://t.me/cvedetector/7092", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47395 - Robokassa Woocommerce Reflected XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47395 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Robokassa Robokassa payment gateway for Woocommerce allows Reflected XSS.This issue affects Robokassa payment gateway for Woocommerce: from n/a through 1.6.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:13.000000Z"}, {"uuid": "ac98aab7-c04c-49d7-9f10-8561c690f1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47394", "type": "seen", "source": "https://t.me/cvedetector/7091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47394 - Eyecix JobSearch Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47394 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in eyecix JobSearch allows Reflected XSS.This issue affects JobSearch: from n/a through 2.5.9. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:12.000000Z"}, {"uuid": "e3ee0697-e930-44cb-91dc-db4a31658116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47847", "type": "seen", "source": "https://t.me/cvedetector/7034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47847 - Wikimedia Foundation Mediawiki Cargo Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47847 \nPublished : Oct. 5, 2024, 1:15 a.m. | 26\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T03:44:44.000000Z"}, {"uuid": "a7d9e0bd-4e60-4e35-9c88-c8a2fb641ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47840", "type": "seen", "source": "https://t.me/cvedetector/7033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47840 - WikiMedia Mediawiki Apex Skin XSS-enabled Stored Attack\", \n  \"Content\": \"CVE ID : CVE-2024-47840 \nPublished : Oct. 5, 2024, 1:15 a.m. | 26\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Apex skin allows Stored XSS.This issue affects Mediawiki - Apex skin: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T03:44:43.000000Z"}, {"uuid": "8dd5aaa9-3c0e-49a5-ac3d-47b502b60971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47848", "type": "seen", "source": "https://t.me/cvedetector/7032", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47848 - Mediawiki PageTriage Authentication Bypass Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-47848 \nPublished : Oct. 5, 2024, 12:15 a.m. | 37\u00a0minutes ago \nDescription : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - PageTriage allows Authentication Bypass.This issue affects Mediawiki - PageTriage: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T02:54:32.000000Z"}, {"uuid": "018c08c5-9972-461e-aefc-9c0837f6d74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47913", "type": "seen", "source": "https://t.me/cvedetector/7031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47913 - MediaWiki AbuseFilter API Unauthorized Log Details Viewing\", \n  \"Content\": \"CVE ID : CVE-2024-47913 \nPublished : Oct. 4, 2024, 10:15 p.m. | 35\u00a0minutes ago \nDescription : An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API caller can match a filter condition against AbuseFilter logs even if the caller is not authorized to view the log details for the filter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T01:14:10.000000Z"}, {"uuid": "4223ae36-8440-409a-9ee0-623e11f91a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47911", "type": "seen", "source": "https://t.me/cvedetector/7030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47911 - SonarSource SonarQube SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47911 \nPublished : Oct. 4, 2024, 9:15 p.m. | 15\u00a0minutes ago \nDescription : In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows SonarQube users with the administrator role to inject blind SQL commands. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T23:33:51.000000Z"}, {"uuid": "c3e5b7de-6284-4aab-8865-1078b635b6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47624", "type": "seen", "source": "https://t.me/cvedetector/7086", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47624 - BannerSky BSK Forms Blacklist Reflected Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47624 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky BSK Forms Blacklist allows Reflected XSS.This issue affects BSK Forms Blacklist: from n/a through 3.8.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:05.000000Z"}, {"uuid": "8fb7c17e-bfec-444c-bba5-9c675240a287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47622", "type": "seen", "source": "https://t.me/cvedetector/7085", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47622 - Advanced Woo Labels Web Page Generation Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47622 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ILLID Advanced Woo Labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through 2.01. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:04.000000Z"}, {"uuid": "252fc19b-93c4-4b4b-aaa9-dfef4f0d6130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47623", "type": "seen", "source": "https://t.me/cvedetector/7084", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47623 - GhozyLab, Inc. Gallery Lightbox Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47623 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in GhozyLab, Inc. Gallery Lightbox allows Stored XSS.This issue affects Gallery Lightbox: from n/a through 1.0.0.39. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:04.000000Z"}, {"uuid": "38348cb5-b96a-4cdb-a164-dc7c06a7ef53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47621", "type": "seen", "source": "https://t.me/cvedetector/7083", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47621 - Zotpress Stored Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47621 \nPublished : Oct. 5, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Katie Seaborn Zotpress allows Stored XSS.This issue affects Zotpress: from n/a through 7.3.10. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:58:03.000000Z"}, {"uuid": "5b809973-8303-41c9-a422-767828f4b2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47629", "type": "seen", "source": "https://t.me/cvedetector/7082", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47629 - BdThemes Ultimate Store Kit Elementor Addons Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47629 \nPublished : Oct. 5, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 2.0.5. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:07:56.000000Z"}, {"uuid": "cd1da78d-c235-47b0-ba02-b6eed1d5b412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47628", "type": "seen", "source": "https://t.me/cvedetector/7081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47628 - LA-Studio Element Kit for Elementor Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47628 \nPublished : Oct. 5, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.9.3. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:07:55.000000Z"}, {"uuid": "7e2d8318-fd68-47f8-bbd3-6c7d7e8671b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47627", "type": "seen", "source": "https://t.me/cvedetector/7080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47627 - WP Travel Gutenberg Blocks Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47627 \nPublished : Oct. 5, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Stored XSS.This issue affects WP Travel Gutenberg Blocks: from n/a through 3.6.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:07:55.000000Z"}, {"uuid": "a03a21a2-9be7-4640-b749-1c7707abc3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47626", "type": "seen", "source": "https://t.me/cvedetector/7079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47626 - Rometheme RomethemeKit For Elementor Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47626 \nPublished : Oct. 5, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rometheme RomethemeKit For Elementor allows Stored XSS.This issue affects RomethemeKit For Elementor: from n/a through 1.5.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:07:51.000000Z"}, {"uuid": "caa736d4-37ae-4708-9a19-79128a6dfada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47625", "type": "seen", "source": "https://t.me/cvedetector/7078", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47625 - ThemeLooks Enter Addons Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47625 \nPublished : Oct. 5, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeLooks Enter Addons allows Stored XSS.This issue affects Enter Addons: from n/a through 2.1.8. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:07:50.000000Z"}, {"uuid": "c8aca05d-d6ce-490d-b2e1-5faf27c0eaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47630", "type": "seen", "source": "https://t.me/cvedetector/7075", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47630 - ElementInvader Elementor XSS\", \n  \"Content\": \"CVE ID : CVE-2024-47630 \nPublished : Oct. 5, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ElementInvader ElementInvader Addons for Elementor allows Stored XSS.This issue affects ElementInvader Addons for Elementor: from n/a through 1.2.7. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T17:07:48.000000Z"}, {"uuid": "4e1d0b76-e3d5-4b81-b4d4-1e50037c1e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47316", "type": "seen", "source": "https://t.me/cvedetector/7073", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47316 - \"Aramex Salon Booking System Authorization Bypass Through User-Controlled Key\"\", \n  \"Content\": \"CVE ID : CVE-2024-47316 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Authorization Bypass Through User-Controlled Key vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.9. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:37.000000Z"}, {"uuid": "0d77a0f4-0421-494f-a095-25120c9caa41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47309", "type": "seen", "source": "https://t.me/cvedetector/7072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47309 - Condless Cities Shipping Zones for WooCommerce Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47309 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Condless Cities Shipping Zones for WooCommerce allows PHP Local File Inclusion.This issue affects Cities Shipping Zones for WooCommerce: from n/a through 1.2.7. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:37.000000Z"}, {"uuid": "7479b0b5-de99-449e-a61e-5239d97d115f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47324", "type": "seen", "source": "https://t.me/cvedetector/7069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47324 - Ex-Themes WP Timeline - Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-47324 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ex-Themes WP Timeline \u2013 Vertical and Horizontal timeline plugin allows PHP Local File Inclusion.This issue affects WP Timeline \u2013 Vertical and Horizontal timeline plugin: from n/a through 3.6.7. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:31.000000Z"}, {"uuid": "49341bab-013c-476b-a628-92641201750f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47319", "type": "seen", "source": "https://t.me/cvedetector/7068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47319 - Bit Apps Bit Form Unrestricted File Upload Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47319 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form \u2013 Contact Form Plugin allows Code Injection.This issue affects Bit Form \u2013 Contact Form Plugin: from n/a through 2.13.10. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:30.000000Z"}, {"uuid": "4455e4e3-9820-4f8c-a128-8d0d2e7f17c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47632", "type": "seen", "source": "https://t.me/cvedetector/7067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47632 - DethemeKit For Elementor Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47632 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through 2.1.7. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:30.000000Z"}, {"uuid": "3e55ce8a-ae99-47c4-8566-9f4c1ebec07f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47631", "type": "seen", "source": "https://t.me/cvedetector/7066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47631 - bPlugins LLC Logo Carousel Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47631 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins LLC Logo Carousel \u2013 Clients logo carousel for WP allows Stored XSS.This issue affects Logo Carousel \u2013 Clients logo carousel for WP: from n/a through 1.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:29.000000Z"}, {"uuid": "3efa66c5-dded-4811-b7a0-691d76503a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47323", "type": "seen", "source": "https://t.me/cvedetector/7065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47323 - Ex-Themes WP Timeline Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47323 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ex-Themes WP Timeline \u2013 Vertical and Horizontal timeline plugin allows PHP Local File Inclusion.This issue affects WP Timeline \u2013 Vertical and Horizontal timeline plugin: from n/a through 3.6.7. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:28.000000Z"}, {"uuid": "498f7705-b274-445a-a2bb-b31d4e84265e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47639", "type": "seen", "source": "https://t.me/cvedetector/7064", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47639 - VdoCipher XSS Stored\", \n  \"Content\": \"CVE ID : CVE-2024-47639 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VdoCipher allows Stored XSS.This issue affects VdoCipher: from n/a through 1.29. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:24.000000Z"}, {"uuid": "7747748a-241e-4cb4-86ee-a7d71b907a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47643", "type": "seen", "source": "https://t.me/cvedetector/7058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47643 - Fussball.De Widgets Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47643 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Alexander B\u00f6hm Include Fussball.De Widgets allows Stored XSS.This issue affects Include Fussball.De Widgets: from n/a through 4.0.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:17.000000Z"}, {"uuid": "84d79bc1-e5b8-4276-9e95-c43f37030593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47642", "type": "seen", "source": "https://t.me/cvedetector/7057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47642 - Keap Official Opt-in Forms Stored Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47642 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Keap Keap Official Opt-in Forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through 2.0.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:16.000000Z"}, {"uuid": "ef7a499d-e0e9-451e-80fb-5ad6b6fbea42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47647", "type": "seen", "source": "https://t.me/cvedetector/7056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47647 - HelpieWP Accordion & FAQ Plugin Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47647 \nPublished : Oct. 5, 2024, 1:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HelpieWP Accordion & FAQ \u2013 Helpie WordPress Accordion FAQ Plugin allows Stored XSS.This issue affects Accordion & FAQ \u2013 Helpie WordPress Accordion FAQ Plugin: from n/a through 1.27. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T16:17:15.000000Z"}, {"uuid": "92a5c823-984d-4f50-b2a9-333244cbdeb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47841", "type": "seen", "source": "https://t.me/cvedetector/7038", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47841 - Wiki CSS Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47841 \nPublished : Oct. 5, 2024, 2:15 a.m. | 17\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Path Traversal.This issue affects Mediawiki - CSS Extension: from 1.42.X before 1.42.2, from 1.41.X before 1.41.3, from 1.39.X before 1.39.9. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T04:34:53.000000Z"}, {"uuid": "93999150-8398-48e9-a552-a411dd046c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47849", "type": "seen", "source": "https://t.me/cvedetector/7037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47849 - Wikimedia Foundation Mediawiki - Cargo SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47849 \nPublished : Oct. 5, 2024, 1:15 a.m. | 26\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Injection.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T03:44:46.000000Z"}, {"uuid": "40a4becb-4b90-499e-aa95-4935a341a6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47846", "type": "seen", "source": "https://t.me/cvedetector/7036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47846 - Mediawiki Cargo CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47846 \nPublished : Oct. 5, 2024, 1:15 a.m. | 26\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T03:44:45.000000Z"}, {"uuid": "3e4f83e2-6d17-4d9e-84a5-5c8ef803c51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47845", "type": "seen", "source": "https://t.me/cvedetector/7035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47845 - Wikimedia Foundation Mediawiki CSS Extension Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47845 \nPublished : Oct. 5, 2024, 1:15 a.m. | 26\u00a0minutes ago \nDescription : Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-05T03:44:44.000000Z"}, {"uuid": "bab8e376-c1f9-44d3-8e80-4bc7aeb60435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47910", "type": "seen", "source": "https://t.me/cvedetector/7028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47910 - SonarQube GitHub JWT Exfiltration Arrogation\", \n  \"Content\": \"CVE ID : CVE-2024-47910 \nPublished : Oct. 4, 2024, 9:15 p.m. | 15\u00a0minutes ago \nDescription : An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5. A SonarQube user with the Administrator role can modify an existing configuration of a GitHub integration to exfiltrate a pre-signed JWT. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T23:33:49.000000Z"}, {"uuid": "4bad80b8-9513-4035-8a5a-d9a4f096f100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47764", "type": "seen", "source": "https://t.me/cvedetector/7021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47764 - Cookie vulnerable to Unauthorized Field Modification\", \n  \"Content\": \"CVE ID : CVE-2024-47764 \nPublished : Oct. 4, 2024, 8:15 p.m. | 25\u00a0minutes ago \nDescription : cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T22:43:39.000000Z"}, {"uuid": "f2e2fc5b-58c6-460a-9565-c5244d42ef02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/4947", "content": "\ud83d\udca1CVE-2024-47176 Vulnerability Scanner (Cups-Browsed)\n\nhttps://darkwebinformer.com/cve-2024-47176-vulnerability-scanner-cups-browsed/", "creation_timestamp": "2024-10-08T23:55:05.000000Z"}, {"uuid": "f2453664-6e2f-478a-a1d8-1a6a0f5c9f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47001", "type": "seen", "source": "https://t.me/cvedetector/5905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47001 - TAKENAKA ENGINEERING CO., LTD. Digital Video Recorder Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-47001 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:18.000000Z"}, {"uuid": "dd41fc55-cf51-4637-b080-14332118eb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47047", "type": "seen", "source": "https://t.me/cvedetector/5813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47047 - TYPO3 Powermail IDOR Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-47047 \nPublished : Sept. 17, 2024, 2:15 p.m. | 40\u00a0minutes ago \nDescription : An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in Insecure Direct Object Reference (IDOR) in some configurations. An unauthenticated attacker can use this to display user-submitted data of all forms persisted by the extension. The fixed versions are 7.5.1, 8.5.1, 10.9.1, and 12.4.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T17:16:53.000000Z"}, {"uuid": "9b7450fa-9b9a-4bea-8601-1c6407d7ac2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47049", "type": "seen", "source": "https://t.me/cvedetector/5814", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47049 - Czim/File-Handling SSRF and Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47049 \nPublished : Sept. 17, 2024, 2:15 p.m. | 40\u00a0minutes ago \nDescription : The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T17:16:53.000000Z"}, {"uuid": "f54c2f05-3978-4f2b-a75c-03d398f54a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47069", "type": "seen", "source": "https://t.me/cvedetector/6188", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47069 - Contao Oveleon Cookie Bar Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-47069 \nPublished : Sept. 23, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Oveleon Cookie Bar is a cookie bar is for the Contao Open Source CMS and allows a visitor to define cookie & privacy settings for the website. Prior to versions 1.16.3 and 2.1.3, the `block/locale` endpoint does not properly sanitize the user-controlled `locale` input before including it in the backend's HTTP response, thereby causing reflected cross-site scripting. Versions 1.16.3 and 2.1.3 contain a patch for the vulnerability. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T18:49:34.000000Z"}, {"uuid": "df940df6-bc89-4595-bdda-9b97fe849c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47162", "type": "seen", "source": "https://t.me/cvedetector/6068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47162 - JetBrains YouTrack Unvalidated Token Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47162 \nPublished : Sept. 19, 2024, 6:15 p.m. | 47\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T21:10:35.000000Z"}, {"uuid": "7dc0f4ed-8351-469c-8bb8-222da79897c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47160", "type": "seen", "source": "https://t.me/cvedetector/6067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47160 - JetBrains YouTrack Unvalidated Input Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47160 \nPublished : Sept. 19, 2024, 6:15 p.m. | 47\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T21:10:34.000000Z"}, {"uuid": "53a5da9e-22ec-4a47-b570-9aea946f2539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47220", "type": "seen", "source": "https://t.me/cvedetector/6148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47220 - WEBrick HTTP Request Smuggling\", \n  \"Content\": \"CVE ID : CVE-2024-47220 \nPublished : Sept. 22, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., \"GET /admin HTTP/1.1\\r\\n\" inside of a \"POST /user HTTP/1.1\\r\\n\" request. NOTE: the supplier's position is \"Webrick should not be used in production.\" \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-22T04:21:54.000000Z"}, {"uuid": "13283226-f0c9-4f9f-a94f-7271c31e5dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47222", "type": "seen", "source": "https://t.me/cvedetector/6210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47222 - MyOffice Collaborative Editing Server SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47222 \nPublished : Sept. 23, 2024, 8:15 p.m. | 39\u00a0minutes ago \nDescription : New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI protocol. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T23:00:41.000000Z"}, {"uuid": "d1be7472-4a4f-4005-9584-70ad075de385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47068", "type": "seen", "source": "https://t.me/cvedetector/6192", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47068 - Rollup DOM Clobbering Vulnerability (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-47068 \nPublished : Sept. 23, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Rollup is a module bundler for JavaScript. Versions prior to 3.29.5 and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from `import.meta` (e.g., `import.meta.url`) in `cjs`/`umd`/`iife` format. The DOM Clobbering gadget can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an `img` tag with an unsanitized `name` attribute) are present. Versions 3.29.5 and 4.22.4  contain a patch for the vulnerability. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T18:49:38.000000Z"}, {"uuid": "b545206e-a31c-4254-8f80-335c53750367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47066", "type": "seen", "source": "https://t.me/cvedetector/6191", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47066 - Lobe Chat SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-47066 \nPublished : Sept. 23, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and could be bypassed when attacker provides an external malicious URL which redirects to internal resources like a private network or loopback address. Version 1.19.13 contains an improved fix for the issue. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T18:49:37.000000Z"}, {"uuid": "6c3800f4-1c26-4888-9bc7-a14a1c0c2f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47219", "type": "seen", "source": "https://t.me/cvedetector/6147", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47219 - NebulaGraph Shell Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47219 \nPublished : Sept. 22, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-22T04:21:53.000000Z"}, {"uuid": "71cbeeb2-6980-4fed-abf4-7afd1aa4b5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47159", "type": "seen", "source": "https://t.me/cvedetector/6070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47159 - JetBrains YouTrack Workflow Restoration Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47159 \nPublished : Sept. 19, 2024, 6:15 p.m. | 47\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T21:10:37.000000Z"}, {"uuid": "de4bc748-7628-4ed6-9683-7ed767f34614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47227", "type": "seen", "source": "https://t.me/cvedetector/6173", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47227 - iRedAdmin Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47227 \nPublished : Sept. 23, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : iRedAdmin before 2.6 allows XSS, e.g., via order_name. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T07:07:03.000000Z"}, {"uuid": "808d6b52-a1a2-4704-8701-d71cc4c25e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47218", "type": "seen", "source": "https://t.me/cvedetector/6146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47218 - NebulaGraph Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47218 \nPublished : Sept. 22, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-22T04:21:52.000000Z"}, {"uuid": "ddd6c9b5-4d72-4677-874d-90013816f38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47221", "type": "seen", "source": "https://t.me/cvedetector/6144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47221 - Rapid SCADA CheckUser Empty Password Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-47221 \nPublished : Sept. 22, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-22T04:21:50.000000Z"}, {"uuid": "a498bcee-d095-46e7-8684-7ae72292ce26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47210", "type": "seen", "source": "https://t.me/cvedetector/6143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47210 - Gladys Assistant Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47210 \nPublished : Sept. 21, 2024, 11:15 p.m. | 24\u00a0minutes ago \nDescription : Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-22T01:50:47.000000Z"}, {"uuid": "64e906ff-365a-4534-a2b9-ec1e7a01253e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/6123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47062 - Navidrome SQL Injection and Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-47062 \nPublished : Sept. 20, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like `password=...` in the URL (ORM Leak). Furthermore, the names of the parameters are not properly escaped, leading to SQL Injections. Finally, the username is used in a `LIKE` statement, allowing people to log in with `%` instead of their username. When adding parameters to the URL, they are automatically included in an SQL `LIKE` statement (depending on the parameter's name). This allows attackers to potentially retrieve arbitrary information. For example, attackers can use the following request to test whether some encrypted passwords start with `AAA`. This results in an SQL query like `password LIKE 'AAA%'`, allowing attackers to slowly brute-force passwords. When adding parameters to the URL, they are automatically added to an SQL query. The names of the parameters are not properly escaped. This behavior can be used to inject arbitrary SQL code (SQL Injection). These vulnerabilities can be used to leak information and dump the contents of the database and have been addressed in release version 0.53.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T22:15:45.000000Z"}, {"uuid": "1dcce9b7-2ad7-4a0d-b4b7-b423ed564996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47061", "type": "seen", "source": "https://t.me/cvedetector/6122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47061 - Plate Cross-Site Scripting (XSS) and Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47061 \nPublished : Sept. 20, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : Plate is a javascript toolkit that makes it easier for you to develop with Slate, a popular framework for building text editors. One longstanding feature of Plate is the ability to add custom DOM attributes to any element or leaf using the `attributes` property. These attributes are passed to the node component using the `nodeProps` prop. It has come to our attention that this feature can be used for malicious purposes, including cross-site scripting (XSS) and information exposure (specifically, users' IP addresses and whether or not they have opened a malicious document). Note that the risk of information exposure via attributes is only relevant to applications in which web requests to arbitrary URLs are not ordinarily allowed. Plate editors that allow users to embed images from arbitrary URLs, for example, already carry the risk of leaking users' IP addresses to third parties. All Plate editors using an affected version of @udecode/plate-core are vulnerable to these information exposure attacks via the style attribute and other attributes that can cause web requests to be sent. In addition, whether or not a Plate editor is vulnerable to cross-site scripting attacks using attributes depends on a number of factors. The most likely DOM attributes to be vulnerable are href and src on links and iframes respectively. Any component that spreads {...nodeProps} onto an or element and does not later override href or src will be vulnerable to XSS. In patched versions of Plate, we have disabled element.attributes and leaf.attributes for most attribute names by default, with some exceptions including target, alt, width, height, colspan and rowspan on the link, image, video, table cell and table header cell plugins. If this is a breaking change for you, you can selectively re-enable attributes for certain plugins as follows. Please carefully research and assess the security implications of any attribute you allow, as even seemingly innocuous attributes such as style can be used maliciously. If you are unable to upgrade to any of the patched versions, you should use a tool like patch-package or yarn patch to remove the logic from @udecode/plate-core that adds attributes to nodeProps. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T22:15:44.000000Z"}, {"uuid": "b5e0464b-4a08-4530-9d05-edac9b476c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47226", "type": "seen", "source": "https://t.me/cvedetector/6150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47226 - NetBox Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47226 \nPublished : Sept. 22, 2024, 2:15 a.m. | 40\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the \"Configuration History\" feature of the \"Admin\" panel via a /core/config-revisions/ Add action. An authenticated user can inject arbitrary JavaScript or HTML into the \"Top banner\" field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-22T05:12:02.000000Z"}, {"uuid": "32137860-9ce3-4800-8c64-bb153362a3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47000", "type": "seen", "source": "https://t.me/cvedetector/6092", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47000 - \"Zitadel Service Account Authorization Incident\"\", \n  \"Content\": \"CVE ID : CVE-2024-47000 \nPublished : Sept. 20, 2024, 12:15 a.m. | 41\u00a0minutes ago \nDescription : Zitadel is an open source identity management platform. ZITADEL's user account deactivation mechanism did not work correctly with service accounts. Deactivated service accounts retained the ability to request tokens, which could lead to unauthorized access to applications and resources. Versions 2.62.1, 2.61.1, 2.60.2, 2.59.3, 2.58.5, 2.57.5, 2.56.6, 2.55.8, and 2.54.10 have been released which address this issue. Users are advised t upgrade. Users unable to upgrade may instead of deactivating the service account, consider creating new credentials and replacing the old ones wherever they are used. This effectively prevents the deactivated service account from being utilized. Be sure to revoke all existing authentication keys associated with the service account and to rotate the service account's password. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T03:01:57.000000Z"}, {"uuid": "c1e891c0-f43d-4bf3-b48e-88fb4f134f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47060", "type": "seen", "source": "https://t.me/cvedetector/6090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47060 - Zitadel Unauthorized Access to Deactivated Projects\", \n  \"Content\": \"CVE ID : CVE-2024-47060 \nPublished : Sept. 20, 2024, 12:15 a.m. | 41\u00a0minutes ago \nDescription : Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other organizations can still log in and access through these applications, leading to unauthorized access. Additionally, if a project was deactivated access to applications was also still possible. The issue stems from the fact that when an organization is deactivated in Zitadel, the applications associated with it do not automatically deactivate. The application lifecycle is not tightly coupled with the organization's lifecycle, leading to a situation where the organization or project is marked as inactive, but its resources remain accessible. This vulnerability allows for unauthorized access to projects and their resources, which should have been restricted post-organization deactivation. Versions 2.62.1, 2.61.1, 2.60.2, 2.59.3, 2.58.5, 2.57.5, 2.56.6, 2.55.8, and 2.54.10 have been released which address this issue. Users are advised to upgrade. Users unable to upgrade may explicitly disable the application to make sure the client is not allowed anymore. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T03:01:56.000000Z"}, {"uuid": "e0f87dc2-ed02-4894-9c44-1b105c3d7252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47089", "type": "seen", "source": "https://t.me/cvedetector/6046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47089 - Apex Softcell LD Geo Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47089 \nPublished : Sept. 19, 2024, 7:15 a.m. | 41\u00a0minutes ago \nDescription : This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and modification of transactions belonging to other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T10:18:22.000000Z"}, {"uuid": "bb795c6c-bd15-45c1-92b2-7fa2318a5ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47059", "type": "seen", "source": "https://t.me/cvedetector/6033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47059 - WordPress Username Enumeration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47059 \nPublished : Sept. 18, 2024, 10:15 p.m. | 39\u00a0minutes ago \nDescription : When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.  \n  \nHowever when an incorrect username is provided alongside with a weak password, the application responds with \u2019Invalid credentials\u2019 notification.  \n  \nThis difference could be used to perform username enumeration. \nSeverity: 0.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T01:07:04.000000Z"}, {"uuid": "4f837121-5d07-4150-afba-8b126189bbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47088", "type": "seen", "source": "https://t.me/cvedetector/6045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47088 - Apex Softcell LD Geo Brute Force Authentication Bypass vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47088 \nPublished : Sept. 19, 2024, 7:15 a.m. | 41\u00a0minutes ago \nDescription : This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T10:18:21.000000Z"}, {"uuid": "87e774f0-8e76-4c2e-90ca-17c24d0a2956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47087", "type": "seen", "source": "https://t.me/cvedetector/6044", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47087 - Apex Softcell LD Geo Information Disclosure RCE\", \n  \"Content\": \"CVE ID : CVE-2024-47087 \nPublished : Sept. 19, 2024, 7:15 a.m. | 41\u00a0minutes ago \nDescription : This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T10:18:20.000000Z"}, {"uuid": "6c99c20b-7524-43b4-85a8-2e3ccbcf0860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47085", "type": "seen", "source": "https://t.me/cvedetector/6043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47085 - Oracle LD DP Back Office Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47085 \nPublished : Sept. 19, 2024, 6:15 a.m. | 21\u00a0minutes ago \nDescription : This vulnerability exists in LD DP Back Office due to improper validation of certain parameters \u201ccCdslClicentcode\u201d and \u201ccLdClientCode\u201d in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T08:38:04.000000Z"}, {"uuid": "02aff69e-a249-4238-9a22-9e3e0bd51807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47086", "type": "seen", "source": "https://t.me/cvedetector/6042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47086 - Oracle NetSuite LD DP Back Office OTP Verification Bypass Remote Authentication Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47086 \nPublished : Sept. 19, 2024, 6:15 a.m. | 21\u00a0minutes ago \nDescription : This vulnerability exists in LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API response.    \n  \nSuccessful exploitation of this vulnerability could allow the attacker to bypass OTP verification for other user accounts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T08:38:03.000000Z"}, {"uuid": "31ef9513-2b2e-4200-95e8-32344e95fc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47058", "type": "seen", "source": "https://t.me/cvedetector/6031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47058 - Mautic Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47058 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:58.000000Z"}, {"uuid": "04fc9d6a-276e-4538-ba1b-213295daf871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47050", "type": "seen", "source": "https://t.me/cvedetector/6023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47050 - Mautic Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47050 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:49.000000Z"}, {"uuid": "1429ae95-961b-4213-8a56-e185c9059aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4781", "type": "seen", "source": "https://t.me/cvedetector/3343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4781 - Lenovo Printers Denial-of-Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-4781 \nPublished : Aug. 16, 2024, 3:15 p.m. | 34\u00a0minutes ago \nDescription : A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to crash printer communications until the system is rebooted. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T17:54:04.000000Z"}, {"uuid": "f20488b9-600b-4576-9d8b-85a5ea4014fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4782", "type": "seen", "source": "https://t.me/cvedetector/3342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4782 - Lenovo Printers Denial-of-Service Remote Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4782 \nPublished : Aug. 16, 2024, 3:15 p.m. | 34\u00a0minutes ago \nDescription : A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to disrupt the printer's functionality until a manual system reboot occurs. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T17:54:03.000000Z"}, {"uuid": "04d02b01-e2a7-4ffc-857d-c17914e01b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4763", "type": "seen", "source": "https://t.me/cvedetector/3341", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4763 - Lenovo Display Control Center and Accessories and Display Manager Kernel Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4763 \nPublished : Aug. 16, 2024, 3:15 p.m. | 34\u00a0minutes ago \nDescription : An insecure driver vulnerability was reported in\u00a0Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM)  \n  \n that could allow a local attacker to escalate privileges to kernel. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T17:54:02.000000Z"}, {"uuid": "5da96897-f7c2-4b5c-a4ee-f2c9a7dd3cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4785", "type": "seen", "source": "https://t.me/cvedetector/3572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4785 - Bluetooth Open Security Gap in LL_CONNECTION_UPDATE_IND Handler\", \n  \"Content\": \"CVE ID : CVE-2024-4785 \nPublished : Aug. 19, 2024, 10:15 p.m. | 36\u00a0minutes ago \nDescription : BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T01:14:09.000000Z"}, {"uuid": "096aca50-e9db-423a-a189-713ef612b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/CyberBulletin/1024", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:13:07.000000Z"}, {"uuid": "2b1c6f92-9897-4051-8880-c8ec1b39effb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4784", "type": "seen", "source": "https://t.me/cvedetector/2772", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4784 - GitLab Password Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-4784 \nPublished : Aug. 8, 2024, 10:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T13:03:14.000000Z"}, {"uuid": "fbcf4185-4c58-4456-b84b-80c11f1941a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "seen", "source": "https://t.me/HackingInsights/14181", "content": "\u200aCVE-2024-47062 (CVSS 9.4): Flaws Discovered in Navidrome Music Server Expose Sensitive Data\n\nhttps://securityonline.info/cve-2024-47062-cvss-9-4-flaws-discovered-in-navidrome-music-server-expose-sensitive-data/", "creation_timestamp": "2024-09-24T10:52:18.000000Z"}, {"uuid": "51b2d3a2-36fe-49c1-8d4c-071b6d3177de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4786", "type": "seen", "source": "https://t.me/cvedetector/1715", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4786 - Lenovo Tab K10 Denial of Sleep (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4786 \nPublished : July 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on. \nSeverity: 2.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-26T23:03:20.000000Z"}, {"uuid": "781a3ae6-9520-4762-8bfa-c265f2573ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4753", "type": "seen", "source": "https://t.me/cvedetector/709", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4753 - The WP Secure Maintenance WordPress plugin before\", \n  \"Content\": \"CVE ID : CVE-2024-4753 \nPublished : July 12, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The WP Secure Maintenance WordPress plugin before 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T09:23:18.000000Z"}, {"uuid": "4a67fad6-2086-4204-97cb-91608f93baa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4780", "type": "seen", "source": "https://t.me/cvedetector/915", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4780 - Elementor Addon Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4780 \nPublished : July 16, 2024, 7:15 a.m. | 17\u00a0minutes ago \nDescription : The Image Hover Effects \u2013 Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018eihe_link\u2019 parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T09:34:49.000000Z"}, {"uuid": "dc4ffb7d-3696-4b3d-ad8e-141bf72c4b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "Telegram/NTbxgqKuUgpPV1Ir1opBzZdvk7Z5ZqrAZVdknmWbdIE1jw", "content": "", "creation_timestamp": "2024-05-14T19:42:55.000000Z"}, {"uuid": "583d1f00-4603-42b2-a6e3-f4abd0edaad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/ton618cyber/1843", "content": "New scanner finds Linux, UNIX servers exposed to CUPS RCE attacks\n\nAn automated scanner has been released to help security professionals scan environments for devices vulnerable to the Common Unix Printing System (CUPS) RCE flaw tracked as CVE-2024-47176.\n\nBill Toulas | bleepingcomputer.com \u2022 Oct 8, 2024", "creation_timestamp": "2024-10-09T00:58:35.000000Z"}, {"uuid": "a092b566-c1ee-4a47-80e7-af082c77587a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1828", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T16:18:58.000000Z"}, {"uuid": "1837c955-b383-4e36-ba4e-63b5ce7ded35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/ton618cyber/1751", "content": "WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks\n\nLiteSpeed Cache plugin vulnerability (CVE-2024-47374) exposes WordPress sites to XSS attacks. Update to version 6.5.1 now.\n\nthehackernews.com \u2022 Oct 4, 2024", "creation_timestamp": "2024-10-08T15:45:00.000000Z"}, {"uuid": "f5990c39-2478-45c9-8a0d-59162eb13a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47823", "type": "seen", "source": "https://t.me/CyberBulletin/1145", "content": "\u26a1\ufe0fExploiting Livewire: CVE-2024-47823 Puts Laravel Apps at Risk.\n\n#CyberBulletin", "creation_timestamp": "2024-10-10T11:33:12.000000Z"}, {"uuid": "99070771-8bdc-401b-8a05-61cbb2ed4e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47849", "type": "seen", "source": "https://t.me/HackerArsenal/522", "content": "\u203c\ufe0f CVE-2024-47849 \u203c\ufe0f\n\nImproper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation Mediawiki  Cargo allows SQL Injection.This issue affects Mediawiki  Cargo from 3.6.X before 3.6.1.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"National Vulnerability Database\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity_CVEs", "creation_timestamp": "2024-10-05T11:40:16.000000Z"}, {"uuid": "e4bb15fb-2152-42fc-8236-00a0c9827e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47560", "type": "seen", "source": "https://t.me/HackerArsenal/516", "content": "\u203c\ufe0f CVE-2024-47560 \u203c\ufe0f\n\nRevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"National Vulnerability Database\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity_CVEs", "creation_timestamp": "2024-10-01T05:55:46.000000Z"}, {"uuid": "2115a1a1-d353-4392-96ff-040c14b40d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/Celestial_Pulse24/11374", "content": "\u200aNew Threat Group UNC5820 Targets FortiManager Zero-Day CVE-2024-47575 in Global Cyberattack\n\nhttps://securityonline.info/new-threat-group-unc5820-targets-fortimanager-zero-day-cve-2024-47575-in-global-cyberattack/", "creation_timestamp": "2024-11-02T16:56:31.000000Z"}, {"uuid": "9f4434af-64be-49e7-944a-f5419decb0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "Telegram/8vscstuB9t2zhKiGPLgRBoM0TyZl5YOM20NvbJThOJYPw9c", "content": "", "creation_timestamp": "2024-10-25T05:38:16.000000Z"}, {"uuid": "ef10ef03-a757-4924-833c-8f2e64778c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "Telegram/UO0pGmzJ9UHpxuZ6GitFvD5yVGMXsbbqw5KNvq7i51B8cw", "content": "", "creation_timestamp": "2024-10-04T13:50:21.000000Z"}, {"uuid": "00007167-46ff-480b-9d5c-7f1d50f950bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4705", "type": "seen", "source": "https://t.me/Kelvinseccommunity/567", "content": "\ud83d\udc68\u200d\ud83d\ude92\ud83d\udc68\u200d\ud83d\ude92  CVE-2024-4705 \ud83d\udd25\ud83d\udd25\nThe Testimonials Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonials shortcode in all versions up to, and including, 4.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page\n\nclass-testimonials-widget-premium.php\n\n@kelvinseccommunity", "creation_timestamp": "2024-07-23T23:56:08.000000Z"}, {"uuid": "61b9d8f2-ab55-40df-8ec3-ffc8b1148b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "Telegram/Pms_nek1HbiWX4t-ihC0qitpo32DRGKXQWKdfa9tZOEt9w", "content": "", "creation_timestamp": "2024-10-24T12:19:57.000000Z"}, {"uuid": "206ebd7a-cc87-4518-a81c-938363fef888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "Telegram/skEHCfJ_x5c-yP0mkJ7VZM_AJhkEuRmn3wUzz8p1zomZBA", "content": "", "creation_timestamp": "2024-10-07T18:07:34.000000Z"}, {"uuid": "eaca5a7d-07be-4820-87db-38478db4d1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/ViralCyber/7301", "content": "\ud83d\udd34\u0627\u062c\u0631\u0627\u06cc Exploit \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u06cc\u0631 Fortinet\n\u25c0\ufe0f\u0627\u062e\u06cc\u0631\u0627 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Zeroday \u062f\u0631 Fortinet \u0628\u0647 \u0646\u0627\u0645 FortiJump \u0648 \u0628\u0627 \u0634\u0645\u0627\u0631\u0647 CVE-2024-47575 \u06a9\u0634\u0641 \u0648 Patch \u0634\u062f\u0647 \u0627\u0633\u062a. \u062d\u0627\u0644\u0627 \u0645\u0634\u062e\u0635 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0645\u0627\u0647\u200c\u0647\u0627 \u0642\u0628\u0644 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 Patch\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n \u25c0\ufe0f\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0631 \u0631\u0648\u06cc FortiManager \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f \u0648 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc Fortinet \u062a\u062d\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f. \u0628\u0631 \u0627\u0633\u0627\u0633 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a Mandiant\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0698\u0648\u0626\u0646 2024 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0634\u062f\u0647 \u0648 \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631  \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0632\u06cc\u0627\u062f\u06cc \u062f\u0631 \u0635\u0646\u0627\u06cc\u0639 \u0645\u062e\u062a\u0644\u0641 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. Fortinet \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\u25c0\ufe0f\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\n\n\u2709\ufe0f @PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\u00a0 \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2024-10-25T06:18:33.000000Z"}, {"uuid": "a32c8bbd-50b2-464d-9e2d-21b42d37d6c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/1594", "content": "https://github.com/navidrome/navidrome/security/advisories/GHSA-58vj-cv5w-v4v6\n\ncve-2024-47062\n\n#github #poc", "creation_timestamp": "2024-09-25T23:21:09.000000Z"}, {"uuid": "86517b72-07f1-4e69-ba92-2561ff69b19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/2110", "content": "WatchTowr POCs:\nCVE-2024-8068 & CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 & CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n\n\ud83d\udd34 Share & Support Us \ud83d\udd34\n\u26a1\ufe0f Channel : @ZeroEthical_Course", "creation_timestamp": "2024-12-03T00:18:01.000000Z"}, {"uuid": "6a80b394-6bb2-4637-b98a-3850a956708b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ton618cyber/5297", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T16:18:57.000000Z"}, {"uuid": "eb51e6cf-4239-4bd1-ae59-b61af73281d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4721", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-27T19:48:09.000000Z"}, {"uuid": "e334b34f-e503-4c52-b3c6-24b140e298bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ton618cyber/5228", "content": "Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nUrgent patch advised for Apache Avro Java SDK flaw (CVE-2024-47561) that allows code execution.\n\nthehackernews.com \u2022 Oct 7, 2024", "creation_timestamp": "2024-10-08T15:44:59.000000Z"}, {"uuid": "4a2c9443-ff7e-41c7-9c4f-885173b411b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/ton618cyber/5212", "content": "WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks\n\nLiteSpeed Cache plugin vulnerability (CVE-2024-47374) exposes WordPress sites to XSS attacks. Update to version 6.5.1 now.\n\nthehackernews.com \u2022 Oct 4, 2024", "creation_timestamp": "2024-10-08T15:44:58.000000Z"}, {"uuid": "9726d4f6-8c36-48e7-8896-20ca6cf0aae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/6937", "content": "\ud83d\udea8CVE-2024-47062 PoC; SQL Injection Vulnerability in Navidrome\n\nhttps://github.com/saisathvik1/CVE-2024-47062", "creation_timestamp": "2024-11-13T16:59:08.000000Z"}, {"uuid": "5ea0a87b-e8fb-4177-997c-4129c3d52b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/Dragon_Sec/782", "content": "\u200aNew Threat Group UNC5820 Targets FortiManager Zero-Day CVE-2024-47575 in Global Cyberattack\n\nhttps://securityonline.info/new-threat-group-unc5820-targets-fortimanager-zero-day-cve-2024-47575-in-global-cyberattack/", "creation_timestamp": "2024-10-25T05:35:07.000000Z"}, {"uuid": "7fe15303-ec16-4534-9b60-3095e1e2e871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/2159", "content": "https://github.com/l0n3m4n/CVE-2024-47176\n\nUnauthenticated RCE on cups-browsed (exploit and nuclei template)\n#github #exploit", "creation_timestamp": "2024-10-03T19:26:01.000000Z"}, {"uuid": "fe3d0f6e-f56f-4a32-9967-17c4c8ddca6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/19177", "content": "https://github.com/l0n3m4n/CVE-2024-47176\n\nUnauthenticated RCE on cups-browsed (exploit and nuclei template)\n#github #exploit", "creation_timestamp": "2024-10-03T19:26:01.000000Z"}, {"uuid": "8a909fb2-d2b7-4e95-b620-a2af3ef85953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "Telegram/6E-aYcv70W0POUuZKvSJt8L2VrNvGeahBHOm1I5Q1gCmYg", "content": "", "creation_timestamp": "2024-10-25T05:35:07.000000Z"}, {"uuid": "068aa656-2d16-4ea9-8163-487c409a2c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/Dragon_Sec/6208", "content": "\u200aNew Threat Group UNC5820 Targets FortiManager Zero-Day CVE-2024-47575 in Global Cyberattack\n\nhttps://securityonline.info/new-threat-group-unc5820-targets-fortimanager-zero-day-cve-2024-47575-in-global-cyberattack/", "creation_timestamp": "2024-10-25T05:35:07.000000Z"}, {"uuid": "1eb75456-7a10-4432-9a22-90ae2f02b8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/2078", "content": "https://github.com/navidrome/navidrome/security/advisories/GHSA-58vj-cv5w-v4v6\n\ncve-2024-47062\n\n#github #poc", "creation_timestamp": "2024-09-25T16:36:33.000000Z"}, {"uuid": "e5b13613-59e4-4254-bd8d-b68441779780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/15215", "content": "\u200aCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution\n\nhttps://securityonline.info/cve-2024-47561-critical-flaw-in-apache-avro-java-sdk-allows-arbitrary-code-execution/", "creation_timestamp": "2024-10-05T17:00:36.000000Z"}, {"uuid": "c6591886-559c-428f-beae-35c97357a217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47186", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/14738", "content": "\u200aCritical XSS Flaw Discovered in Filament: CVE-2024-47186 Requires Urgent Update for Laravel Developers\n\nhttps://securityonline.info/critical-xss-flaw-discovered-in-filament-cve-2024-47186-requires-urgent-update-for-laravel-developers/", "creation_timestamp": "2024-09-30T18:09:40.000000Z"}, {"uuid": "73b49c63-d817-4d12-9731-d1ff3c51809e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4721", "type": "seen", "source": "Telegram/2Rpdyn2967QZev5za_ip2VN1zF-XLtWlGlF6ENAZ9r1h4uJ-", "content": "", "creation_timestamp": "2025-02-20T23:26:57.000000Z"}, {"uuid": "7a69ad42-75fc-4817-bca4-ed4137522c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/15425", "content": "\u200aResearcher Releases Open-Source Scanner for CVE-2024-47176 CUPS Vulnerability\n\nhttps://securityonline.info/researcher-releases-open-source-scanner-for-cve-2024-47176-cups-vulnerability/", "creation_timestamp": "2024-10-08T14:31:02.000000Z"}, {"uuid": "1ec46a99-7dab-49d0-82c2-835798a07f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47191", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/15380", "content": "\u200aCVE-2024-47191: Critical Flaw in OATH-Toolkit PAM Module Could Lead to Root Exploits\n\nhttps://securityonline.info/cve-2024-47191-critical-flaw-in-oath-toolkit-pam-module-could-lead-to-root-exploits/", "creation_timestamp": "2024-10-08T03:27:20.000000Z"}, {"uuid": "14c0a9b4-ffce-440b-bb29-0683dfe898df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "https://t.me/HackingInsights/407", "content": "\u200aCVE-2024-4761: Zero-Day Vulnerability Patched in Google Chrome\n\nhttps://securityonline.info/cve-2024-4761-zero-day-vulnerability-patched-in-google-chrome/", "creation_timestamp": "2024-05-14T14:35:15.000000Z"}, {"uuid": "0292a4f7-691b-4dc4-83cd-a5ca66df8fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4701", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/283", "content": "\u200aCVE-2024-4701 (CVSS 9.9): Major RCE Risk in Netflix\u2019s Genie Platform\n\nhttps://securityonline.info/cve-2024-4701-cvss-9-9-major-rce-risk-in-netflixs-genie-platform/", "creation_timestamp": "2024-05-11T07:32:05.000000Z"}, {"uuid": "03e39878-c5f7-456e-b740-6f4147cb5571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/HackingInsights/925", "content": "\u200aCVE-2024\u20134761: Exploiting Chrome\u2019s JavaScript Engine Highly Exploited (PoC presented)\n\nhttps://infosecwriteups.com/cve-2024-4761-exploiting-chromes-javascript-engine-highly-exploited-poc-presented-dcf9cab95c00?source=rss----7b722bfd1b8d---4", "creation_timestamp": "2024-05-25T15:54:36.000000Z"}, {"uuid": "ab227ce0-f82d-4ad7-9da8-aa9e11bf0a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "published-proof-of-concept", "source": "https://t.me/leaksmain/291", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T01:05:26.000000Z"}, {"uuid": "67b8b06f-6bc8-40e0-b848-12207a3dee77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47873", "type": "seen", "source": "Telegram/XbzNykNWGXm_6ZX2UF7ghboXRUl3-qKeYhpGWT2smNTQTNvH", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "6661ffbd-6849-4206-accb-287340ac75ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4717", "type": "seen", "source": "Telegram/UcwRDP0IUz25yMnztxJXtXjh5r90NuJDMjRbanAFM7szaice", "content": "", "creation_timestamp": "2025-02-19T22:21:30.000000Z"}, {"uuid": "28f22fa3-9982-4b0a-bdd3-7912058c605a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "Telegram/1zFCt1ZtDog8ueAvhl9tX8a2L5E2wtWLeoLU2w6kHI8ikD-c", "content": "", "creation_timestamp": "2025-02-20T23:26:54.000000Z"}, {"uuid": "b98ed44d-32dd-4e70-8435-938a688c9ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47266", "type": "seen", "source": "Telegram/G6QQMvUW2ZkBQaBDb738ormVGSjy6Ae2oyjdsi7vijMTgFbD", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "b4af0f4c-45db-4e9a-95e4-14c40f42b7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47265", "type": "seen", "source": "Telegram/mMB_Dqtm9jZpysZrmi48mPx7Cv2NPBeMqfLeHJnLaqaNjwRE", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "d04d1270-acd3-4715-8e94-c9db6f8cd596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47264", "type": "seen", "source": "Telegram/LiHuEx314vo-XC6PfSXgFhUxBgKczQ9Nm5BnwpQVS9rggf8n", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "a7c225f5-455b-425a-9bbe-1a45e430e04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "Telegram/iTNDwpLB0VtwMDCL0RLoBvP0alyYMwYnNHr0mKoNWYe0vIyH", "content": "", "creation_timestamp": "2025-01-01T23:15:18.000000Z"}, {"uuid": "904b6b0c-b21d-48e7-8cd4-d8a22b46547d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47978", "type": "seen", "source": "Telegram/ITUPsZdF1X8zylX4CyRh293pjki8XmCmlxSJSTHAIB1VIHoQ", "content": "", "creation_timestamp": "2025-01-30T02:17:48.000000Z"}, {"uuid": "d3918746-b2f9-472a-a7b4-12003f5cc0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47855", "type": "seen", "source": "Telegram/nvQbiI6jvgAeQ0STKKY3niAfrf5jfDMnyqUbjE3mAW196ZV_", "content": "", "creation_timestamp": "2025-01-01T20:29:49.000000Z"}, {"uuid": "35735b9e-68b3-4626-9d5f-f34066deade2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "seen", "source": "https://t.me/GarudaSecID/2606", "content": "CVE-2024-47062: SQL Injection dan Auth Bypass di Navidrome Music Server, rating 9.4 \ud83d\udd25\n\nPemberitahuan terbaru mengungkapkan beberapa kerentanan, yang secara teori memungkinkan penyerang untuk mendapatkan akses ke data sensitif.\n\nCari di Netlas.io: \n\ud83d\udc49 Link: https://nt.ls/N9Jj8 \n\ud83d\udc49 Dork: http.description:\"Navidrome Music Server\"\n\nPemberitahuan vendor: https://github.com/navidrome/navidrome/security/advisories/GHSA-58vj-cv5w-v4v6", "creation_timestamp": "2024-10-08T13:35:25.000000Z"}, {"uuid": "685684ea-0ca1-419e-a833-0dd027459e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/23093", "content": "The Hacker News\nCritical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nA critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the execution of arbitrary code on susceptible instances.\nThe flaw, tracked as CVE-2024-47561, impacts all versions of the software prior to 1.11.4.\n\"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute", "creation_timestamp": "2024-10-07T18:07:18.000000Z"}, {"uuid": "c395aae0-f680-48e2-8e00-9fb22c86c77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/22812", "content": "The Hacker News\nWordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks\n\nA new high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable malicious actors to execute arbitrary JavaScript code under certain conditions.\nThe flaw, tracked as CVE-2024-47374 (CVSS score: 7.2), has been described as a stored cross-site scripting (XSS) vulnerability impacting all versions of the plugin up to and including 6.5.0.2.\nIt was", "creation_timestamp": "2024-10-04T13:50:21.000000Z"}, {"uuid": "ca808ffc-0ce6-4ba2-896a-3313281f40c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/24574", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "creation_timestamp": "2024-10-25T18:03:03.000000Z"}, {"uuid": "38f8e2ed-c392-4097-8648-e1097e7475bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/7618", "content": "The Hacker News\nNew Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation\n\nGoogle on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild.\nThe high-severity vulnerability, tracked as CVE-2024-4761, is an out-of-bounds write bug impacting the V8 JavaScript and WebAssembly engine. It was reported anonymously on May 9, 2024.\nOut-of-bounds write bugs could be typically", "creation_timestamp": "2024-05-14T19:42:55.000000Z"}, {"uuid": "e443609a-b6c3-44be-a24e-0344680412dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "Telegram/qUeEv9EXn4Smr-Wk7sbCzvftf4pUV-9bCUev-oW02Ahw8g", "content": "", "creation_timestamp": "2024-05-14T19:29:02.000000Z"}, {"uuid": "deafc5d9-b7b5-478c-9e88-164f3dba9370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "Telegram/QnBU3JoZDhQZ6GLnBrg4qmP8J5cNU_6rnWFgx3NPObdpRw", "content": "", "creation_timestamp": "2024-10-24T12:58:13.000000Z"}, {"uuid": "8a02a405-6299-4e8f-888a-d8c2c3213d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "Telegram/zp8r53NJoxwfBnrDzdTztdyv8dFmq3tajQhyEKGUQ6QbbQ", "content": "", "creation_timestamp": "2024-10-04T14:48:46.000000Z"}, {"uuid": "cf325690-8447-4aff-a6eb-9a9009b4c548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/wf6_1JKBCzuNNq3dQU6jatGAoF0f6DzPux9cbboZAdBa3Ds", "content": "", "creation_timestamp": "2024-10-09T00:48:15.000000Z"}, {"uuid": "e5d022c1-a35d-4359-83ea-022e91006973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "Telegram/wf6_1JKBCzuNNq3dQU6jatGAoF0f6DzPux9cbboZAdBa3Ds", "content": "", "creation_timestamp": "2024-10-09T00:48:15.000000Z"}, {"uuid": "82f8f1d0-9a04-4c53-84bc-b82b5b3810d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "Telegram/wf6_1JKBCzuNNq3dQU6jatGAoF0f6DzPux9cbboZAdBa3Ds", "content": "", "creation_timestamp": "2024-10-09T00:48:15.000000Z"}, {"uuid": "2561c5f2-3be0-4572-a316-d68c3ee17aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/ZeroDay_ru/370", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T13:23:51.000000Z"}, {"uuid": "ef07c574-1c48-4743-a6ab-1844c74d4906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/dc_main/7090", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T17:36:48.000000Z"}, {"uuid": "585da06d-de2d-46e9-b608-fa65c72db30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/dc_main/7090", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T17:36:48.000000Z"}, {"uuid": "f1af4617-4683-4fe8-8046-9d88548a0ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/dc_main/7090", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T17:36:48.000000Z"}, {"uuid": "19e578ed-44f2-48c3-92f5-6f06205be7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/dc_main/7090", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T17:36:48.000000Z"}, {"uuid": "8a386509-78bc-4113-bd3b-f5d7061c802c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/nodejsleaks/1031", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T01:05:19.000000Z"}, {"uuid": "1a9df7eb-4f5d-4181-ab47-da231334f78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/CyberDilara/1203", "content": "\u26a1\ufe0fUnpatched Epson Devices at Risk: CVE-2024-47295 Allows Easy Hijacking.\n\n#CyberBulletin", "creation_timestamp": "2024-11-11T14:50:21.000000Z"}, {"uuid": "cdecbcd3-e2df-4d58-81aa-c076dc120300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "Telegram/wf6_1JKBCzuNNq3dQU6jatGAoF0f6DzPux9cbboZAdBa3Ds", "content": "", "creation_timestamp": "2024-10-09T00:48:15.000000Z"}, {"uuid": "bad6e1b2-237f-4536-88f6-bfc14cec2c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/lcmysecteamch/10473", "content": "Fortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\n\nPOC for CVSS 9.8 vulnerability in FortiManager, their tool for central management of FortiGate appliances.\n\nBlog: https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n#1N73LL1G3NC3 #fortinet\n\n@freedomf0x", "creation_timestamp": "2024-11-15T03:55:46.000000Z"}, {"uuid": "1dc73b14-87af-44e9-bc6a-c0ad279684af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "Telegram/gDFVoHUuB6H--lSlEA0FwxdrgJcGZ12Usz4zXGcpZiimTGk", "content": "", "creation_timestamp": "2024-10-10T18:12:19.000000Z"}, {"uuid": "38f5e971-a146-4f12-ac7b-18e026086e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/5421", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "creation_timestamp": "2024-10-25T18:03:03.000000Z"}, {"uuid": "de54b03a-0d01-44c9-a583-70f7e7639c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/5003", "content": "The Hacker News\nCritical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nA critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the execution of arbitrary code on susceptible instances.\nThe flaw, tracked as CVE-2024-47561, impacts all versions of the software prior to 1.11.4.\n\"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute", "creation_timestamp": "2024-10-07T18:07:18.000000Z"}, {"uuid": "7314d6ee-347f-4712-9ade-d5d5de57bd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/4899", "content": "The Hacker News\nWordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks\n\nA new high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable malicious actors to execute arbitrary JavaScript code under certain conditions.\nThe flaw, tracked as CVE-2024-47374 (CVSS score: 7.2), has been described as a stored cross-site scripting (XSS) vulnerability impacting all versions of the plugin up to and including 6.5.0.2.\nIt was", "creation_timestamp": "2024-10-04T13:50:21.000000Z"}, {"uuid": "bd6b0a36-ac2f-43a7-86d7-f2ea9c6ca991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/1423", "content": "The Hacker News\nNew Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation\n\nGoogle on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild.\nThe high-severity vulnerability, tracked as CVE-2024-4761, is an out-of-bounds write bug impacting the V8 JavaScript and WebAssembly engine. It was reported anonymously on May 9, 2024.\nOut-of-bounds write bugs could be typically", "creation_timestamp": "2024-05-14T19:42:55.000000Z"}, {"uuid": "61b1c4dd-77a5-42fa-8d83-dae80ca257cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/KomunitiSiber/2676", "content": "WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks\nhttps://thehackernews.com/2024/10/wordpress-litespeed-cache-plugin.html\n\nA new high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable malicious actors to execute arbitrary JavaScript code under certain conditions.\nThe flaw, tracked as CVE-2024-47374 (CVSS score: 7.2), has been described as a stored cross-site scripting (XSS) vulnerability impacting all versions of the plugin up to and including 6.5.0.2.\nIt was", "creation_timestamp": "2024-10-04T19:56:12.000000Z"}, {"uuid": "d78094da-bd5c-41c1-9d48-d9f134e16143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/KomunitiSiber/1938", "content": "New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation\nhttps://thehackernews.com/2024/05/new-chrome-zero-day-vulnerability-cve.html\n\nGoogle on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild.\nThe high-severity vulnerability,\u00a0tracked as\u00a0CVE-2024-4761, is an out-of-bounds write bug impacting the V8 JavaScript and WebAssembly engine. It was reported anonymously on May 9, 2024.\nOut-of-bounds write bugs\u00a0could be typically", "creation_timestamp": "2024-05-14T16:34:49.000000Z"}, {"uuid": "826fe46e-3fe3-46a8-ba40-c9c72cdd5d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/KomunitiSiber/2762", "content": "Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation\nhttps://thehackernews.com/2024/10/fortinet-warns-of-critical.html\n\nFortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild.\nTracked as CVE-2024-47575 (CVSS score: 9.8), the vulnerability is also known as FortiJump and is rooted in the FortiGate to FortiManager (FGFM) protocol.\n\"A missing authentication for critical function vulnerability [CWE-306] in FortiManager fgfmd daemon may", "creation_timestamp": "2024-10-24T16:09:06.000000Z"}, {"uuid": "e4a5b69a-0231-465e-8794-f487eeea29d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47051", "type": "published-proof-of-concept", "source": "Telegram/jbRQaSaN2N0kXwljQYCoonpQHmzDHlddlNPLUgvahHArL2U", "content": "", "creation_timestamp": "2025-02-28T10:00:07.000000Z"}, {"uuid": "d2551ae0-8d84-4211-9972-5adad06229a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/GrayHatsHack/9001", "content": "\u26a1\ufe0fUnpatched Epson Devices at Risk: CVE-2024-47295 Allows Easy Hijacking.\n\n#CyberBulletin", "creation_timestamp": "2024-11-11T14:50:14.000000Z"}, {"uuid": "04ca752b-341d-4d8b-bc76-8629cc2a182a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "Telegram/Es_Pey5_2fMp3ynmZK51TgimDa6ZnHLvfTHJHRYaFCR1gd4", "content": "", "creation_timestamp": "2024-11-14T19:59:28.000000Z"}, {"uuid": "e4a55c8b-6dec-4ba5-afdb-11055ef2fefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/InfoSecInsider/24376", "content": "\u26a1\ufe0fUnpatched Epson Devices at Risk: CVE-2024-47295 Allows Easy Hijacking.\n\n#CyberBulletin", "creation_timestamp": "2024-11-11T14:50:26.000000Z"}, {"uuid": "f41d2ee5-0404-469a-9546-6619347bb8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47901", "type": "seen", "source": "https://t.me/InfoSecInsider/24188", "content": "\u26a1\ufe0fCVE-2024-47901 (CVSS 10): Critical Security Flaw in Siemens InterMesh.\n\n#CyberBulletin", "creation_timestamp": "2024-10-25T08:55:42.000000Z"}, {"uuid": "e73a5253-9cd4-4466-864f-ab004c4859b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/eaglecyberwashere/55280", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "creation_timestamp": "2024-10-25T18:03:03.000000Z"}, {"uuid": "304c0e18-829d-448b-ab05-a5f91b78da69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/InfoSecInsider/23996", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:16:16.000000Z"}, {"uuid": "bda72412-6ff7-470a-af11-101025ed3062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "Telegram/hXBVtq_vQALtVQeIFAgKK-S2hj8k3D51My4YiCPF4vPfe-M", "content": "", "creation_timestamp": "2024-05-14T22:53:21.000000Z"}, {"uuid": "fe9eb681-8b01-4d1c-94a1-e37de89891b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "Telegram/wKdQIZoD5aOmKQIcpr-QL0r4Cl4z79Rj-ZWseRtqenGXCPE", "content": "", "creation_timestamp": "2024-05-14T22:34:05.000000Z"}, {"uuid": "d1d93483-ef0e-46f1-9d0b-8b2f43039fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/Leak_DBMS/1524", "content": "WatchTowr POCs:\nCVE-2024-8068 & CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 & CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n@APTIRAN", "creation_timestamp": "2024-11-29T13:06:54.000000Z"}, {"uuid": "3d69d117-b8c4-4e1b-801f-37b4b3659a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/eaglecyberwashere/3337", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "creation_timestamp": "2024-10-25T18:03:03.000000Z"}, {"uuid": "e135182c-455a-4b2b-bdce-da335117e67e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2377", "content": "CVE-2024-47575 FortiManager\n*\n\u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u0443\u0448\u0435\u043b push, \u0434\u0430 \u0435\u0449\u0435 \u0438 \u0437\u0430\u0430\u043f\u0440\u0443\u0432\u0438\u043b\u0438 \u0432 metasploit-framework\n\u041d\u043e \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043c\u043e\u0434\u0443\u043b\u044c \u0435\u0441\u0442\u044c, \u0436\u043c\u0438 msfupdate ))\n*\nPull Req\n\n#fortinet #metasploit", "creation_timestamp": "2024-11-15T19:54:45.000000Z"}, {"uuid": "4aac8cbb-ec7e-475d-b9de-6d733e643361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/lcmysecteamch/10156", "content": "Fortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\n\nPOC for CVSS 9.8 vulnerability in FortiManager, their tool for central management of FortiGate appliances.\n\nBlog: https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n#1N73LL1G3NC3 #fortinet\n\n@freedomf0x", "creation_timestamp": "2024-11-15T03:55:46.000000Z"}, {"uuid": "9785c713-afc2-416e-93f4-ecda16e76c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "Telegram/VuiRXiEWFzZct4MNyxcJW4C5KbCrb2HPcaeAS5B4lkfKiZ4", "content": "", "creation_timestamp": "2024-05-15T04:55:44.000000Z"}, {"uuid": "720c5f7a-fc7b-46b9-93f9-2025881c767b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/GrayHatsHack/7624", "content": "\u26a1\ufe0fUnpatched Epson Devices at Risk: CVE-2024-47295 Allows Easy Hijacking.\n\n#CyberBulletin", "creation_timestamp": "2024-11-11T14:50:14.000000Z"}, {"uuid": "c7bf465b-c35e-44c1-bd4e-d6869e2a3ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/zer0day1ab/292", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T11:44:31.000000Z"}, {"uuid": "b69de4d0-310e-4131-a5ec-5fd6c009c497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/zer0day1ab/292", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T11:44:31.000000Z"}, {"uuid": "2f7766ad-124a-41ac-afef-04969afb19ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/zer0day1ab/292", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T11:44:31.000000Z"}, {"uuid": "d20b7ac9-7a7a-40f0-bbb1-4a1b1dd28186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/zer0day1ab/292", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-10-08T11:44:31.000000Z"}, {"uuid": "00557102-7b85-4e21-a729-e530fdd60323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/cybersecs/3089", "content": "You already know about CVE-2024-47575, right? RIGHT?\n\n[ FortiManager Zero-Day (CVE-2024-47575) ]\n\nFortiManager fgfmd daemon may allow a remote unauthenticated attacker to  execute arbitrary code or commands via specially crafted requests (critical) / aka FortiJump.\n\nFrom Vendor: https://www.fortiguard.com/psirt/FG-IR-24-423\n\nFrom Mandiant: https://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575", "creation_timestamp": "2024-10-24T20:29:20.000000Z"}, {"uuid": "7cc517e2-2db9-44b8-b26c-d2d1e7532228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/cybersecs/3322", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "creation_timestamp": "2024-11-28T18:35:25.000000Z"}, {"uuid": "bea766c9-08ca-44dc-ab0f-773afddc8b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4784", "type": "seen", "source": "https://t.me/MrVGunz/1259", "content": "\ud83d\udccd\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc #GitLab\n\n\u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u062e\u06cc\u0631 \u0646\u0634\u0627\u0646 \u0627\u0632 \u0648\u062c\u0648\u062f \u0686\u0646\u062f\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc GitLab \u062f\u0627\u0631\u062f. #\u0645\u0647\u0627\u062c\u0645\u0627\u0646_\u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0636\u0639\u0641\u200c\u0647\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0634\u0645\u0627 \u0646\u0641\u0648\u0630 \u06a9\u0646\u0646\u062f. \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0642\u0627\u062f\u0631 \u062e\u0648\u0627\u0647\u0646\u062f \u0628\u0648\u062f \u062a\u0627 \u0628\u0647 #\u0627\u0637\u0644\u0627\u0639\u0627\u062a_\u062d\u0633\u0627\u0633 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f\u060c \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f \u0648 \u06cc\u0627 \u062d\u062a\u06cc \u062e\u062f\u0645\u0627\u062a \u0634\u0645\u0627 \u0631\u0627 \u0645\u062e\u062a\u0644 \u06a9\u0646\u0646\u062f.\n\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631:\n- \u0646\u0633\u062e\u0647 GitLab #Community_Edition\n- \u0646\u0633\u062e\u0647 GitLab #Enterprise_Edition \n- \u0648 \u062a\u0645\u0627\u0645\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 17.2.2\u060c 17.1.4 \u0648 17.0.6\n\n\u062e\u0637\u0631\u0627\u062a \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:\n- #\u0627\u0631\u062a\u0642\u0627\u0621_\u0633\u0637\u062d_\u062f\u0633\u062a\u0631\u0633\u06cc: \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627\u062a\u0631\u06cc \u0627\u0631\u062a\u0642\u0627 \u06cc\u0627\u0641\u062a\u0647 \u0648 \u0628\u0647 \u0628\u062e\u0634\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n- #\u062f\u0648\u0631_\u0632\u062f\u0646_\u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc_\u0627\u0645\u0646\u06cc\u062a\u06cc: \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0630\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n- #\u062d\u0645\u0644\u0647_XSS: \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627 \u062a\u0632\u0631\u06cc\u0642 \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u060c \u0639\u0645\u0644\u06a9\u0631\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0645\u062e\u062a\u0644 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n- #\u062d\u0645\u0644\u0647_DoS: \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627 \u0627\u06cc\u062c\u0627\u062f \u0628\u0627\u0631 \u06a9\u0627\u0631\u06cc \u0632\u06cc\u0627\u062f\u060c \u062e\u062f\u0645\u0627\u062a \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0645\u062e\u062a\u0644 \u06a9\u0631\u062f\u0647 \u0648 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0642\u0631\u0627\u0631 \u0646\u062f\u0647\u0646\u062f.\n- #\u0627\u0641\u0634\u0627\u06cc_\u0627\u0637\u0644\u0627\u0639\u0627\u062a_\u062d\u0633\u0627\u0633: \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633\u06cc \u0645\u0627\u0646\u0646\u062f \u06af\u0630\u0631\u0648\u0627\u0698\u0647\u200c\u0647\u0627\u060c \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u062c\u0627\u0631\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0636\u0631\u0648\u0631\u06cc:\n\u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0648 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0647\u0631\u06af\u0648\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647\u060c \u0628\u0647 \u0634\u062f\u062a \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0646\u0633\u062e\u0647 GitLab \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646 17.2.2\u060c 17.1.4 \u06cc\u0627 17.0.6 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u06cc\u062f. \u0628\u0631\u0627\u06cc \u06a9\u0633\u0628 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u0648 \u062f\u0631\u06cc\u0627\u0641\u062a \u0631\u0627\u0647\u0646\u0645\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0641\u0646\u06cc\u060c \u0628\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0631\u0633\u0645\u06cc GitLab \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f.\n\n\u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc #CVE:\nCVE-2024-2800\u060c CVE-2024-3035\u060c CVE-2024-3114\u060c CVE-2024-3958\u060c CVE-2024-4207\u060c CVE-2024-4210\u060c CVE-2024-4784\u060c CVE-2024-5423\u060c CVE-2024-6329\u060c CVE-2024-6356 \u0648 CVE-2024-7586\n\n\u0647\u0634\u062f\u0627\u0631: \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0647\u0645\u06cc\u062a \u0628\u0627\u0644\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c \u0628\u0647 \u0633\u0631\u0639\u062a \u0627\u0642\u062f\u0627\u0645 \u0628\u0647 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645 \u062e\u0648\u062f \u06a9\u0646\u06cc\u062f.\n\n\ud83d\udd17 \u062c\u0647\u062a \u0645\u0637\u0627\u0644\u0639\u0647 \u0627\u062f\u0627\u0645\u0647 \u0645\u0642\u0627\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0633\u0627\u06cc\u062a \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f:\n\n\ud83c\udf10 https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20240812\n\n\ud83d\udccd Critical Vulnerabilities in Older Versions of #GitLab\n\nRecent security reports have identified several serious vulnerabilities in older versions of GitLab. #Cyber_Attackers can exploit these weaknesses to infiltrate your systems. By leveraging these vulnerabilities, attackers could gain access to #Sensitive_Information, take control of your system, or even disrupt your services.\n\nAffected Versions:\n- GitLab #Community_Edition\n- GitLab #Enterprise_Edition\n- All versions prior to 17.2.2, 17.1.4, and 17.0.6\n\nPotential Risks:\n- #Privilege_Escalation: Attackers could elevate their access level and gain entry to sensitive parts of the system.\n- #Security_Bypass: Attackers may circumvent security mechanisms and access confidential information.\n- #XSS_Attacks: Malicious code injection could disrupt software functionality and compromise user data.\n- #DoS_Attacks: Attackers might overload the system, making it unavailable to users.\n- #Sensitive_Data_Exposure: Attackers could access sensitive data such as passwords, user information, and business data.\n\nNecessary Actions:\nTo address these vulnerabilities and prevent exploitation, it is strongly recommended to update your GitLab version to one of the secure versions: 17.2.2, 17.1.4, or 17.0.6. For more information and technical guidance, visit the official GitLab website.\n\nCVE Identifiers:\nCVE-2024-2800, CVE-2024-3035, CVE-2024-3114, CVE-2024-3958, CVE-2024-4207, CVE-2024-4210, CVE-2024-4784, CVE-2024-5423, CVE-2024-6329, CVE-2024-6356, and CVE-2024-7586\n\nWarning: Due to the critical nature of these vulnerabilities, update your system immediately.\n\n\ud83d\udd17 Read the full article here:\n\n\ud83c\udf10 https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20240812", "creation_timestamp": "2024-08-20T04:31:33.000000Z"}, {"uuid": "bd56c9e5-9c27-4c29-935f-1fb843ce52ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "Telegram/N1DtHFsyDu8hfvxEilITvr_MpXXai-04yAKGKsC4ri00ulA", "content": "", "creation_timestamp": "2024-09-27T17:08:06.000000Z"}, {"uuid": "5d7f058c-0c29-4042-8bc3-f7714a686ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "Telegram/N1DtHFsyDu8hfvxEilITvr_MpXXai-04yAKGKsC4ri00ulA", "content": "", "creation_timestamp": "2024-09-27T17:08:06.000000Z"}, {"uuid": "7e1902cc-1101-472e-bcf2-ef3103ba4f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "Telegram/N1DtHFsyDu8hfvxEilITvr_MpXXai-04yAKGKsC4ri00ulA", "content": "", "creation_timestamp": "2024-09-27T17:08:06.000000Z"}, {"uuid": "9dfc7e14-c2da-4e39-b6d9-c7bb50ad0dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "Telegram/N1DtHFsyDu8hfvxEilITvr_MpXXai-04yAKGKsC4ri00ulA", "content": "", "creation_timestamp": "2024-09-27T17:08:06.000000Z"}, {"uuid": "a63dcde7-c8fe-4564-a6c2-8a17f0f1edba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/CyberSecurityIL/59763", "content": "\u05d7\u05d5\u05dc\u05e9\u05d4 Zero Day \u05d7\u05d3\u05e9\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8 \u05e9\u05dc Fortinet \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05de\u05d6\u05d4 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05d3\u05e9\u05d9\u05dd \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 - CVE-2024-47575 \u05d4\u05de\u05db\u05d5\u05e0\u05d4 FortiJump, \u05e7\u05d9\u05d9\u05de\u05ea \u05d1\u05e8\u05db\u05d9\u05d1 Fortinet Forti Manager \u05d5\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05de\u05d0\u05d6 \u05d9\u05d5\u05e0\u05d9 \u05d4\u05e9\u05e0\u05d4.\n\n\u05d7\u05d1\u05e8\u05ea Mandiant \u05d3\u05d9\u05d5\u05d5\u05d7\u05d4 \u05d1\u05d4\u05e8\u05d7\u05d1\u05d4 \u05e2\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05db\u05e9\u05d1\u05de\u05e7\u05d1\u05d9\u05dc \u05d2\u05dd \u05d7\u05d1\u05e8\u05ea Fortinet \u05e4\u05d9\u05e8\u05e1\u05de\u05d4 \u05d4\u05d5\u05d3\u05e2\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0.\n\nhttps://t.me/CyberSecurityIL/5935\n\n#\u05d7\u05d5\u05dc\u05e9\u05d4", "creation_timestamp": "2024-10-24T20:36:36.000000Z"}, {"uuid": "35d50781-8280-4586-ad06-c3562bff5bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/CyberSecurityIL/45051", "content": "\u05d7\u05d5\u05dc\u05e9\u05ea Zero-Day \u05e9\u05d9\u05e9\u05d9\u05ea \u05de\u05ea\u05d7\u05d9\u05dc\u05ea \u05d4\u05e9\u05e0\u05d4 - \u05d2\u05d5\u05d2\u05dc \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05dc\u05db\u05e8\u05d5\u05dd \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e8\u05de\u05ea \u05e1\u05d9\u05db\u05d5\u05df \u05d2\u05d1\u05d5\u05d4\u05d4 \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\"\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2024-4761 \u05ea\u05d5\u05e7\u05e0\u05d4 \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05d1\u05d0\u05d5\u05ea:\n\n- 124.0.6367.207/.208 for Mac and Windows\n- 124.0.6367.207 for Linux\n\nhttps://t.me/CyberSecurityIL/5137\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2024-05-14T14:15:15.000000Z"}, {"uuid": "d987995c-f5a9-4092-8346-317f52978566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/true_secator/6288", "content": "Patchstack \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WordPress LiteSpeed, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0441\u0430\u0439\u0442\u044b XSS-\u0430\u0442\u0430\u043a\u0430\u043c.\n\nCVE-2024-47374\u00a0\u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 7,2 \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 6.5.0.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 JavaScript \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 25 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c 6.5.1 \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Patchstack Alliance TaiYou.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0430 \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 - \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 WordPress, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043e\u0434\u0438\u043d HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-LSCACHE-VARY-VALUE \u0431\u0435\u0437 \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u043a\u0440\u0438\u043f\u0442\u044b.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b CSS Combine \u0438 Generate UCSS.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e LiteSpeed Cache \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0448\u0435\u0441\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u0435\u0441\u044c\u043c\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a. \n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-10-07T12:00:06.000000Z"}, {"uuid": "7ea9f1db-e976-4bdd-bdc8-5c77ccd29ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6260", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0432 \u043d\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c UNIX \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-47176, CVE-2024-47076, CVE-2024-47175 \u0438 CVE-2024-47177.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 CUPS, \u043e\u0431\u0449\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 UNIX, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c UNIX \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0447\u0430\u0441\u0442\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 CUPS \u0436\u0435\u0440\u0442\u0432\u044b, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0430\u0439\u043b\u0430 PPD \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 PPD, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445 Akamai, Rapid7, Elastic, Tenable, Qualys, DataDog \u0438 AquaSec, \u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 X \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041d\u043e \u043d\u0435 \u0442\u0430\u043a \u0432\u0441\u0435 \u043f\u043b\u043e\u0445\u043e, \u0432\u0435\u0434\u044c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u0435 \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux (\u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435), \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u043b\u0438\u0448\u044c \u0432 \u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u0442\u0430\u043a \u0447\u0442\u043e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 (CVSS 9,9), \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u0430\u0432\u044b\u0448\u0435\u043d\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043c\u0438\u043c\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC, \u0447\u0442\u043e \u0438 \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 UDP-\u043f\u043e\u0440\u0442\u0430 631, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440 CUPS \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b, \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0449\u0438\u0435 \u043e \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e CUPS \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0441\u0438\u0441\u0442\u0435\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c CUPS, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 107\u00a0000, \u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0421\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0435. \u041f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS. \n\n\u041d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0431\u0435\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c.", "creation_timestamp": "2024-09-30T13:11:39.000000Z"}, {"uuid": "91692a0a-ec8d-4acc-acc9-9def415753fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6260", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0432 \u043d\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c UNIX \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-47176, CVE-2024-47076, CVE-2024-47175 \u0438 CVE-2024-47177.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 CUPS, \u043e\u0431\u0449\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 UNIX, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c UNIX \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0447\u0430\u0441\u0442\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 CUPS \u0436\u0435\u0440\u0442\u0432\u044b, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0430\u0439\u043b\u0430 PPD \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 PPD, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445 Akamai, Rapid7, Elastic, Tenable, Qualys, DataDog \u0438 AquaSec, \u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 X \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041d\u043e \u043d\u0435 \u0442\u0430\u043a \u0432\u0441\u0435 \u043f\u043b\u043e\u0445\u043e, \u0432\u0435\u0434\u044c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u0435 \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux (\u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435), \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u043b\u0438\u0448\u044c \u0432 \u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u0442\u0430\u043a \u0447\u0442\u043e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 (CVSS 9,9), \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u0430\u0432\u044b\u0448\u0435\u043d\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043c\u0438\u043c\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC, \u0447\u0442\u043e \u0438 \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 UDP-\u043f\u043e\u0440\u0442\u0430 631, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440 CUPS \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b, \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0449\u0438\u0435 \u043e \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e CUPS \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0441\u0438\u0441\u0442\u0435\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c CUPS, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 107\u00a0000, \u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0421\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0435. \u041f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS. \n\n\u041d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0431\u0435\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c.", "creation_timestamp": "2024-09-30T13:11:39.000000Z"}, {"uuid": "7e4b610b-eb62-457d-9e8a-7a951867f61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6260", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0432 \u043d\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c UNIX \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-47176, CVE-2024-47076, CVE-2024-47175 \u0438 CVE-2024-47177.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 CUPS, \u043e\u0431\u0449\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 UNIX, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c UNIX \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0447\u0430\u0441\u0442\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 CUPS \u0436\u0435\u0440\u0442\u0432\u044b, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0430\u0439\u043b\u0430 PPD \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 PPD, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445 Akamai, Rapid7, Elastic, Tenable, Qualys, DataDog \u0438 AquaSec, \u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 X \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041d\u043e \u043d\u0435 \u0442\u0430\u043a \u0432\u0441\u0435 \u043f\u043b\u043e\u0445\u043e, \u0432\u0435\u0434\u044c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u0435 \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux (\u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435), \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u043b\u0438\u0448\u044c \u0432 \u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u0442\u0430\u043a \u0447\u0442\u043e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 (CVSS 9,9), \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u0430\u0432\u044b\u0448\u0435\u043d\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043c\u0438\u043c\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC, \u0447\u0442\u043e \u0438 \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 UDP-\u043f\u043e\u0440\u0442\u0430 631, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440 CUPS \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b, \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0449\u0438\u0435 \u043e \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e CUPS \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0441\u0438\u0441\u0442\u0435\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c CUPS, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 107\u00a0000, \u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0421\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0435. \u041f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS. \n\n\u041d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0431\u0435\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c.", "creation_timestamp": "2024-09-30T13:11:39.000000Z"}, {"uuid": "512bca95-99e1-4c2d-8d2b-e03b94f0fbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6260", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS, \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0432 \u043d\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c UNIX \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-47176, CVE-2024-47076, CVE-2024-47175 \u0438 CVE-2024-47177.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 CUPS, \u043e\u0431\u0449\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0447\u0430\u0442\u0438 UNIX, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c UNIX \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0447\u0430\u0441\u0442\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 CUPS \u0436\u0435\u0440\u0442\u0432\u044b, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0430\u0439\u043b\u0430 PPD \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 PPD, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445 Akamai, Rapid7, Elastic, Tenable, Qualys, DataDog \u0438 AquaSec, \u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 X \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041d\u043e \u043d\u0435 \u0442\u0430\u043a \u0432\u0441\u0435 \u043f\u043b\u043e\u0445\u043e, \u0432\u0435\u0434\u044c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u0435 \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux (\u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435), \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u043b\u0438\u0448\u044c \u0432 \u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u0442\u0430\u043a \u0447\u0442\u043e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 (CVSS 9,9), \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u0430\u0432\u044b\u0448\u0435\u043d\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043c\u0438\u043c\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC, \u0447\u0442\u043e \u0438 \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 UDP-\u043f\u043e\u0440\u0442\u0430 631, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440 CUPS \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b, \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0449\u0438\u0435 \u043e \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e CUPS \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0441\u0438\u0441\u0442\u0435\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c CUPS, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 107\u00a0000, \u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0421\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0435. \u041f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CUPS. \n\n\u041d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0431\u0435\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c.", "creation_timestamp": "2024-09-30T13:11:39.000000Z"}, {"uuid": "b77b8bff-e95f-4a4e-bbbd-06533993ca25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47133", "type": "exploited", "source": "https://t.me/true_secator/6510", "content": "\u042f\u043f\u043e\u043d\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 CERT \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 0-day \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 IO-Data, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b 13 \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-45841: \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n- CVE-2024-47133: \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439.\n\n- CVE-2024-52564: \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 UD-LT1, \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 LTE, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u0438 \u0435\u0433\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e UD-LT1/EX.\n\nIO Data \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u044d\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 v2.1.9 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e CVE-2024-52564, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 v2.2.0, \u0432\u044b\u043f\u0443\u0441\u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 18 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2024-12-05T13:30:16.000000Z"}, {"uuid": "7bc637a4-2b83-429e-a44d-60a2253246d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47461", "type": "seen", "source": "https://t.me/true_secator/6419", "content": "Hewlett Packard Enterprise (HPE) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u041f\u041e Instant AOS-8 \u0438 AOS-10 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba Networking.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba (PAPI) \u0447\u0435\u0440\u0435\u0437 UDP-\u043f\u043e\u0440\u0442 8211.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-42509 \u0438 CVE-2024-47460 \u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0438 CVSS 9,8 \u0438 9,0 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI), \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PAPI.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\n- CVE-2024-47461\u00a0(CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 RCE, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n- CVE-2024-47462\u00a0\u0438\u00a0\u00a0CVE-2024-47463 (CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-47464\u00a0\u00a0(CVSS 6,8): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0435\u0435, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438.\n\n\u0412\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 AOS-10.4.xx: 10.4.1.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Instant AOS-8.12.xx: 8.12.0.2 \u0438 \u043d\u0438\u0436\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 Instant AOS-8.10.xx: 8.10.0.13 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 HPE, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0435 EoL, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043d\u043e \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0431\u0443\u0434\u0443\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c/\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 8211 \u0438\u0437 \u0432\u0441\u0435\u0445 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0430 \u0434\u043b\u044f - \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a CLI \u0438 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u0432 \u0438\u0445 \u0432 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u0443\u0440\u043e\u0432\u043d\u044f 2 \u0438\u043b\u0438 VLAN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.", "creation_timestamp": "2024-11-12T12:30:05.000000Z"}, {"uuid": "76cece2e-e0f3-4276-8e3a-7b76d10da1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://t.me/true_secator/6726", "content": "\u041f\u0440\u043e\u0441\u043b\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u00ab\u043e\u0441\u043e\u0431\u043e\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0435\u0439\u00bb \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Connect Secure (ICS), Policy Secure (IPS) \u0438 Cloud Services Application (CSA), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE.\n\n\u0412\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441 CVSS: 9,1 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-38657: \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0438\u043c\u0435\u043d\u0438 \u0444\u0430\u0439\u043b\u0430 \u0432 Ivanti Connect Secure \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R2.4 \u0438 Ivanti Policy Secure \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R1.3 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n- CVE-2025-22467: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 \u0432 Ivanti Connect Secure \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R2.6 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n- CVE-2024-10644: \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 Ivanti Connect Secure \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R2.4 \u0438 Ivanti Policy Secure \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R1.3 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE.\n\n- CVE-2024-47908: \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0432 \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Ivanti CSA \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.0.5 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: Ivanti Connect Secure 22.7R2.6, Ivanti Policy Secure 22.7R1.3 \u0438 Ivanti CSA 5.0.5.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0437\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041d\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0435 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0438\u043b\u0438\u044f \u043f\u043e \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u043e\u0435\u0433\u043e \u041f\u041e \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, 50 \u043e\u0442\u0442\u0435\u043d\u043a\u043e\u0432 Ivanti. \u0418 \u0432\u0441\u0435 \u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u044b\u0435.", "creation_timestamp": "2025-02-12T16:00:07.000000Z"}, {"uuid": "8f4133e8-03ce-407d-8722-2b0788bf8aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47462", "type": "seen", "source": "https://t.me/true_secator/6419", "content": "Hewlett Packard Enterprise (HPE) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u041f\u041e Instant AOS-8 \u0438 AOS-10 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba Networking.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba (PAPI) \u0447\u0435\u0440\u0435\u0437 UDP-\u043f\u043e\u0440\u0442 8211.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-42509 \u0438 CVE-2024-47460 \u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0438 CVSS 9,8 \u0438 9,0 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI), \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PAPI.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\n- CVE-2024-47461\u00a0(CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 RCE, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n- CVE-2024-47462\u00a0\u0438\u00a0\u00a0CVE-2024-47463 (CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-47464\u00a0\u00a0(CVSS 6,8): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0435\u0435, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438.\n\n\u0412\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 AOS-10.4.xx: 10.4.1.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Instant AOS-8.12.xx: 8.12.0.2 \u0438 \u043d\u0438\u0436\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 Instant AOS-8.10.xx: 8.10.0.13 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 HPE, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0435 EoL, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043d\u043e \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0431\u0443\u0434\u0443\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c/\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 8211 \u0438\u0437 \u0432\u0441\u0435\u0445 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0430 \u0434\u043b\u044f - \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a CLI \u0438 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u0432 \u0438\u0445 \u0432 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u0443\u0440\u043e\u0432\u043d\u044f 2 \u0438\u043b\u0438 VLAN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.", "creation_timestamp": "2024-11-12T12:30:05.000000Z"}, {"uuid": "7e6fd0e8-001b-467f-8d92-b4c26531b661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47460", "type": "seen", "source": "https://t.me/true_secator/6419", "content": "Hewlett Packard Enterprise (HPE) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u041f\u041e Instant AOS-8 \u0438 AOS-10 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba Networking.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba (PAPI) \u0447\u0435\u0440\u0435\u0437 UDP-\u043f\u043e\u0440\u0442 8211.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-42509 \u0438 CVE-2024-47460 \u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0438 CVSS 9,8 \u0438 9,0 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI), \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PAPI.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\n- CVE-2024-47461\u00a0(CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 RCE, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n- CVE-2024-47462\u00a0\u0438\u00a0\u00a0CVE-2024-47463 (CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-47464\u00a0\u00a0(CVSS 6,8): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0435\u0435, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438.\n\n\u0412\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 AOS-10.4.xx: 10.4.1.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Instant AOS-8.12.xx: 8.12.0.2 \u0438 \u043d\u0438\u0436\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 Instant AOS-8.10.xx: 8.10.0.13 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 HPE, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0435 EoL, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043d\u043e \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0431\u0443\u0434\u0443\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c/\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 8211 \u0438\u0437 \u0432\u0441\u0435\u0445 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0430 \u0434\u043b\u044f - \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a CLI \u0438 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u0432 \u0438\u0445 \u0432 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u0443\u0440\u043e\u0432\u043d\u044f 2 \u0438\u043b\u0438 VLAN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.", "creation_timestamp": "2024-11-12T12:30:05.000000Z"}, {"uuid": "52ffeac6-3234-41c1-b02e-4c8294f70c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47464", "type": "seen", "source": "https://t.me/true_secator/6419", "content": "Hewlett Packard Enterprise (HPE) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u041f\u041e Instant AOS-8 \u0438 AOS-10 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba Networking.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba (PAPI) \u0447\u0435\u0440\u0435\u0437 UDP-\u043f\u043e\u0440\u0442 8211.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-42509 \u0438 CVE-2024-47460 \u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0438 CVSS 9,8 \u0438 9,0 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI), \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PAPI.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\n- CVE-2024-47461\u00a0(CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 RCE, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n- CVE-2024-47462\u00a0\u0438\u00a0\u00a0CVE-2024-47463 (CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-47464\u00a0\u00a0(CVSS 6,8): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0435\u0435, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438.\n\n\u0412\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 AOS-10.4.xx: 10.4.1.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Instant AOS-8.12.xx: 8.12.0.2 \u0438 \u043d\u0438\u0436\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 Instant AOS-8.10.xx: 8.10.0.13 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 HPE, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0435 EoL, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043d\u043e \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0431\u0443\u0434\u0443\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c/\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 8211 \u0438\u0437 \u0432\u0441\u0435\u0445 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0430 \u0434\u043b\u044f - \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a CLI \u0438 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u0432 \u0438\u0445 \u0432 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u0443\u0440\u043e\u0432\u043d\u044f 2 \u0438\u043b\u0438 VLAN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.", "creation_timestamp": "2024-11-12T12:30:05.000000Z"}, {"uuid": "0d21d7ef-6081-4aff-a5f8-becb50586185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47463", "type": "seen", "source": "https://t.me/true_secator/6419", "content": "Hewlett Packard Enterprise (HPE) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u041f\u041e Instant AOS-8 \u0438 AOS-10 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba Networking.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba (PAPI) \u0447\u0435\u0440\u0435\u0437 UDP-\u043f\u043e\u0440\u0442 8211.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-42509 \u0438 CVE-2024-47460 \u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0438 CVSS 9,8 \u0438 9,0 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI), \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PAPI.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\n- CVE-2024-47461\u00a0(CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 RCE, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n- CVE-2024-47462\u00a0\u0438\u00a0\u00a0CVE-2024-47463 (CVSS 7,2): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-47464\u00a0\u00a0(CVSS 6,8): \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0435\u0435, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438.\n\n\u0412\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 AOS-10.4.xx: 10.4.1.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Instant AOS-8.12.xx: 8.12.0.2 \u0438 \u043d\u0438\u0436\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 Instant AOS-8.10.xx: 8.10.0.13 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 HPE, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0435 EoL, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043d\u043e \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0431\u0443\u0434\u0443\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c/\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a UDP-\u043f\u043e\u0440\u0442\u0443 8211 \u0438\u0437 \u0432\u0441\u0435\u0445 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0430 \u0434\u043b\u044f - \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a CLI \u0438 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u0432 \u0438\u0445 \u0432 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u0443\u0440\u043e\u0432\u043d\u044f 2 \u0438\u043b\u0438 VLAN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.", "creation_timestamp": "2024-11-12T12:30:05.000000Z"}, {"uuid": "fcb35c76-cf78-4811-9cb1-493e92cccea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/true_secator/6357", "content": "Fortinet \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0441 CVSS 9,8/10 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 FortiManager.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2024-47575\u00a0\u0438 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u043c Fortinet API FGFM.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Fortinet, \u043e\u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiGate \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 FortiManager \u0438 FortiGate \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 FortiManager.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0432 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043c\u0435\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 API \u043d\u0430 FortiManager.\n\nMandiant \u0432\u00a0\u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e CVE-2024-47575 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043a\u0430\u043a UNC5820, \u0441 27 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 50 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 FortiManager, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nFortinet \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 FortiManager, \u043a\u0430\u043a \u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0445 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b UNC5820 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 FortiManager, \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, Mandiant \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0446\u0435\u043b\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0432\u043e \u0432\u0441\u0435\u0445 \u043b\u0438\u043d\u0435\u0439\u043a\u0430\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 7.0, 7.2, 7.4 \u0438 7.6 FortiManager.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 IOC \u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u00ab\u0431\u0435\u043b\u044b\u0445\u00bb \u0441\u043f\u0438\u0441\u043a\u043e\u0432 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.\n\n\u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0434\u0430\u0442\u044b \u0432\u0437\u043b\u043e\u043c\u0430.", "creation_timestamp": "2024-10-24T16:00:07.000000Z"}, {"uuid": "6ff283e7-f65a-44d7-aaca-bca729adedd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "https://t.me/true_secator/5729", "content": "\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 \u043d\u0435\u0434\u0435\u043b\u0438, \u043a\u0430\u043a Chrome \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0439 0-day, \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u0442\u0440\u0438 \u0434\u043d\u044f \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u043f\u044f\u0442\u044b\u043c \u043d\u0443\u043b\u0435\u043c CVE-2024-4671 \u0432 Visuals \u0441\u043f\u0438\u0441\u043e\u043a \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u0448\u0435\u0441\u0442\u044b\u043c CVE-2024-4761. \u041d\u043e\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript Chrome V8 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0438\u043b\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0441\u0431\u043e\u044f\u043c.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0430 \u0434\u043b\u044f CVE-2024-4761, \u043d\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 124.0.6367.207/.208 \u0434\u043b\u044f Mac/Windows \u0438 124.0.6367.207 \u0434\u043b\u044f Linux. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0434\u043d\u0438.", "creation_timestamp": "2024-05-14T12:13:04.000000Z"}, {"uuid": "03b5bef2-7764-4e45-beaf-b9e939141516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/ctinow/225530", "content": "FortiJump flaw CVE-2024-47575 has been exploited in zero-day attacks since June 2024\nhttps://ift.tt/CUA1ItT", "creation_timestamp": "2024-10-24T14:06:14.000000Z"}, {"uuid": "f928cb07-4ec2-47b6-8266-f47939e3f282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1552", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "creation_timestamp": "2024-11-15T07:09:37.000000Z"}, {"uuid": "b4e0edc5-0baf-455f-9f77-e01500be452a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1539", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nblog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-09-27T12:56:55.000000Z"}, {"uuid": "44cff2b3-503b-4234-887c-30a2bd3ab8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1539", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nblog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-09-27T12:56:55.000000Z"}, {"uuid": "6df2382a-bb5e-41da-b006-96a9a4fbaf13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1539", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nblog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-09-27T12:56:55.000000Z"}, {"uuid": "3571f2bc-60d1-4276-9b04-f7729d306741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1539", "content": "CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE\n\nblog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/\n\nPoC: https://github.com/RickdeJager/cupshax\n\npatch:\nsudo systemctl stop cups-browsed\nsudo systemctl disable cups-browsed\n\n#exploit #git #pentest #redteam", "creation_timestamp": "2024-09-27T12:56:55.000000Z"}, {"uuid": "11469197-3142-46bc-b06e-39b5b20fc62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/ctinow/217184", "content": "https://ift.tt/txnl6Lf\nNew Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation", "creation_timestamp": "2024-05-14T16:39:48.000000Z"}, {"uuid": "9d84716a-ca81-43e6-97ea-e75bc3b08802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "Telegram/TAtjTOaDEPJ1bR_5ctFOaG1Hic1PWf8X_vOVFA5gLQr4", "content": "", "creation_timestamp": "2024-11-11T18:35:39.000000Z"}, {"uuid": "ef90bd36-091c-4bfb-baed-bc54d55379c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/Yfjl9RN0GeLXY9bMmWue6ZMJ8Qhlf06phKHOC1P1-O3oUDs", "content": "", "creation_timestamp": "2024-09-27T18:50:19.000000Z"}, {"uuid": "c90cf319-2ff2-4344-80aa-1fa5adb488e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "Telegram/Yfjl9RN0GeLXY9bMmWue6ZMJ8Qhlf06phKHOC1P1-O3oUDs", "content": "", "creation_timestamp": "2024-09-27T18:50:19.000000Z"}, {"uuid": "1b1bda51-93b8-43ff-ab60-7915b117d96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "Telegram/Yfjl9RN0GeLXY9bMmWue6ZMJ8Qhlf06phKHOC1P1-O3oUDs", "content": "", "creation_timestamp": "2024-09-27T18:50:19.000000Z"}, {"uuid": "8a0f863d-ea6f-41c5-9da1-d4301f13a329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3219", "content": "https://github.com/navidrome/navidrome/security/advisories/GHSA-58vj-cv5w-v4v6\n\ncve-2024-47062\n\n#github #poc", "creation_timestamp": "2024-09-25T16:35:07.000000Z"}, {"uuid": "01244751-2784-4fbf-8495-18eab9cb632e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/information_security_channel/52180", "content": "Google Patches Second Chrome Zero-Day in One Week\nhttps://www.securityweek.com/google-patches-second-chrome-zero-day-in-one-week/\n\nGoogle has patched CVE-2024-4761, the second exploited vulnerability addressed by the company within one week. \nThe post Google Patches Second Chrome Zero-Day in One Week (https://www.securityweek.com/google-patches-second-chrome-zero-day-in-one-week/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-05-14T15:43:56.000000Z"}, {"uuid": "e6a55f44-8dd7-475f-8cdb-0f12b600956d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47908", "type": "seen", "source": "https://t.me/thehackernews/6324", "content": "\ud83d\udea8 Critical security flaws discovered in Ivanti products could allow attackers to execute arbitrary code remotely.\n\nThe vulnerabilities (CVE-2024-38657, CVE-2025-22467, CVE-2024-10644, and CVE-2024-47908) impact Ivanti Connect Secure, Policy Secure, and Cloud Services Application.\n\nRead the full details: https://thehackernews.com/2025/02/ivanti-patches-critical-flaws-in.html", "creation_timestamp": "2025-02-12T07:09:15.000000Z"}, {"uuid": "04244c3a-5466-49b0-815f-c96ecdaafd9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/thehackernews/5779", "content": "\ud83d\udea8 Fortinet confirms a critical vulnerability (CVE-2024-47575 / CVSS 9.8) affecting FortiManager is being actively exploited! \n \nIt could allow unauthorized remote access, potentially compromising sensitive data & configurations. \n \nhttps://thehackernews.com/2024/10/fortinet-warns-of-critical.html \n \nDon't wait\u2014patch now.", "creation_timestamp": "2024-10-24T08:28:42.000000Z"}, {"uuid": "fac2a0ee-25d2-4a7c-b7a2-bc623381bebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47460", "type": "seen", "source": "https://t.me/thehackernews/5863", "content": "\ud83d\udea8 Critical Command Injection Flaws found in Aruba Networking Access Points! \n \nRemote code execution is possible\u2014CVE-2024-42509 & CVE-2024-47460 threaten your network\u2019s security. Don't wait for an attack! \n \nRead more: https://thehackernews.com/2024/11/hpe-issues-critical-security-patches.html \n \n\ud83d\udc49 Patch your devices NOW.", "creation_timestamp": "2024-11-11T11:02:29.000000Z"}, {"uuid": "2cf249f9-7187-467d-a6c3-13626fcd5c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/thehackernews/5652", "content": "\ud83d\udea8 New CUPS vulnerabilities in Linux allow attackers to execute remote commands via print jobs! Affected systems include Debian, Fedora, RHEL.  \n \nFind details of CVE-2024-47176 here: https://thehackernews.com/2024/09/critical-linux-cups-printing-system.html \n \nDisable \u2018cups-browsed\u2019 & block UDP port 631 until patches arrive.", "creation_timestamp": "2024-09-27T14:34:54.000000Z"}, {"uuid": "84c06f29-be5c-43b8-8971-ab18e9da82d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47374", "type": "seen", "source": "https://t.me/thehackernews/5686", "content": "A major #vulnerability (CVE-2024-47374) in the LiteSpeed Cache WordPress plugin could allow attackers to execute arbitrary #JavaScript and hijack accounts. \n \nFind details here: https://thehackernews.com/2024/10/wordpress-litespeed-cache-plugin.html \n \nPatch now to protect your site.", "creation_timestamp": "2024-10-04T11:12:17.000000Z"}, {"uuid": "e7a1a846-b6b6-431f-8810-9f24f9fcaaa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/thehackernews/5694", "content": "A critical security flaw in Apache Avro SDK (CVE-2024-47561) threatens large-scale data processing systems.  \n \nEnsure your systems are patched to avoid arbitrary code execution risks. \n \nDetails here: https://thehackernews.com/2024/10/critical-apache-avro-sdk-flaw-allows.html", "creation_timestamp": "2024-10-07T11:45:20.000000Z"}, {"uuid": "48976eca-b430-4368-bda5-ebc59d181075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/CyberBulletin/26385", "content": "\u26a1\ufe0fUnpatched Epson Devices at Risk: CVE-2024-47295 Allows Easy Hijacking.\n\n#CyberBulletin", "creation_timestamp": "2024-11-11T14:48:24.000000Z"}, {"uuid": "de866fc5-45c9-4553-9b7f-9b629fd21863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/CyberBulletin/25919", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:13:07.000000Z"}, {"uuid": "c3141fa7-ea7a-4565-b36b-d62b6ebb0f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9327", "content": "Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575\n\nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "creation_timestamp": "2024-11-15T08:45:15.000000Z"}, {"uuid": "a16618e4-a1bd-4f3d-975b-8c0004f753ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47901", "type": "seen", "source": "https://t.me/CyberBulletin/26210", "content": "\u26a1\ufe0fCVE-2024-47901 (CVSS 10): Critical Security Flaw in Siemens InterMesh.\n\n#CyberBulletin", "creation_timestamp": "2024-10-25T07:32:16.000000Z"}, {"uuid": "9ec44023-8a57-4211-a32d-c792b49b47a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47810", "type": "seen", "source": "https://t.me/CyberBulletin/26868", "content": "\u26a1\ufe0fCVE-2024-49576 and CVE-2024-47810: Foxit Addresses Remote Code Execution Flaws.\n\n#CyberBulletin", "creation_timestamp": "2024-12-20T16:20:05.000000Z"}, {"uuid": "b49798ee-c661-41fc-8be9-ab0d1be8306c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47823", "type": "seen", "source": "https://t.me/CyberBulletin/26059", "content": "\u26a1\ufe0fExploiting Livewire: CVE-2024-47823 Puts Laravel Apps at Risk.\n\n#CyberBulletin", "creation_timestamp": "2024-10-10T11:33:11.000000Z"}, {"uuid": "c4e63c79-52ea-4f07-97d2-e6b538ebbc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2488", "content": "https://docs.google.com/document/d/e/2PACX-1vSpCvBik81OppzMXbPjb0uRlWTdn4I1kttNSlbHtNMCT3xZJJiyKAsCcUxzNBimlBdXoKxrktlgJjOZ/pub\n\nCVE-2024-4761: Out of bounds write in V8. Reported by Anonymous on 2024-05-09\n#\u5206\u6790 #poc", "creation_timestamp": "2024-05-14T16:26:59.000000Z"}, {"uuid": "ca6d10b4-38a0-4372-ac77-c35039082564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3277", "content": "https://github.com/l0n3m4n/CVE-2024-47176\n\nUnauthenticated RCE on cups-browsed (exploit and nuclei template)\n#github #exploit", "creation_timestamp": "2024-10-03T19:25:53.000000Z"}, {"uuid": "13bf11d7-5629-49de-9e0a-7eea174731d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11196", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-28T07:25:32.000000Z"}, {"uuid": "7f949639-0991-4864-b35b-03e150803dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11196", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-28T07:25:32.000000Z"}, {"uuid": "e4ec743a-2eb4-4ba5-abda-8e62cac3acf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11196", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-28T07:25:32.000000Z"}, {"uuid": "d4af10c0-d4db-45b0-944e-f24edcc76de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47115", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11196", "content": "#Threat_Research\n1. Watchguard Unauthenticated and Unencrypted SSO Protocol\nhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006\n2. Attacking UNIX Systems via CUPS (CVE-2024-47076, CVE-2024-47115, CVE-2024-47176, CVE-2024-47177)\nhttps://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I\n]-> https://github.com/RickdeJager/cupshax", "creation_timestamp": "2024-09-28T07:25:32.000000Z"}, {"uuid": "e301362f-e298-44b5-9bc7-edd0d585cf72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11647", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T15:36:02.000000Z"}, {"uuid": "791ccbcf-e184-4ed4-98af-6d3a19135002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "Telegram/Yfjl9RN0GeLXY9bMmWue6ZMJ8Qhlf06phKHOC1P1-O3oUDs", "content": "", "creation_timestamp": "2024-09-27T18:50:19.000000Z"}, {"uuid": "b5319880-fedc-44bc-ad4f-d9b5e208478c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/DEVIL_La_RSx/1583", "content": "https://github.com/saisathvik1/CVE-2024-47062", "creation_timestamp": "2024-12-02T01:56:49.000000Z"}, {"uuid": "3f9924c9-3bd7-47ee-907b-07ac06f6d7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://t.me/cvedetector/24716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47619 - Syslog-ng TLS Wildcard Certificate Matching Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47619 \nPublished : May 7, 2025, 4:15 p.m. | 25\u00a0minutes ago \nDescription : syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T19:00:37.000000Z"}, {"uuid": "78a56abd-9e0d-4890-877e-3f1a8084af01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47295", "type": "seen", "source": "https://t.me/InfoSecInsider/677", "content": "\u26a1\ufe0fUnpatched Epson Devices at Risk: CVE-2024-47295 Allows Easy Hijacking.\n\n#CyberBulletin", "creation_timestamp": "2024-11-11T14:50:27.000000Z"}, {"uuid": "3297ffa1-2bde-409c-a0cc-134555994dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/InfoSecInsider/438", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:16:23.000000Z"}, {"uuid": "3f0643cb-217b-4199-bc23-b1467bd65fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47901", "type": "seen", "source": "https://t.me/InfoSecInsider/567", "content": "\u26a1\ufe0fCVE-2024-47901 (CVSS 10): Critical Security Flaw in Siemens InterMesh.\n\n#CyberBulletin", "creation_timestamp": "2024-10-25T08:55:43.000000Z"}, {"uuid": "f9100900-b169-4d2b-9aa3-b395e3c61a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/DEVIL_La_RSx/744", "content": "https://github.com/saisathvik1/CVE-2024-47062", "creation_timestamp": "2024-11-22T10:05:08.000000Z"}, {"uuid": "47fd96c9-aa53-473a-9d34-c0315408d3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/311", "content": "https://github.com/Axi0n1ze/CVE-2024-47575-POC\n\nCVE POC Exploit\n#github #poc", "creation_timestamp": "2025-01-06T10:55:11.000000Z"}, {"uuid": "5f4c0fa6-0dc9-404c-9e8c-833777d7b5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/TAtjTOaDEPJ1bR_5ctFOaG1Hic1PWf8X_vOVFA5gLQr4", "content": "", "creation_timestamp": "2024-11-11T18:35:39.000000Z"}, {"uuid": "f21d4a91-1461-4be8-9fc5-512f1f859399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "Telegram/TAtjTOaDEPJ1bR_5ctFOaG1Hic1PWf8X_vOVFA5gLQr4", "content": "", "creation_timestamp": "2024-11-11T18:35:39.000000Z"}, {"uuid": "1e6e9886-7cdf-4529-b562-b48a0e1403c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "Telegram/TAtjTOaDEPJ1bR_5ctFOaG1Hic1PWf8X_vOVFA5gLQr4", "content": "", "creation_timestamp": "2024-11-11T18:35:39.000000Z"}, {"uuid": "a01f449a-9676-46d6-902f-758ae23228de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/HackerInvestigationZone/32", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol circumventing authentication Referred to as FortiJump this vulnerability provides unauthorized access to FortiManager enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes\n\u2699\ufe0f Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\nResearch: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\nSource: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#Investigation_of_hacking", "creation_timestamp": "2024-11-15T15:06:06.000000Z"}, {"uuid": "5e1f3fd6-6917-4d3a-b6f7-9f5333783cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "seen", "source": "https://t.me/BlackLineCH/65", "content": "CVE-2024-47062: SQL Injection dan Auth Bypass di Navidrome Music Server, rating 9.4 \ud83d\udd25\n\nPemberitahuan terbaru mengungkapkan beberapa kerentanan, yang secara teori memungkinkan penyerang untuk mendapatkan akses ke data sensitif.\n\nCari di Netlas.io: \n\ud83d\udc49 Link: https://nt.ls/N9Jj8 \n\ud83d\udc49 Dork: http.description:\"Navidrome Music Server\"\n\nPemberitahuan vendor: https://github.com/navidrome/navidrome/security/advisories/GHSA-58vj-cv5w-v4v6", "creation_timestamp": "2024-10-08T11:29:13.000000Z"}, {"uuid": "4547b05a-84a3-4806-8583-5e5ed6827e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/2609", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "creation_timestamp": "2025-02-15T16:51:49.000000Z"}, {"uuid": "d7f93cee-ef5d-4ea8-9ec6-ecc0c4a6b30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/club31337/2849", "content": "https://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575\n\n@club1337", "creation_timestamp": "2024-11-11T02:57:27.000000Z"}, {"uuid": "ca672f23-cd14-4da7-95ff-d70610d837e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://t.me/club31337/2939", "content": "https://attackerkb.com/topics/OFBGprmpIE/cve-2024-47575/rapid7-analysis\n\nhttps://www.rapid7.com/blog/post/2024/10/23/etr-fortinet-fortimanager-cve-2024-47575-exploited-in-zero-day-attacks/\n\n@club31337", "creation_timestamp": "2024-11-13T23:51:35.000000Z"}, {"uuid": "7925b071-d2ec-4103-921d-8f91d3d0d4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47062", "type": "seen", "source": "https://t.me/cyberteamvlayingsecurity/521", "content": "CVE-2024-47062: SQL Injection dan Auth Bypass di Navidrome Music Server, rating 9.4 \ud83d\udd25\n\nPemberitahuan terbaru mengungkapkan beberapa kerentanan, yang secara teori memungkinkan penyerang untuk mendapatkan akses ke data sensitif.\n\nCari di Netlas.io: \n\ud83d\udc49 Link: https://nt.ls/N9Jj8 \n\ud83d\udc49 Dork: http.description:\"Navidrome Music Server\"\n\nPemberitahuan vendor: https://github.com/navidrome/navidrome/security/advisories/GHSA-58vj-cv5w-v4v6", "creation_timestamp": "2024-10-08T11:58:03.000000Z"}, {"uuid": "928db57c-a7a2-4990-bf6f-901dd413fe51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47764", "type": "seen", "source": "https://gist.github.com/Adcbda/3e82259b6deb6a426fbb5c89ed5ded87", "content": "", "creation_timestamp": "2026-05-08T07:36:05.000000Z"}, {"uuid": "e5353b83-bf83-40b8-970d-d6a3d6c1fee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47764", "type": "seen", "source": "https://gist.github.com/Adcbda/1903b9267561971f4b148df4c6e3182f", "content": "", "creation_timestamp": "2026-05-09T02:43:21.000000Z"}, {"uuid": "f6740641-0bf9-42df-b667-44cf3fafdf4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47704", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "b9221d4b-68ad-4603-8961-17157b385af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvuw2xunp2i", "content": "", "creation_timestamp": "2026-05-28T11:06:25.232907Z"}, {"uuid": "ba269cd7-bcb7-437a-8753-bbeb8ee97d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47097", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvxsm7e2o2e", "content": "", "creation_timestamp": "2026-05-28T11:58:19.259936Z"}, {"uuid": "6a5b491d-b2a3-4314-85b3-1a18ae0a38f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47874", "type": "seen", "source": "https://gist.github.com/lesnargitonga/ded68f9d3d270cc386fe7c2227970ebc", "content": "", "creation_timestamp": "2026-05-28T19:29:34.000000Z"}, {"uuid": "a2b54a40-69ea-4791-afa5-4e1760eb0793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "", "creation_timestamp": "2026-07-06T11:00:04.054844Z"}, {"uuid": "9de2fe99-c8c5-44c0-98cc-225381ca1713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47901", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3momyizcgdk2j", "content": "", "creation_timestamp": "2026-06-19T09:07:07.898005Z"}, {"uuid": "571935c9-22cb-462b-a6d2-7a58a061ffc2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47575", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/cc72d980-9ae3-4a56-b743-5db9c5d79810", "content": "", "creation_timestamp": "2026-06-23T11:14:29.241284Z"}, {"uuid": "7159fe3c-593d-4ff4-b050-34e67e338040", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/829ef1a7-34f2-4299-b6fe-921635956b93", "content": "", "creation_timestamp": "2026-06-23T11:14:21.496634Z"}, {"uuid": "449d8b5a-56d5-4ab4-a2e1-01ff27dd564b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47073", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpcwvvdcvy23", "content": "", "creation_timestamp": "2026-06-28T02:37:06.795834Z"}, {"uuid": "4d9ea075-831f-488a-91fb-0aec1d3eb363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47074", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpdcnfww6u22", "content": "", "creation_timestamp": "2026-06-28T06:07:07.629459Z"}, {"uuid": "2254a8ce-9309-438e-b42a-83c66e9f965e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47074", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpdcnff7bs2l", "content": "", "creation_timestamp": "2026-06-28T06:07:06.959444Z"}, {"uuid": "b2b65a28-90b2-46e2-9fdc-b987bede078e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47830", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpdeczu3dw24", "content": "", "creation_timestamp": "2026-06-28T06:37:06.189404Z"}, {"uuid": "8a968198-36a0-4972-99b3-dcf7b9c8ed1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47832", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpdfyolqpx2x", "content": "", "creation_timestamp": "2026-06-28T07:07:06.807537Z"}, {"uuid": "386da17c-c427-413e-8969-3be06c3bd616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47656", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpdjdxrxjy2x", "content": "", "creation_timestamp": "2026-06-28T08:07:06.568494Z"}, {"uuid": "09cfc11e-5389-433a-b115-d7e2c8de55f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47821", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpgxyimiog2g", "content": "", "creation_timestamp": "2026-06-29T17:07:06.590891Z"}, {"uuid": "aace7fef-19a2-4d0f-ab3b-4b351744dbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47406", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpgzo5llds2e", "content": "", "creation_timestamp": "2026-06-29T17:37:07.104245Z"}, {"uuid": "17b5c3d1-8ec2-403f-a29f-e20bbfbe11db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47883", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mph3ds334p2g", "content": "", "creation_timestamp": "2026-06-29T18:07:07.227143Z"}, {"uuid": "1cd2b409-42a2-4a72-b041-af31a9ec2bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47810", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpp76n2thc2a", "content": "", "creation_timestamp": "2026-07-02T23:37:06.946607Z"}, {"uuid": "d31c1070-6199-4e1d-8c38-47082702fc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47014", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpvdcz3akk2v", "content": "", "creation_timestamp": "2026-07-05T10:07:07.642893Z"}, {"uuid": "9c4fbaf4-efef-4f29-8408-8332c3a0103a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47191", "type": "seen", "source": "https://t.me/ZerodayAlert/350", "content": "", "creation_timestamp": "2026-07-06T12:00:05.101907Z"}, {"uuid": "13e27275-2fef-4ec2-a72a-60e8453dff85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47849", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpyekemvs22c", "content": "", "creation_timestamp": "2026-07-06T15:07:07.081598Z"}, {"uuid": "4eda83cb-5337-4329-adc1-4f4fa4b84fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "MISP/a07068cd-abe3-47bc-b0f2-fcfdc818611a", "content": "", "creation_timestamp": "2026-07-09T00:15:03.590830Z"}, {"uuid": "5dc509e7-6e0f-4c74-9505-14350ecbeb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47062", "type": "seen", "source": "https://t.me/brutsecurity/962", "content": "", "creation_timestamp": "2026-07-09T03:00:12.538254Z"}, {"uuid": "e503b470-fee0-4019-b5f0-ce89d7d631c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47062", "type": "seen", "source": "https://t.me/brutsecurity/962", "content": "", "creation_timestamp": "2026-07-10T00:00:36.380533Z"}, {"uuid": "cdbc7051-b1f6-4622-b4d3-15bfa4471cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47051", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1597", "content": "", "creation_timestamp": "2026-07-11T14:00:04.251687Z"}, {"uuid": "3e8d5613-c363-435c-a539-f94a7241e681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/962", "content": "", "creation_timestamp": "2026-07-11T17:00:04.286253Z"}, {"uuid": "7675280e-7292-4113-aa28-d367e07eb482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "", "creation_timestamp": "2026-07-11T20:00:06.799417Z"}, {"uuid": "12d2bdfb-2133-4f39-8aa5-4c284a9d0c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47191", "type": "seen", "source": "https://t.me/ZerodayAlert/350", "content": "", "creation_timestamp": "2026-07-11T20:00:06.753575Z"}, {"uuid": "d8507f3b-3fb0-4453-92fc-3af604620d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47051", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1597", "content": "", "creation_timestamp": "2026-07-12T00:00:48.016517Z"}, {"uuid": "a97d9641-daa7-4af4-8dde-9e09c617a6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47062", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/962", "content": "", "creation_timestamp": "2026-07-12T00:00:42.700045Z"}, {"uuid": "f9d5c708-1f98-40af-b662-07e7aa9e2d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "", "creation_timestamp": "2026-07-12T00:00:40.019448Z"}, {"uuid": "cb0aee5a-875e-4fcc-b077-a5885a2fb884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47191", "type": "seen", "source": "https://t.me/ZerodayAlert/350", "content": "", "creation_timestamp": "2026-07-12T00:00:39.971530Z"}, {"uuid": "83a5f463-81c5-4ff4-929f-58235f8fbe3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/GithubRedTeam/87699", "content": "", "creation_timestamp": "2026-07-12T12:00:04.732959Z"}, {"uuid": "2d152783-a553-4d76-a08d-73919df895a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47178", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqi6sw3iuq23", "content": "", "creation_timestamp": "2026-07-12T22:07:07.357419Z"}, {"uuid": "f14de27a-68be-46d6-8f4e-29da454f9c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47532", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqiaikp3gs2f", "content": "", "creation_timestamp": "2026-07-12T22:37:07.325774Z"}, {"uuid": "e5a869de-7ea1-4b7a-a558-dd6874e3d9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/GithubRedTeam/87699", "content": "", "creation_timestamp": "2026-07-13T00:00:44.668387Z"}, {"uuid": "f52eb558-8b59-483e-8311-6d9029ae0116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47655", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqknm6akfh2m", "content": "", "creation_timestamp": "2026-07-13T21:37:06.448117Z"}, {"uuid": "dd731320-8ed8-4097-b628-a2bdc029a4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1055", "content": "", "creation_timestamp": "2026-07-14T00:01:01.204229Z"}, {"uuid": "56ba8b6c-9bdb-4092-8dcc-57c0ceb6d892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/securixy_kz/1044", "content": "", "creation_timestamp": "2026-07-14T00:01:00.978546Z"}, {"uuid": "32aff7c3-57a7-42fb-a569-0a96ea95f90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-14T00:01:00.530808Z"}, {"uuid": "27810423-5e98-4e20-9c22-c337dce97486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-14T00:01:00.496992Z"}, {"uuid": "7b435f3a-ce3d-4389-803e-94495b601616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-14T00:01:00.464131Z"}, {"uuid": "6a9f655f-a576-4fbc-837c-184380727dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1009", "content": "", "creation_timestamp": "2026-07-14T00:01:00.428589Z"}, {"uuid": "bd05c483-7530-449e-bbdf-7a3bc52899b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47783", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqmjxeueh32k", "content": "", "creation_timestamp": "2026-07-14T15:37:06.957254Z"}, {"uuid": "afa7f978-f4c0-4af2-9668-5950a29ae692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47904", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqmqnwsaoz27", "content": "", "creation_timestamp": "2026-07-14T17:37:06.459822Z"}, {"uuid": "92e38d11-3fdc-4768-a0f8-89d8f19ec69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88926", "content": "", "creation_timestamp": "2026-07-15T00:00:06.657303Z"}, {"uuid": "66fa53ed-491d-4b77-ba80-79b91117a8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-16T19:00:13.020624Z"}, {"uuid": "170c6fe9-ac90-4ca4-83e8-6fa828b51c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47404", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqrycdy6sj22", "content": "", "creation_timestamp": "2026-07-16T19:37:06.268563Z"}, {"uuid": "fb13a7db-5092-4053-a1ad-0c781ec911bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47797", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqrzxz3kwn27", "content": "", "creation_timestamp": "2026-07-16T20:07:06.606390Z"}, {"uuid": "330887f2-c8b5-4aca-a7d2-d9667ebcaae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47137", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqs3nnfqng2u", "content": "", "creation_timestamp": "2026-07-16T20:37:06.249364Z"}, {"uuid": "b04b83db-f091-49c4-b7f7-ffa2c246f3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-17T00:00:28.362794Z"}, {"uuid": "51250378-adf6-4abb-85be-503fca6235cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47962", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqsmg4ijg42f", "content": "", "creation_timestamp": "2026-07-17T01:37:07.348344Z"}, {"uuid": "da1815c3-fbc5-4399-a6d1-6ddeb7127d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47963", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqu4zscu672v", "content": "", "creation_timestamp": "2026-07-17T16:07:07.299543Z"}, {"uuid": "62c62577-4441-4046-9d26-528106fa8736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47965", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mquaf2wgcr22", "content": "", "creation_timestamp": "2026-07-17T17:07:06.631917Z"}, {"uuid": "a23dda29-f595-439d-9ccf-732277614dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47966", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mquc2pnozl2c", "content": "", "creation_timestamp": "2026-07-17T17:37:06.866242Z"}, {"uuid": "727744c3-b54c-4a77-9554-663ed2cabbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-18T00:00:43.975180Z"}, {"uuid": "014bb604-a45d-4d92-b7bd-8a182c13f208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47808", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqxseui4zh23", "content": "", "creation_timestamp": "2026-07-19T03:07:06.909780Z"}, {"uuid": "9dd5d247-de71-4b17-bfee-0ea541aaeeb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47556", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqyd5cwail2c", "content": "", "creation_timestamp": "2026-07-19T08:07:06.811170Z"}, {"uuid": "c83f697c-472a-4546-9882-cf48ce70e00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47557", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqyeswwd6h2y", "content": "", "creation_timestamp": "2026-07-19T08:37:06.336498Z"}, {"uuid": "1fd0e908-05b8-4ed2-a64e-1b1bce845643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47871", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr43tp3y2a2s", "content": "", "creation_timestamp": "2026-07-20T20:07:07.065902Z"}, {"uuid": "3076e384-e831-448d-be09-5fe5f1ac30e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47604", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4fvkxcug2u", "content": "", "creation_timestamp": "2026-07-20T23:07:07.388193Z"}, {"uuid": "255e7210-dc1b-4a44-a255-6ea3c611c160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47023", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrelg2hsq72l", "content": "", "creation_timestamp": "2026-07-24T05:07:12.346489Z"}, {"uuid": "7919ad93-8d6b-42e6-8a71-d571a2e56bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47005", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mreordh3242s", "content": "", "creation_timestamp": "2026-07-24T06:07:07.177825Z"}, {"uuid": "e4d20c24-31f6-424a-a0d0-b75b302ed4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47878", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mreqgypkn22u", "content": "", "creation_timestamp": "2026-07-24T06:37:07.340804Z"}, {"uuid": "25b46637-c8b4-4963-8381-c7bac02ad764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47880", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mres4n2gxw2y", "content": "", "creation_timestamp": "2026-07-24T07:07:07.110740Z"}, {"uuid": "b17b948f-f62c-46de-940f-05534de45982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47881", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mretsbu3wc2v", "content": "", "creation_timestamp": "2026-07-24T07:37:07.234468Z"}, {"uuid": "dc708335-9001-4f27-bd37-44adf9ab64c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4761", "type": "seen", "source": "https://t.me/linuxkalii/874", "content": "", "creation_timestamp": "2026-07-26T00:00:13.178921Z"}, {"uuid": "8b996bdc-0fd6-497a-9665-b482ad0b4ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-26T02:02:02.949008Z"}, {"uuid": "dcd85156-b6a7-4dad-bd01-f7f1bf8f0a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-26T02:02:02.719817Z"}, {"uuid": "63970f41-cf36-48fd-9a71-1b402351b85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-26T02:02:02.675286Z"}, {"uuid": "ca432913-7062-4412-9b9f-03c8b637edd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-26T02:00:18.326545Z"}, {"uuid": "1baa261f-08d9-4aa7-888b-a82aabb8c097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-26T02:00:18.279971Z"}, {"uuid": "42f148ab-6945-4117-a3c7-0e047e0a84b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-26T02:00:18.107549Z"}, {"uuid": "32190e8f-6207-40f0-9fb3-328bf9228164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-26T02:00:18.067153Z"}, {"uuid": "0bd48624-963f-4ce0-a385-b7d9cb837f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/cyberwarehouse/624", "content": "", "creation_timestamp": "2026-07-26T02:00:17.179502Z"}, {"uuid": "3f5b9ee4-9e07-40dd-b631-29a51e943056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/cyberwarehouse/623", "content": "", "creation_timestamp": "2026-07-26T02:00:17.089945Z"}, {"uuid": "c62c3a8b-1bb9-489a-8d94-1722a8b6f06b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/Positive_Technologies/3182", "content": "", "creation_timestamp": "2026-07-26T07:01:20.584970Z"}, {"uuid": "f3fc48b6-ce5f-4916-bca8-b1c8505ccd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-26T07:00:29.335693Z"}, {"uuid": "d324f443-4456-4d5b-9518-95739b9156d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/Positive_Technologies/3182", "content": "", "creation_timestamp": "2026-07-27T00:01:25.753798Z"}, {"uuid": "1f69b655-177e-415b-966c-ca9b60b5722a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-27T00:00:43.114331Z"}, {"uuid": "5660c2fd-313f-4252-bf27-5846e22123ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-27T00:00:43.080579Z"}, {"uuid": "d2909745-683c-4bb4-be0e-2d36b4aa5220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-27T00:00:42.924429Z"}, {"uuid": "b9ca6fa6-6251-48a9-89e2-30913b094dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-27T00:00:42.891956Z"}, {"uuid": "8c93353a-6649-4e19-9317-19a1ac03c232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/624", "content": "", "creation_timestamp": "2026-07-27T00:00:26.216582Z"}, {"uuid": "95aa99dc-cd10-45b2-9878-173c71c5679e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/623", "content": "", "creation_timestamp": "2026-07-27T00:00:26.031325Z"}, {"uuid": "4df85ded-bd36-4663-8af7-ebc9597ac121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-27T00:00:24.895842Z"}, {"uuid": "6799b4ee-d497-4f57-ab1a-000e9694309c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-27T00:00:24.845727Z"}, {"uuid": "355928f4-a6b3-47a5-acca-8f303c6ae720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-27T00:00:24.799890Z"}, {"uuid": "307b0394-5f2e-4d41-bf9e-789426500ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/539", "content": "", "creation_timestamp": "2026-07-27T00:00:24.755682Z"}, {"uuid": "ef7b76e8-0472-49c2-bbe9-4467bc2bfa23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-28T00:00:47.170493Z"}, {"uuid": "f8124baf-9c42-4f37-9c4b-ec04948ec404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-28T00:00:46.470276Z"}, {"uuid": "c0dd0bdb-41f8-458b-bf65-e1cd2da01b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47076", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-28T00:00:46.426305Z"}, {"uuid": "845eb6e8-8f72-436c-8e4b-dc35db2454ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3222", "content": "", "creation_timestamp": "2026-07-28T01:00:27.795014Z"}, {"uuid": "4f4a4af3-c31a-4894-99d0-f342ef46fe49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47809", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:15:38.644716Z"}, {"uuid": "e058ff17-12ad-4c88-8bb8-310d747052b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47736", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:15:35.511976Z"}, {"uuid": "444a8e14-6fbf-4025-80da-987a8d128676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/Positive_Technologies/3182", "content": "", "creation_timestamp": "2026-07-28T17:00:06.322440Z"}, {"uuid": "69a7f871-3e1f-4fa6-adc0-b35904ad4772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/Positive_Technologies/3182", "content": "", "creation_timestamp": "2026-07-29T01:00:12.784580Z"}, {"uuid": "3de5302e-c758-4806-960e-6fa35cf81f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/sysadm_in_up/2239", "content": "", "creation_timestamp": "2026-07-29T12:03:16.900471Z"}, {"uuid": "fa1ada30-94ee-44b8-a8ad-29488e57dcae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/reverseame/4831", "content": "", "creation_timestamp": "2026-07-29T12:02:10.169409Z"}, {"uuid": "233f1c5a-2e1e-4271-b426-466fe1a18f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "seen", "source": "https://t.me/reverseame/4831", "content": "", "creation_timestamp": "2026-07-30T00:02:17.544749Z"}, {"uuid": "ed8b528f-2a60-4928-9bbe-0ebe7a95ad31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/sysadm_in_up/2239", "content": "", "creation_timestamp": "2026-07-30T00:03:02.465508Z"}, {"uuid": "39e8fcf4-a434-4673-92fe-40a52ed11f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4831", "content": "", "creation_timestamp": "2026-08-02T04:08:44.550511Z"}, {"uuid": "54c009df-7c50-4119-9505-8582f2dfedbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47575", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4831", "content": "", "creation_timestamp": "2026-08-03T02:13:59.176666Z"}, {"uuid": "da9d8a34-ee25-4c64-b0af-bd08041beb7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47809", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T04:49:12.272950Z"}, {"uuid": "c3667864-2c58-4f89-9cdf-111a293808dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2239", "content": "", "creation_timestamp": "2026-08-04T01:00:04.494001Z"}, {"uuid": "2cd1befc-d6c8-49af-a1a0-ca81d19f11b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-04T13:00:23.084491Z"}, {"uuid": "d7dfd245-c3d4-40ca-9574-6deaccea3318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-04T13:00:22.950647Z"}, {"uuid": "d033c7e8-9864-470c-b841-a5cd7e228544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-04T13:00:22.929082Z"}, {"uuid": "2317148b-24c4-42d1-8ae5-e3f99a08c43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberok_news/76", "content": "", "creation_timestamp": "2026-08-04T13:00:22.905459Z"}, {"uuid": "c111aee6-7896-4d45-9ac6-b2cee59158f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2239", "content": "", "creation_timestamp": "2026-08-05T00:01:00.670333Z"}, {"uuid": "fe5253ed-ad99-4775-a141-f1f5c30a377b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-05T00:00:38.318497Z"}, {"uuid": "eb1f6c7a-94b4-4c6b-b87b-075144055806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "seen", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-05T00:00:38.169399Z"}, {"uuid": "c6de5032-91d1-44e0-94f7-757ded376963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "seen", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-05T00:00:38.134599Z"}, {"uuid": "dd344825-82f1-4e98-ad59-9ba5d0721888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberok_news/76", "content": "", "creation_timestamp": "2026-08-05T00:00:38.099407Z"}, {"uuid": "b8d56409-8f3a-44e7-84b8-c2d2c2707eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "seen", "source": "https://t.me/cyberok_news/76", "content": "", "creation_timestamp": "2026-08-06T00:00:46.980857Z"}, {"uuid": "f74198b2-84f3-40df-8f7d-cf0c4b785ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47177", "type": "published-proof-of-concept", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-06T00:00:46.936440Z"}, {"uuid": "31ee9333-4118-43fc-b194-b806794fbaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47175", "type": "published-proof-of-concept", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-06T00:00:46.889240Z"}, {"uuid": "325d34e8-0b81-4c09-b41a-c0219d2bb338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-47176", "type": "published-proof-of-concept", "source": "https://t.me/cyberok_news/75", "content": "", "creation_timestamp": "2026-08-06T00:00:46.837134Z"}, {"uuid": "34b6610e-3c41-4264-9b75-f1be8f31685f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/linuxkalii/874", "content": "", "creation_timestamp": "2026-08-06T03:00:04.145689Z"}, {"uuid": "9a42508c-6de1-4e34-8757-8012968c380a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4761", "type": "exploited", "source": "https://t.me/linuxkalii/874", "content": "", "creation_timestamp": "2026-08-07T00:42:03.989614Z"}]}