{"vulnerability": "2024-58", "sightings": [{"uuid": "2088df4b-a0f8-4295-9fbe-1b44e7328ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-18T12:32:20.467002Z"}, {"uuid": "0c8b4f16-b822-4201-bebb-bdb0ced45616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5875", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528961735222842", "content": "", "creation_timestamp": "2024-11-22T22:28:00.221591Z"}, {"uuid": "34b474c6-a4f2-436f-80ed-94b96b55c906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5876", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528961750074662", "content": "", "creation_timestamp": "2024-11-22T22:28:00.478203Z"}, {"uuid": "1e9adb61-8e47-4c5d-a58e-6298b7df6498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5874", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528961721577875", "content": "", "creation_timestamp": "2024-11-22T22:28:00.025176Z"}, {"uuid": "c60bc15a-449a-4a19-8f4b-da6a225935e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5877", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113529020767884932", "content": "", "creation_timestamp": "2024-11-22T22:43:00.856319Z"}, {"uuid": "ffbf8d63-d05d-4ef9-a41f-4f55252e56a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5872", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805966910344177", "content": "", "creation_timestamp": "2025-01-10T20:34:03.711335Z"}, {"uuid": "6d4a61d0-283e-4ffb-8f25-69b883bbf4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5872", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4gh53kt22", "content": "", "creation_timestamp": "2025-01-10T21:15:41.636905Z"}, {"uuid": "71363d71-57db-478b-a0e0-1e950c0588e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg5oxnhqb2k", "content": "", "creation_timestamp": "2025-01-10T21:38:21.716848Z"}, {"uuid": "f14ebccd-2a2c-41ea-b02e-1bde9113f913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "448e3ca1-db0c-4ee0-9d04-ef83229df319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dh63lu26", "content": "", "creation_timestamp": "2025-03-25T21:05:03.884385Z"}, {"uuid": "1686624c-54d8-4d49-b196-4dc40cc3bd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5850", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulu3kad22z", "content": "", "creation_timestamp": "2025-02-11T02:19:25.033097Z"}, {"uuid": "ff462f27-e382-4452-9295-82785da4a048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58047", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp2acmc2t", "content": "", "creation_timestamp": "2025-03-04T10:59:18.184973Z"}, {"uuid": "5426b6be-a51e-4513-9285-44dfb8cfb039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp2kofy2l", "content": "", "creation_timestamp": "2025-03-04T10:59:18.747836Z"}, {"uuid": "70ab05e0-7e7a-4fc2-930f-b596f5e4c49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://t.me/brutsecurity/1837", "content": "", "creation_timestamp": "2026-07-09T03:00:08.436310Z"}, {"uuid": "aee2c081-7f0e-4b73-9013-caff1fe10cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58050", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp2rzqx2s", "content": "", "creation_timestamp": "2025-03-04T10:59:19.815568Z"}, {"uuid": "ce222751-47cb-45fd-8428-f011713f44d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp2vrxw2t", "content": "", "creation_timestamp": "2025-03-04T10:59:20.384086Z"}, {"uuid": "c164860f-353d-4f40-ba7f-6b097043eee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58043", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp3ayec26", "content": "", "creation_timestamp": "2025-03-04T10:59:21.993138Z"}, {"uuid": "31b6f11e-19f0-4acc-9335-f79908882595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58005", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114074439452883259", "content": "", "creation_timestamp": "2025-02-27T06:30:09.368427Z"}, {"uuid": "f152fe76-8df3-442d-bd2e-0cadbbfd8099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58013", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114074492119181808", "content": "", "creation_timestamp": "2025-02-27T06:43:33.296838Z"}, {"uuid": "d81efbbb-ca82-4d75-b9f9-bd20c4262900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58044", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp3qz7c2t", "content": "", "creation_timestamp": "2025-03-04T10:59:23.599772Z"}, {"uuid": "2e8e17fe-bf68-466d-a4de-210819b1108c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp3zv5v2p", "content": "", "creation_timestamp": "2025-03-04T10:59:24.682585Z"}, {"uuid": "3d540930-e7ab-4e1f-9324-e0818364b5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58044", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114103863929649834", "content": "", "creation_timestamp": "2025-03-04T11:13:11.284263Z"}, {"uuid": "92adb062-0c68-400c-a4d7-2a33a21521d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "b7692f12-881a-45ff-9e1d-9340abe058fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58018", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114074706450221357", "content": "", "creation_timestamp": "2025-02-27T07:38:03.512649Z"}, {"uuid": "d68e7177-3ab5-4ce0-b7a8-331c09e6afb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58083", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114116643141768200", "content": "", "creation_timestamp": "2025-03-06T17:23:06.624461Z"}, {"uuid": "bfba6a01-2634-4eb7-a919-4a8d027e103a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58083", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkguakt2u", "content": "", "creation_timestamp": "2025-03-06T19:54:48.127081Z"}, {"uuid": "097db3aa-cc65-4e00-8698-80e3bf00b66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58082", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkh5ma22r", "content": "", "creation_timestamp": "2025-03-06T19:54:48.741449Z"}, {"uuid": "44e2ab26-3173-4e3f-9873-2ff0d4bd8344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkhb4v72f", "content": "", "creation_timestamp": "2025-03-06T19:54:49.288852Z"}, {"uuid": "06053d0c-d29b-48ac-b126-279ff4e8e8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58080", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkherlp22", "content": "", "creation_timestamp": "2025-03-06T19:54:49.832741Z"}, {"uuid": "4fb7e872-2165-4d68-beba-c8c2f12e17d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkhi7mb2q", "content": "", "creation_timestamp": "2025-03-06T19:54:50.369016Z"}, {"uuid": "f86acc6d-1772-46ba-8023-95ae21e4e435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58081", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkhthsh2f", "content": "", "creation_timestamp": "2025-03-06T19:54:51.995417Z"}, {"uuid": "bf62092c-0d15-441e-bb14-0781a3b9aa63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ll7w3iarlo2w", "content": "", "creation_timestamp": "2025-03-25T18:37:22.571894Z"}, {"uuid": "29864779-720f-451a-94a8-8b1dfba64fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5888", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yia6kr2o", "content": "", "creation_timestamp": "2025-03-03T23:44:33.588544Z"}, {"uuid": "39207259-18ba-48d2-aa0c-7a6d546dcb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58087", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114156378535995607", "content": "", "creation_timestamp": "2025-03-13T17:48:21.230212Z"}, {"uuid": "052d1d63-78cb-424a-b95f-f5f0dfb25296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dg4pnj2l", "content": "", "creation_timestamp": "2025-03-25T21:04:58.723687Z"}, {"uuid": "eaf6f947-77ef-4359-a790-00e5b2eec032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58044", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114103532553942593", "content": "", "creation_timestamp": "2025-03-04T09:48:55.391192Z"}, {"uuid": "e9ecd999-00a1-4c17-ba61-9131c3b894f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58045", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114103532598040540", "content": "", "creation_timestamp": "2025-03-04T09:48:56.058357Z"}, {"uuid": "5e5602b1-e11a-4561-a6e0-0ad6b79f51ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58083", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrqf52eqqk2p", "content": "", "creation_timestamp": "2025-06-16T16:20:28.471065Z"}, {"uuid": "962cb856-5310-474b-8efd-3134c62586a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lm3g5iosxl2r", "content": "", "creation_timestamp": "2025-04-05T17:06:43.315563Z"}, {"uuid": "75336beb-0b7d-4b1b-8094-7a1582a0635c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lm4og2kstc26", "content": "", "creation_timestamp": "2025-04-06T05:07:20.019653Z"}, {"uuid": "f113056d-8940-4723-947c-b83bb9417016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lm4og32bi32f", "content": "", "creation_timestamp": "2025-04-06T05:07:21.339857Z"}, {"uuid": "3a89a28f-49c4-4d46-9ea3-0f60e8e05920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58133", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lm4og35nln2r", "content": "", "creation_timestamp": "2025-04-06T05:07:21.916820Z"}, {"uuid": "66e6cc92-e919-41a7-a68c-df263c18f5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58124", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114295107157946831", "content": "", "creation_timestamp": "2025-04-07T05:48:51.844447Z"}, {"uuid": "66803d3f-b244-4fcc-8db7-52fcde8f38e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58125", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114295107184442261", "content": "", "creation_timestamp": "2025-04-07T05:48:52.162116Z"}, {"uuid": "3830f0a0-dca3-43b0-94ad-f775c5a32bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58126", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114295107215178244", "content": "", "creation_timestamp": "2025-04-07T05:48:52.778665Z"}, {"uuid": "34c23c27-7541-4f87-a396-6fcb88cf8235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58127", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114295107264034867", "content": "", "creation_timestamp": "2025-04-07T05:48:53.438051Z"}, {"uuid": "55947c32-8e2d-4eb5-85be-da4b7311029d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58248", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lsxgphvxpl2n", "content": "", "creation_timestamp": "2025-07-02T05:02:28.602947Z"}, {"uuid": "52bbdd37-d3d9-461a-a257-cbe775c85231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58248", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lti4qfgrtc2r", "content": "", "creation_timestamp": "2025-07-08T20:19:17.864887Z"}, {"uuid": "47dd08c9-981d-4600-acd9-54e3d83efad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmglg4gkjf2g", "content": "", "creation_timestamp": "2025-04-10T03:40:18.552374Z"}, {"uuid": "e9ad3af4-119b-4ddc-b307-1a45462dc733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmgn76pwco2q", "content": "", "creation_timestamp": "2025-04-10T04:12:13.036766Z"}, {"uuid": "12cf1064-fc5b-4b9e-8682-b5b0bb9207bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114312092760617304", "content": "", "creation_timestamp": "2025-04-10T05:48:31.404087Z"}, {"uuid": "8f3264dc-3604-4df3-a873-74019bed1fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114314050654574442", "content": "", "creation_timestamp": "2025-04-10T14:06:26.927918Z"}, {"uuid": "231cb3e8-ca1f-49a6-8a84-b04d08aeddee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4bzajq2a", "content": "", "creation_timestamp": "2025-04-11T21:02:22.584593Z"}, {"uuid": "b99318b1-427a-4b7b-8d16-df42f294378c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmqq4wmtkq2h", "content": "", "creation_timestamp": "2025-04-14T04:31:16.418544Z"}, {"uuid": "dde46812-688e-4e93-b835-1c77fab9a526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmrbu7ismk27", "content": "", "creation_timestamp": "2025-04-14T09:48:32.136958Z"}, {"uuid": "0106d867-97c7-415e-b25f-e6f8311a8497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4135365", "content": "", "creation_timestamp": "2025-06-02T17:59:17.957059Z"}, {"uuid": "7e26ebcb-7c4a-47ad-90a5-f72131b40060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmwrjdo4xc2c", "content": "", "creation_timestamp": "2025-04-16T14:12:07.122378Z"}, {"uuid": "7747dafa-2e75-492f-9947-f3750fdfedaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmwrjdods22c", "content": "", "creation_timestamp": "2025-04-16T14:12:08.243031Z"}, {"uuid": "20517ace-b6e2-40c1-9c37-8588a9ef67dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtccygmr2c", "content": "", "creation_timestamp": "2025-04-16T14:44:03.818864Z"}, {"uuid": "01c51c1a-bcd9-4326-a7cf-c78379d2a30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3lq5gp6ahvc2m", "content": "", "creation_timestamp": "2025-05-27T10:03:17.241007Z"}, {"uuid": "883455b6-4c49-403b-8425-a03e76cdfe16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3lq5ip2rw5k2n", "content": "", "creation_timestamp": "2025-05-27T10:38:27.733329Z"}, {"uuid": "6899c679-2be7-482e-920c-b0f9096f2a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58013", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrl3tzdzz22b", "content": "", "creation_timestamp": "2025-06-14T13:51:03.893740Z"}, {"uuid": "10bbdb55-57c7-4561-b1fb-bffda5d510e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58013", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrl5s2raj22b", "content": "", "creation_timestamp": "2025-06-14T14:25:46.873230Z"}, {"uuid": "fb2b2bec-9d96-423f-9468-79a46ac6c4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58250", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lneoz2r3lz2l", "content": "", "creation_timestamp": "2025-04-22T03:04:27.256354Z"}, {"uuid": "4d31b0e7-9c80-4da4-bdb8-1812d6932cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58250", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114379567789555991", "content": "", "creation_timestamp": "2025-04-22T03:48:18.651536Z"}, {"uuid": "640487cf-7b3c-44a9-90d2-14ddbdab7d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "0c51d9b0-e422-4a35-aa09-33137169e9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58005", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "9d4b4120-0b72-44ba-867e-bb089337d207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fbrchr2j", "content": "", "creation_timestamp": "2025-04-23T21:14:36.397152Z"}, {"uuid": "4228baeb-80ca-42f0-ae00-a850e7c349ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58013", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrsh4eqe4k2v", "content": "", "creation_timestamp": "2025-06-17T12:01:12.983435Z"}, {"uuid": "2af63c93-49f3-4630-9821-c27b438b0834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lnqektzfev2v", "content": "", "creation_timestamp": "2025-04-26T18:29:30.085385Z"}, {"uuid": "23190e29-0ad9-496c-b3bb-baa263e366af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lnuj7finrt2f", "content": "", "creation_timestamp": "2025-04-28T10:03:13.355824Z"}, {"uuid": "c8d776c1-75a9-4daf-923f-cbc857b2495e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ltvwxkubqw2i", "content": "", "creation_timestamp": "2025-07-14T08:13:13.103457Z"}, {"uuid": "da893498-f01e-40cd-bd49-61943b81547a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lnumkjrsuu2e", "content": "", "creation_timestamp": "2025-04-28T11:03:08.942958Z"}, {"uuid": "cc2abec1-80c2-4899-99ae-41f647d81eff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://thehackernews.com/2025/04/hackers-exploit-critical-craft-cms.html", "content": "", "creation_timestamp": "2025-04-28T05:13:00.000000Z"}, {"uuid": "a8682f1c-2afc-4c83-90a4-d94acbba077c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnvrea65pc2y", "content": "", "creation_timestamp": "2025-04-28T22:01:51.044554Z"}, {"uuid": "4a4b11f1-230c-4528-992c-047c7a8d6bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnw7k4t3fq24", "content": "", "creation_timestamp": "2025-04-29T02:15:35.632464Z"}, {"uuid": "646d4b43-d645-462c-99ca-41366b30eaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lplxfznmww2h", "content": "", "creation_timestamp": "2025-05-20T11:13:54.060977Z"}, {"uuid": "69b38605-d0e2-4175-9a31-9a550fc5c2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lo7evf5bvw2t", "content": "", "creation_timestamp": "2025-05-02T17:45:19.717518Z"}, {"uuid": "a929cdd9-de09-454f-891a-52a55354d0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3929485", "content": "", "creation_timestamp": "2025-05-02T18:20:15.225766Z"}, {"uuid": "2c989b80-6a3a-42b6-b617-7ed0c8360159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7zvp6p7j2h", "content": "", "creation_timestamp": "2025-05-03T00:01:19.925574Z"}, {"uuid": "22d2df1d-95b0-4c72-8595-7bad44ebdf94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3loa5z5nwoc23", "content": "", "creation_timestamp": "2025-05-03T01:14:50.149086Z"}, {"uuid": "63ca2906-64b4-4ac2-885a-77d6e6cf96fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ltw5hm7l6j24", "content": "", "creation_timestamp": "2025-07-14T10:09:32.881278Z"}, {"uuid": "3a7d2506-80e6-4278-b54e-c28be92ae2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58135", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lob5yddgshq2", "content": "", "creation_timestamp": "2025-05-03T12:54:30.814032Z"}, {"uuid": "4276ab28-0f6c-4ec2-9210-dfee4ecdb0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58135", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lobj437bxg24", "content": "", "creation_timestamp": "2025-05-03T14:05:59.137482Z"}, {"uuid": "2ef3f26d-2cd1-4cfe-8153-75af971899bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lobwjlvi2r2o", "content": "", "creation_timestamp": "2025-05-03T18:06:13.247688Z"}, {"uuid": "a60084b2-53e3-40da-8960-6424451aadef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58134", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lobutqr755t2", "content": "", "creation_timestamp": "2025-05-03T19:37:35.880861Z"}, {"uuid": "ab2f3f63-fbf6-4b65-aa65-2adf25b94d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3loc7ugnep22r", "content": "", "creation_timestamp": "2025-05-03T20:53:20.619420Z"}, {"uuid": "01c5470c-783d-42e8-82d1-f7044d58fe69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3locaehqeqx2x", "content": "", "creation_timestamp": "2025-05-03T21:02:17.484902Z"}, {"uuid": "9f08be8f-66e9-4aef-9551-15680d95a3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3locsbg5znm2d", "content": "", "creation_timestamp": "2025-05-04T02:22:41.531767Z"}, {"uuid": "467212fc-5c7f-4034-9eef-311136bc621d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114455911703454153", "content": "", "creation_timestamp": "2025-05-05T15:23:34.046949Z"}, {"uuid": "533fafed-af3f-46e1-9f04-986626ee50c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58098", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrd7ubfp2w", "content": "", "creation_timestamp": "2025-05-05T16:16:27.603595Z"}, {"uuid": "1844349f-cd9b-40f1-97dd-1c4126f88c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrda2vmu22", "content": "", "creation_timestamp": "2025-05-05T16:16:29.029882Z"}, {"uuid": "028d0615-cf35-45bd-a204-e52d03640354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrdaeww422", "content": "", "creation_timestamp": "2025-05-05T16:16:30.867601Z"}, {"uuid": "b3ed19e1-93cd-4727-994b-562cea7cdc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lok5i2zgk32j", "content": "", "creation_timestamp": "2025-05-07T00:31:54.268965Z"}, {"uuid": "aea5a99c-7580-46e3-9034-92d929826bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3ltwdmmlb432g", "content": "", "creation_timestamp": "2025-07-14T11:59:43.791993Z"}, {"uuid": "5455d753-656a-425e-badb-ed5376c8ea94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://bsky.app/profile/it-administrator.de/post/3lomj6ipl6w2c", "content": "", "creation_timestamp": "2025-05-07T23:06:37.523604Z"}, {"uuid": "a90ba0a5-2988-4ff5-9c8b-96759754cb1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5805", "type": "seen", "source": "https://bsky.app/profile/it-administrator.de/post/3lomj6ipl6w2c", "content": "", "creation_timestamp": "2025-05-07T23:06:37.624245Z"}, {"uuid": "d4595034-c4af-49e9-871c-daff46fa05cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lomj6q5fsd2z", "content": "", "creation_timestamp": "2025-05-07T23:06:44.652594Z"}, {"uuid": "005fd16d-06f6-4389-9fcf-9bd81994c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58254", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt6ykgen7v2s", "content": "", "creation_timestamp": "2025-07-05T05:10:25.058758Z"}, {"uuid": "b15d4f55-02e3-4644-9525-d6a497b44eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-12)", "content": "", "creation_timestamp": "2025-05-12T00:00:00.000000Z"}, {"uuid": "32f1283a-eb03-4045-ab94-f8980997cd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wgrfos2w", "content": "", "creation_timestamp": "2025-05-14T22:57:22.831800Z"}, {"uuid": "85b7ce6b-e3d4-4da8-a77f-c09fe53bad57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://t.me/brutsecurity/1837", "content": "", "creation_timestamp": "2026-07-10T00:00:31.960339Z"}, {"uuid": "1318ca1a-8b0a-4135-8b03-59d17b1d66da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdm2x7o24", "content": "", "creation_timestamp": "2025-07-17T21:02:27.051732Z"}, {"uuid": "c7c10988-b2eb-4350-a821-9239d55c9d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-58136.yaml", "content": "", "creation_timestamp": "2025-07-22T08:47:42.000000Z"}, {"uuid": "f7cdfcff-44bc-46b2-ae09-5f54794011f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw55nfye24", "content": "", "creation_timestamp": "2025-07-23T21:02:27.442694Z"}, {"uuid": "25e1302f-65ec-4825-ba6b-1a2f702a65a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "c2d236bd-a0d4-4719-954d-ca04578f5ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3m2ag4nou3e22", "content": "", "creation_timestamp": "2025-10-02T20:42:16.337262Z"}, {"uuid": "91920967-df67-4699-88d3-3cd08774e0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "924d32a7-3647-413a-89f5-4f0d6a8285f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58274", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115418687746464898", "content": "", "creation_timestamp": "2025-10-22T16:10:10.995597Z"}, {"uuid": "29dc2e90-2db8-437d-9f4d-302754a410a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvuqslrtq42p", "content": "", "creation_timestamp": "2025-08-08T07:40:46.505300Z"}, {"uuid": "0ea1c150-c535-456e-a109-a71a9954befe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58256", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvureit5xd2p", "content": "", "creation_timestamp": "2025-08-08T07:50:47.203106Z"}, {"uuid": "8d4a0c9c-6758-494a-897e-cc82f95d5e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58257", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lvv73vcys725", "content": "", "creation_timestamp": "2025-08-08T11:56:30.901048Z"}, {"uuid": "1e2973d5-709f-4e3c-a7d2-c0d6969ab0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:15.000000Z"}, {"uuid": "14053433-59e7-4120-baa9-85c7d3eb582c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "298327ba-98d3-4974-b58a-8dd44ea07129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58083", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbhkuhc3x2p", "content": "", "creation_timestamp": "2025-08-13T09:00:00.078432Z"}, {"uuid": "e2fa469f-f662-456e-b39e-20c49da86f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58250", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbhnj2su523", "content": "", "creation_timestamp": "2025-08-13T09:01:28.918992Z"}, {"uuid": "7a2fea2c-4151-461e-bcfa-4f08b49d630e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58272", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4h4ouqoee2x", "content": "", "creation_timestamp": "2025-10-30T23:32:31.716677Z"}, {"uuid": "de5630a5-751e-4126-b2bf-e05c488dda47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58266", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwctrzezrc2c", "content": "", "creation_timestamp": "2025-08-13T22:11:28.977305Z"}, {"uuid": "bd2747a3-cc5f-4ecc-8d4d-906f748354df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4h6pheqrz2u", "content": "", "creation_timestamp": "2025-10-31T00:08:38.785871Z"}, {"uuid": "30ef74f8-46c1-4693-abcc-0c90ab7884d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58076", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "8c49a621-f8ed-4863-b57d-43e0c7a3cd1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58043", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "7715f87d-53cc-41e2-af8a-7f38850a8c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58044", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "5f4bd355-5ffb-4054-a6db-a70c8b8b39e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58045", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "5e666f2c-7ca5-4daa-aa65-92b161013431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58076", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:43.000000Z"}, {"uuid": "2de42c6d-d446-4699-b7e7-1123db78ab84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5888", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "f2441078-14ef-4a5d-868a-6e969fdabeb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58022", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "820c158d-e3e9-4136-b432-786ae140cadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5848", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "151be331-73d0-4e68-97cb-0517af244541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58042", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "eae94603-d448-48ff-b79d-c5267543dbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58267", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3m23gmyr4zi27", "content": "", "creation_timestamp": "2025-09-30T21:08:06.352425Z"}, {"uuid": "2f99441d-6419-4c16-91d4-8ab3af31b6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/progress_moveit_sftp_fileread_cve_2024_5806.rb", "content": "", "creation_timestamp": "2024-07-08T15:29:44.000000Z"}, {"uuid": "783ee2e9-0209-4008-ba2b-2a902e191603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58274", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb25ksy326", "content": "", "creation_timestamp": "2025-10-23T21:02:34.463390Z"}, {"uuid": "7a64b880-c702-48e1-b13c-51b326281d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58101", "type": "seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3m33435oanj2u", "content": "", "creation_timestamp": "2025-10-13T11:24:21.575821Z"}, {"uuid": "f1d8c8e3-1c95-47c4-ac60-b937869e35c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3r6qdisvi2o", "content": "", "creation_timestamp": "2025-10-22T06:10:34.063202Z"}, {"uuid": "469fee8b-96a2-4121-91e0-984e69ddec82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58259", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lxqsqoayhp2o", "content": "", "creation_timestamp": "2025-09-01T04:55:14.672829Z"}, {"uuid": "ba1fbe7d-d0c3-45f2-b7c6-b0f2bb309ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58259", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxu6rvotrv2p", "content": "", "creation_timestamp": "2025-09-02T13:08:39.460125Z"}, {"uuid": "8b460e0b-23ef-4d32-9896-2d091a36a4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58277", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m774aibsn52s", "content": "", "creation_timestamp": "2025-12-04T23:18:45.658495Z"}, {"uuid": "ec51624b-5511-4507-ac2f-45b121c86e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58278", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m774fuckty2n", "content": "", "creation_timestamp": "2025-12-04T23:21:46.201175Z"}, {"uuid": "edab0b68-2cda-4056-a577-9b8f3bfe0afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7752ajtcw2n", "content": "", "creation_timestamp": "2025-12-04T23:33:10.232473Z"}, {"uuid": "89cc7fa3-fb5f-4536-b4aa-888bdbbdc260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58275", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m775d6yu4e2w", "content": "", "creation_timestamp": "2025-12-04T23:38:10.309008Z"}, {"uuid": "802377a9-a049-4f2b-95d5-e6d1225407f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58280", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3m7o2nr2kvp2k", "content": "", "creation_timestamp": "2025-12-10T22:00:19.980124Z"}, {"uuid": "8691f41e-f242-4eea-900f-aabc63141825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58283", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7oalhd7xg2q", "content": "", "creation_timestamp": "2025-12-10T23:46:25.090194Z"}, {"uuid": "475f0443-e889-4021-9c85-76ab85810579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7oaufqj2v2c", "content": "", "creation_timestamp": "2025-12-10T23:51:25.432953Z"}, {"uuid": "bf7f4460-8331-4ca5-8e08-2993311f38f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58284", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7ob5e5sbf2y", "content": "", "creation_timestamp": "2025-12-10T23:56:25.656417Z"}, {"uuid": "507f7451-1140-4f66-b9b7-e60350a44f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7obgckvdh2c", "content": "", "creation_timestamp": "2025-12-11T00:01:26.283854Z"}, {"uuid": "1f092c76-6fa6-4cd1-a74f-97578fdcb816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58307", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qpgia7gt2c", "content": "", "creation_timestamp": "2025-12-11T23:17:23.597841Z"}, {"uuid": "0d0864a9-1db3-4005-b3e3-5618631f4cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qpk2yl3q2m", "content": "", "creation_timestamp": "2025-12-11T23:19:24.300940Z"}, {"uuid": "312064c1-10b9-4bd5-9cbc-902f5b78d0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qpnvwbve2o", "content": "", "creation_timestamp": "2025-12-11T23:21:32.976683Z"}, {"uuid": "298cc78d-43a4-4b0a-af97-c6d68dc95d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qps2d45q2u", "content": "", "creation_timestamp": "2025-12-11T23:23:51.774653Z"}, {"uuid": "401b64db-5cf4-4e65-8076-9b08c4930973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qqascrhb2e", "content": "", "creation_timestamp": "2025-12-11T23:32:06.542390Z"}, {"uuid": "0549140e-402d-4dc0-8a2d-f893b419b4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58312", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qqgreuut2m", "content": "", "creation_timestamp": "2025-12-11T23:35:27.089048Z"}, {"uuid": "696f43f1-98af-47a8-a7d0-e627073f1389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qqnic5ze2o", "content": "", "creation_timestamp": "2025-12-11T23:39:12.370348Z"}, {"uuid": "fe7f71c3-3b8f-4bb6-958f-2bedd950c5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qqv5vo3k2y", "content": "", "creation_timestamp": "2025-12-11T23:43:29.939062Z"}, {"uuid": "37c2ee5a-df98-41ad-a631-8cb48d98e2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7qsbwdfmd2q", "content": "", "creation_timestamp": "2025-12-12T00:08:32.071581Z"}, {"uuid": "c7974185-1997-4aa7-88ac-c4c49bcb30b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58299", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7sxxqvu6g2m", "content": "", "creation_timestamp": "2025-12-12T20:55:33.066485Z"}, {"uuid": "39455b36-ea19-4cd9-beba-fba7e512ed44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58305", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7sy6huv4x2y", "content": "", "creation_timestamp": "2025-12-12T20:59:18.537174Z"}, {"uuid": "40452195-b6f3-40bd-aef4-8da5dbcb435c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7syp3suaz2y", "content": "", "creation_timestamp": "2025-12-12T21:08:36.039981Z"}, {"uuid": "0aa31e58-4477-49a2-abc0-dc4eba8e9007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58316", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7szaz4bvd2e", "content": "", "creation_timestamp": "2025-12-12T21:18:42.079070Z"}, {"uuid": "4f39dbbc-42d2-43ab-8bf0-485297a947aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58314", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7szjxjjzb2m", "content": "", "creation_timestamp": "2025-12-12T21:23:37.233276Z"}, {"uuid": "c78d09f6-c8b7-4bb3-8f14-cecbf3456a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mb7kpdn6ki2q", "content": "", "creation_timestamp": "2025-12-30T14:28:00.122967Z"}, {"uuid": "0d82fb6c-c154-4ae9-a9c5-ea8d72e3d40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mb7lbahkob2c", "content": "", "creation_timestamp": "2025-12-30T14:38:00.641656Z"}, {"uuid": "561035d3-b131-42f9-870f-af6f9a86c938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mb7lgmrajq2x", "content": "", "creation_timestamp": "2025-12-30T14:41:01.242905Z"}, {"uuid": "e9365223-3dd5-4b75-b596-9299a4d9cbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mb7lkhp7uk2c", "content": "", "creation_timestamp": "2025-12-30T14:43:17.672118Z"}, {"uuid": "1d5d0736-eefb-41d9-a18f-3e2d8dc9cf36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mb7lom3b5z2g", "content": "", "creation_timestamp": "2025-12-30T14:45:38.269409Z"}, {"uuid": "38bc4055-2d47-44af-bcba-fe28083b007a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mb7m5duhit2x", "content": "", "creation_timestamp": "2025-12-30T14:53:43.654882Z"}, {"uuid": "3a5a03f8-c3e6-457c-b691-813d823cb097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58337", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115815269338639320", "content": "", "creation_timestamp": "2025-12-31T17:06:05.499556Z"}, {"uuid": "c61eb859-a6ce-41f8-8fe1-cb8f38631ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58315", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcrahuw4s22", "content": "", "creation_timestamp": "2025-12-31T21:03:06.500386Z"}, {"uuid": "3e850d16-e93f-4b99-bdf6-0b74c73197b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58336", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcrahxpoy2t", "content": "", "creation_timestamp": "2025-12-31T21:03:07.036862Z"}, {"uuid": "77f6408d-ea29-4758-9053-68cd8206d760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58337", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcrai2idx2f", "content": "", "creation_timestamp": "2025-12-31T21:03:07.563698Z"}, {"uuid": "87a365ce-b8fd-4169-a66e-0be2b432388a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58339", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcbgtw6kae2x", "content": "", "creation_timestamp": "2026-01-13T01:49:29.629292Z"}, {"uuid": "656bff55-82ab-490e-abb5-72ba438f2e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcbiegwuie2x", "content": "", "creation_timestamp": "2026-01-13T02:16:37.794393Z"}, {"uuid": "cf84e6cb-2001-4b53-be9d-f0fc04f4f0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://gist.github.com/alon710/2a695b0dc07ec2537a058e23b8f57e2c", "content": "", "creation_timestamp": "2026-01-24T21:30:30.000000Z"}, {"uuid": "f32dee63-e728-453e-9ede-60c181c59d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://gist.github.com/alon710/749642a4c5a52e36d0db3e64d2c75bca", "content": "", "creation_timestamp": "2026-01-24T21:30:28.000000Z"}, {"uuid": "a1c228f3-b3a1-4967-9574-b351deb545d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://gist.github.com/alon710/2aefa5a1cac1ffda8f17832de16092fe", "content": "", "creation_timestamp": "2026-01-24T21:30:32.000000Z"}, {"uuid": "1b473df5-48a3-41c9-83ea-82aa6157349c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://gist.github.com/alon710/7afee0101554e494a814c29b06fb7fa2", "content": "", "creation_timestamp": "2026-01-24T21:30:27.000000Z"}, {"uuid": "357ff593-bf83-4642-8827-6a8bfc30cecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://gist.github.com/alon710/944343f8cadc06029c6b4fd5ce3f1c93", "content": "", "creation_timestamp": "2026-01-24T22:42:32.000000Z"}, {"uuid": "aef49950-bffa-475c-ae98-b9e9c74bab49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://gist.github.com/alon710/7454d103d091c945bfb61ddbbab92434", "content": "", "creation_timestamp": "2026-01-24T22:42:29.000000Z"}, {"uuid": "280bf304-7782-4819-b8ef-fb2de7e63f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58340", "type": "seen", "source": "https://gist.github.com/ragettostudio/85f4f660c32a41c3af0771080e11b64b", "content": "", "creation_timestamp": "2026-03-15T11:48:44.000000Z"}, {"uuid": "46d12ee1-1998-4b8d-bc8e-f3d361153401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58340", "type": "seen", "source": "https://gist.github.com/ragettostudio/b695c76056182ede5b711cd9fd0988e2", "content": "", "creation_timestamp": "2026-03-15T12:22:13.000000Z"}, {"uuid": "cbba2496-1f0c-4557-b25f-d953256537aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58340", "type": "seen", "source": "https://gist.github.com/ragettostudio/955b0a7a9d26c832b3f8fc3336986f09", "content": "", "creation_timestamp": "2026-03-15T12:42:44.000000Z"}, {"uuid": "64bfc026-7700-4bdc-94cb-c6125f9f26f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58238", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d1914bf3-4eea-4ff1-b094-11f6fa536ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58241", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4891521c-8efe-41f3-b16c-331b7677d9b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58100", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ad6e4736-ff1a-4d8b-9f48-149af0706ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58098", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "237c2a4a-056f-4917-9417-4ac64588c92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58097", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "95a2def4-8a2e-4b2f-a848-5a15fe5dde37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58095", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d2d30c84-034b-48c2-89a7-58ceb47dcb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58094", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e5a17362-dc79-4a6b-8349-2371f5e4936a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58089", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "3b086a72-4196-42ac-a891-2ccd6d242d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58096", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "da6701b6-06f0-4d9a-bae1-b152bd46865b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58012", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "9cac49fd-7db1-4a9e-9dae-0ca271d0dcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58013", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "9a69b343-0fe5-4f57-8f8d-85c91b631faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58015", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "55eab12d-3594-4258-b7cd-b0ef68878c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58018", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "739a36d5-ddda-4917-8ac6-920f5a0969ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58019", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "5518a032-1278-4c6a-af9c-c79f106bc989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58053", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "5aa8b1d4-84bb-4cbb-ae79-4f08761059bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58054", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "586f26b2-91a6-4b7c-88b7-6dcf878a75ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58077", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "12ff20f9-b00d-4540-a06e-9b5242e1bb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58251", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "cc592a93-b2b3-47f6-8015-25ea2120776f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e751d435-78f2-4182-8753-6b564a5f1dce", "content": "", "creation_timestamp": "2026-02-02T12:26:02.602521Z"}, {"uuid": "d6fde1fe-dddd-417d-8672-411486597425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58344", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3w47ir3n2p", "content": "", "creation_timestamp": "2026-04-22T16:28:13.930767Z"}, {"uuid": "755ad987-c00f-4ddd-ae32-52d0d35e4035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "6a35db26-54eb-47e1-bc51-67eb13e977b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5827", "type": "seen", "source": "https://gist.github.com/YLChen-007/251cb05f6b16f03e75e9f6c80ea3162f", "content": "", "creation_timestamp": "2026-02-27T04:04:35.000000Z"}, {"uuid": "dc0696c8-c8c2-4f34-9dfa-a34073d364a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58343", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjnolmlybi2p", "content": "", "creation_timestamp": "2026-04-17T00:36:19.497777Z"}, {"uuid": "d8df04ba-87c5-4b1d-b418-0f366f39c317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvn62m54b2t", "content": "", "creation_timestamp": "2026-03-25T17:41:46.299242Z"}, {"uuid": "d46d496b-3603-451d-857a-5fabff2ea289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58341", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhvqym677p2e", "content": "", "creation_timestamp": "2026-03-25T18:50:17.528382Z"}, {"uuid": "414ebfe2-f7be-4a56-9870-727c81eefe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "ba6334c0-dc17-4d90-9d7b-14702aa88fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "474df549-64bc-45f0-9980-c22eb6440526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58341", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mi3nck32ef23", "content": "", "creation_timestamp": "2026-03-28T03:00:14.242857Z"}, {"uuid": "00656765-9a67-45fb-a9a3-84b9d2e99440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e751d435-78f2-4182-8753-6b564a5f1dce", "content": "", "creation_timestamp": "2026-02-02T12:26:02.602521Z"}, {"uuid": "edaf882c-3b22-4c52-a590-a0a65977e6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58053", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9ac1aa3a-6355-41d5-b283-908cb9309c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58094", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9ce703a9-0d3b-4210-8137-c4f79d365b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58034", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "33fda916-b013-4c58-907e-fa47aa40c31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58240", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "2eec6e85-f91a-4d99-8696-0d68ecfcdf5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58241", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4148e009-dbf4-40b5-bbbc-4dd242a8a78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58089", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e34dd748-3b5c-4fc9-9ebd-5226e18d7cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58005", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "2c234409-683c-40a1-a5bc-5d13f0d3d5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58093", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "71bed6bf-24d6-40c9-abce-1d524c9dfd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58016", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "bd320a73-3bbb-433a-8393-ced98ef50242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58095", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f47eaeb9-c587-40b8-ab15-568f5c3b25b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5805", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/1dca9c72-3904-4b4f-b553-ba8d0b505998", "content": "", "creation_timestamp": "2024-11-12T17:22:11.893255Z"}, {"uuid": "8624f532-f1f0-46b8-9b33-4e8874131204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/1dca9c72-3904-4b4f-b553-ba8d0b505998", "content": "", "creation_timestamp": "2024-11-12T17:22:11.893255Z"}, {"uuid": "c783c22a-8ac2-4a0c-88e9-2fecf9082fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58047", "type": "seen", "source": "https://t.me/cvedetector/19478", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58047 - Apache Media Library Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58047 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Permission verification vulnerability in the media library module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:53.000000Z"}, {"uuid": "cb17420a-17e6-4ad7-9a73-b197740cd493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58046", "type": "seen", "source": "https://t.me/cvedetector/19477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58046 - \"Kaspersky Lock Screen Permission Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-58046 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Permission management vulnerability in the lock screen module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:52.000000Z"}, {"uuid": "244ef45c-bfda-42af-a8b5-626b7baa4fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58043", "type": "seen", "source": "https://t.me/cvedetector/19481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58043 - \"Windows Permission Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-58043 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Permission bypass vulnerability in the window module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:58.000000Z"}, {"uuid": "82f5cb12-4cc6-41cb-8992-09a8e75f50e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58049", "type": "seen", "source": "https://t.me/cvedetector/19480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58049 - Apache Struts Permission Verification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58049 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Permission verification vulnerability in the media library module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:57.000000Z"}, {"uuid": "eec876dd-3bd0-4061-bf5a-42585a8c6ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58045", "type": "seen", "source": "https://t.me/cvedetector/19483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58045 - Apache Media Copyright Protection Module Concurrency Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58045 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Multi-concurrency vulnerability in the media digital copyright protection module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:59:00.000000Z"}, {"uuid": "c7a09f7d-fefb-4fd0-9a69-00c1eed3ea24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58044", "type": "seen", "source": "https://t.me/cvedetector/19482", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58044 - Apache Notification Module Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-58044 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Permission verification bypass vulnerability in the notification module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:59.000000Z"}, {"uuid": "1f00bb0b-a46e-41f8-9330-133e421c7362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58048", "type": "seen", "source": "https://t.me/cvedetector/19479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58048 - Apache Package Manager Deadlock\", \n  \"Content\": \"CVE ID : CVE-2024-58048 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Multi-thread problem vulnerability in the package management module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:54.000000Z"}, {"uuid": "7c17439f-c620-4868-b052-e17089b0f0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58050", "type": "seen", "source": "https://t.me/cvedetector/19476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58050 - Apache HTTP Server File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58050 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Vulnerability of improper access permission in the HDC module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:51.000000Z"}, {"uuid": "ac717dc9-33a1-4c1a-9fd5-3dcb25783427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5888", "type": "seen", "source": "https://t.me/cvedetector/19417", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5888 - ArcGIS Server Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5888 \nPublished : March 3, 2025, 8:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 10.9.1 \u2013 11.3 that may allow a remote, authenticated attacker to create a stored crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim\u2019s browser.  The privileges required to execute this attack are high, requiring publisher capabilities.  The impact is low to both confidentiality and integrity while having no impact to availability. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T23:56:23.000000Z"}, {"uuid": "a7ea6bf5-ef3a-4101-86e3-af1f73c4bb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58082", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58082\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: nuvoton: Fix an error check in npcm_video_ece_init()\n\nWhen function of_find_device_by_node() fails, it returns NULL instead of\nan error code. So the corresponding error check logic should be modified\nto check whether the return value is NULL and set the error code to be\nreturned as -ENODEV.\n\ud83d\udccf Published: 2025-03-06T16:13:44.896Z\n\ud83d\udccf Modified: 2025-05-04T10:09:39.779Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/bdd823b9d068284e1d998b962cfef29236365df3\n2. https://git.kernel.org/stable/c/c36b830754ae1dd1db41c27f57b29267878f9702\n3. https://git.kernel.org/stable/c/c4b7779abc6633677e6edb79e2809f4f61fde157", "creation_timestamp": "2025-05-04T11:19:07.000000Z"}, {"uuid": "dec76524-97a3-4511-8982-e55dae138f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "Telegram/CVvl4yAxD11343Smp8Poq2G7FUDQCjpXFFsP9PDh3yduS2g", "content": "", "creation_timestamp": "2024-10-20T18:42:21.000000Z"}, {"uuid": "15075963-e18d-4223-b418-23b7f4ba382d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58011", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "d8ac4b19-b69f-4194-a768-e792a53ff045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "published-proof-of-concept", "source": "Telegram/c9mxF0xUgnweIqFG-7qFhNjFM98zK9XRzRCqE5Wws_VSdzI", "content": "", "creation_timestamp": "2025-11-21T21:00:05.000000Z"}, {"uuid": "2d209cea-799b-4dc6-9a7d-e5ce32ddcaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58011", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260408", "content": "", "creation_timestamp": "2026-04-07T18:00:00.000000Z"}, {"uuid": "1275b0ad-f192-4957-b3fb-eea4fe8fb5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58102", "type": "seen", "source": "https://t.me/cvedetector/20061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58102 - Datalust Seq Stack Consumption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58102 \nPublished : March 11, 2025, 8:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T11:46:27.000000Z"}, {"uuid": "dd7d186a-31c1-4bcb-a6d6-814065c6fd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8764", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension. \nURL\uff1ahttps://github.com/ading2210/CVE-2024-6778-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-17T05:21:34.000000Z"}, {"uuid": "b9b1f96a-394f-4e1a-a63b-17873b95dc83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5848", "type": "seen", "source": "https://t.me/cvedetector/19027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5848 - WSO2 Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5848 \nPublished : Feb. 27, 2025, 8:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper input validation. User-supplied data is directly included in server responses from vulnerable service endpoints without proper sanitization or encoding, allowing an attacker to inject malicious JavaScript.  \n  \nSuccessful exploitation could lead to UI manipulation, redirection to malicious websites, or data exfiltration from the browser. While session-related sensitive cookies are protected with the httpOnly flag, mitigating session hijacking risks, the impact may vary depending on gateway-level service restrictions. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T10:22:16.000000Z"}, {"uuid": "22fdcf3b-194a-4403-aa76-ce8d6c3d4c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/13711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58136\n\ud83d\udd25 CVSS Score: 9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.\n\ud83d\udccf Published: 2025-04-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T16:21:37.070Z\n\ud83d\udd17 References:\n1. https://github.com/yiisoft/yii2/pull/20232\n2. https://github.com/yiisoft/yii2/pull/20232#issuecomment-2252459709\n3. https://github.com/yiisoft/yii2/commit/40fe496eda529fd1d933b56a1022ec32d3cd0b12\n4. https://github.com/yiisoft/yii2/compare/2.0.51...2.0.52\n5. https://www.yiiframework.com/news/709/please-upgrade-to-yii-2-0-52", "creation_timestamp": "2025-04-28T17:10:43.000000Z"}, {"uuid": "633aebb4-d9d3-4964-8e9b-73c74ff8452d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://t.me/exploits666/23", "content": "Move it transfer exploit update: 22/11/24 stay tuned until then.\nMOVEit Transfer CVE-2024-5806\nWill make this AUTO and will make it attack in bulk as I know what your requirements are ^_^ if you want me to add anything custom to exploit DM now !!!!", "creation_timestamp": "2024-11-21T23:19:44.000000Z"}, {"uuid": "433e5e63-7154-4730-ba43-59ebafa961c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58099", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13799", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58099\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame\n\nAndrew and Nikolay reported connectivity issues with Cilium's service\nload-balancing in case of vmxnet3.\n\nIf a BPF program for native XDP adds an encapsulation header such as\nIPIP and transmits the packet out the same interface, then in case\nof vmxnet3 a corrupted packet is being sent and subsequently dropped\non the path.\n\nvmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp()\nthrough vmxnet3_xdp_xmit_back() calculates an incorrect DMA address:\n\n  page = virt_to_page(xdpf->data);\n  tbi->dma_addr = page_pool_get_dma_addr(page) +\n                  VMXNET3_XDP_HEADROOM;\n  dma_sync_single_for_device(&adapter->pdev->dev,\n                             tbi->dma_addr, buf_size,\n                             DMA_TO_DEVICE);\n\nThe above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP\nBPF program could have moved xdp->data. While the passed buf_size is\ncorrect (xdpf->len), the dma_addr needs to have a dynamic offset which\ncan be calculated as xdpf->data - (void *)xdpf, that is, xdp->data -\nxdp->data_hard_start.\n\ud83d\udccf Published: 2025-04-29T11:45:30.997Z\n\ud83d\udccf Modified: 2025-04-29T11:45:30.997Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/59ba6cdadb9c26b606a365eb9c9b25eb2052622d\n2. https://git.kernel.org/stable/c/f82eb34fb59a8fb96c19f4f492c20eb774140bb5\n3. https://git.kernel.org/stable/c/4678adf94da4a9e9683817b246b58ce15fb81782", "creation_timestamp": "2025-04-29T12:12:30.000000Z"}, {"uuid": "b02c9f40-960a-42f6-998d-40034c859ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "Telegram/WPvCxx3ui9KkigoynuvpOxasy_LhM4F9O2G3Xs3Lgh5AwuY", "content": "", "creation_timestamp": "2024-08-18T23:07:03.000000Z"}, {"uuid": "b655181f-cd16-402b-adb1-8089f4928ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58107", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10663", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58107\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:33:15.998Z\n\ud83d\udccf Modified: 2025-04-07T03:33:15.998Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:42.000000Z"}, {"uuid": "1943239f-c806-4d5b-be50-e200c078497d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58012", "type": "seen", "source": "Telegram/NtkINS8IZg_QtmICWG6SwUhS-B5IFl2bvobFdsiWhvk2KlEx", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "1a9384c9-b839-4b24-b392-189adcb540b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58085", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58085\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ntomoyo: don't emit warning in tomoyo_write_control()\n\nsyzbot is reporting too large allocation warning at tomoyo_write_control(),\nfor one can write a very very long line without new line character. To fix\nthis warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE,\nfor practically a valid line should be always shorter than 32KB where the\n\"too small to fail\" memory-allocation rule applies.\n\nOne might try to write a valid line that is longer than 32KB, but such\nrequest will likely fail with -ENOMEM. Therefore, I feel that separately\nreturning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant.\nThere is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.\n\ud83d\udccf Published: 2025-03-06T16:22:32.761Z\n\ud83d\udccf Modified: 2025-03-06T16:22:32.761Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f\n2. https://git.kernel.org/stable/c/fe1c021eb03dae0dc9dce55e81f77a60e419a27a\n3. https://git.kernel.org/stable/c/c9382f380e8d09209b8e5c0def0545852168be25\n4. https://git.kernel.org/stable/c/414705c0303350d139b1dc18f329fe47dfb642dd\n5. https://git.kernel.org/stable/c/3df7546fc03b8f004eee0b9e3256369f7d096685", "creation_timestamp": "2025-03-06T16:34:06.000000Z"}, {"uuid": "5ef5f2a3-fd0a-4e7f-bc06-ee345bc2bd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58087", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58087\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix racy issue from session lookup and expire\n\nIncrement the session reference count within the lock for lookup to avoid\nracy issue with session expire.\n\ud83d\udccf Published: 2025-03-12T07:28:09.114Z\n\ud83d\udccf Modified: 2025-03-12T07:28:09.114Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2107ab40629aeabbec369cf34b8cf0f288c3eb1b\n2. https://git.kernel.org/stable/c/37a0e2b362b3150317fb6e2139de67b1e29ae5ff\n3. https://git.kernel.org/stable/c/450a844c045ff0895d41b05a1cbe8febd1acfcfd\n4. https://git.kernel.org/stable/c/a39e31e22a535d47b14656a7d6a893c7f6cf758c\n5. https://git.kernel.org/stable/c/b95629435b84b9ecc0c765995204a4d8a913ed52", "creation_timestamp": "2025-03-12T07:43:55.000000Z"}, {"uuid": "f20d3112-2439-491a-a755-70a00404e761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5848", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5656", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5848\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper input validation. User-supplied data is directly included in server responses from vulnerable service endpoints without proper sanitization or encoding, allowing an attacker to inject malicious JavaScript.\n\nSuccessful exploitation could lead to UI manipulation, redirection to malicious websites, or data exfiltration from the browser. While session-related sensitive cookies are protected with the httpOnly flag, mitigating session hijacking risks, the impact may vary depending on gateway-level service restrictions.\n\ud83d\udccf Published: 2025-02-27T07:08:07.346Z\n\ud83d\udccf Modified: 2025-02-27T07:08:07.346Z\n\ud83d\udd17 References:\n1. https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3450/", "creation_timestamp": "2025-02-27T07:25:08.000000Z"}, {"uuid": "e19f9c3a-dd62-446d-86f3-264659ec9fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58002", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5668", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58002\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Remove dangling pointers\n\nWhen an async control is written, we copy a pointer to the file handle\nthat started the operation. That pointer will be used when the device is\ndone. Which could be anytime in the future.\n\nIf the user closes that file descriptor, its structure will be freed,\nand there will be one dangling pointer per pending async control, that\nthe driver will try to use.\n\nClean all the dangling pointers during release().\n\nTo avoid adding a performance penalty in the most common case (no async\noperation), a counter has been introduced with some logic to make sure\nthat it is properly handled.\n\ud83d\udccf Published: 2025-02-27T02:12:00.223Z\n\ud83d\udccf Modified: 2025-02-27T12:57:18.966Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/4dbaa738c583a0e947803c69e8996e88cf98d971\n2. https://git.kernel.org/stable/c/438bda062b2c40ddd7df23b932e29ffe0a448cac\n3. https://git.kernel.org/stable/c/9edc7d25f7e49c33a1ce7a5ffadea2222065516c\n4. https://git.kernel.org/stable/c/221cd51efe4565501a3dbf04cc011b537dcce7fb", "creation_timestamp": "2025-02-27T13:27:34.000000Z"}, {"uuid": "71381565-073e-45b7-8551-a3444f6cda8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58049", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6347", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58049\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Permission verification vulnerability in the media library module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-03-04T07:20:00.112Z\n\ud83d\udccf Modified: 2025-03-04T07:20:00.112Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:48.000000Z"}, {"uuid": "feb5d07e-639e-4eb1-960d-9c8bad5be3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58043", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6354", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58043\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: Permission bypass vulnerability in the window module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-03-04T07:10:50.452Z\n\ud83d\udccf Modified: 2025-03-04T07:10:50.452Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:57.000000Z"}, {"uuid": "07e4def9-740e-4049-9ae1-379243005450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58044", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6353", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58044\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Permission verification bypass vulnerability in the notification module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-03-04T07:12:36.759Z\n\ud83d\udccf Modified: 2025-03-04T07:12:36.759Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:56.000000Z"}, {"uuid": "588b551f-306a-417d-9155-939ca995e91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58050", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6346", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58050\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Vulnerability of improper access permission in the HDC module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-03-04T07:21:29.387Z\n\ud83d\udccf Modified: 2025-03-04T07:21:29.387Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:48.000000Z"}, {"uuid": "7780610e-c66f-4745-9fd2-4aded3c39be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58046", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6350", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58046\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Permission management vulnerability in the lock screen module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-03-04T07:16:29.977Z\n\ud83d\udccf Modified: 2025-03-04T07:16:29.977Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:51.000000Z"}, {"uuid": "9f60b0b8-568e-4659-96c2-cafc5b88f796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58045", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58045\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Multi-concurrency vulnerability in the media digital copyright protection module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-03-04T07:15:38.953Z\n\ud83d\udccf Modified: 2025-03-04T07:15:38.953Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:54.000000Z"}, {"uuid": "c79de45a-bd41-4814-a298-4834250c978c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58047", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6349", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58047\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Permission verification vulnerability in the media library module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-03-04T07:18:07.685Z\n\ud83d\udccf Modified: 2025-03-04T07:18:07.685Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:50.000000Z"}, {"uuid": "e1ddcd6d-3580-4530-939b-a0a34bba573f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58048", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6348", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58048\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Multi-thread problem vulnerability in the package management module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-03-04T07:19:07.453Z\n\ud83d\udccf Modified: 2025-03-04T07:19:07.453Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:49.000000Z"}, {"uuid": "3904f4e1-fb41-4145-8c15-11aae3097e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8801", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58105\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. \n\nThis CVE address an addtional bypass not covered in CVE-2024-58104.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2025-03-25T17:37:39.464Z\n\ud83d\udccf Modified: 2025-03-26T03:55:23.754Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0018217", "creation_timestamp": "2025-03-26T04:25:37.000000Z"}, {"uuid": "5855897f-3e3c-4f37-a0c3-a90cd3db56ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58104\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. \n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2025-03-25T17:37:28.783Z\n\ud83d\udccf Modified: 2025-03-26T03:55:25.056Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0018217", "creation_timestamp": "2025-03-26T04:25:37.000000Z"}, {"uuid": "59ff7c0b-402b-4455-ae71-838f58891997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58086", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6698", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58086\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Stop active perfmon if it is being destroyed\n\nIf the active performance monitor (`v3d->active_perfmon`) is being\ndestroyed, stop it first. Currently, the active perfmon is not\nstopped during destruction, leaving the `v3d->active_perfmon` pointer\nstale. This can lead to undefined behavior and instability.\n\nThis patch ensures that the active perfmon is stopped before being\ndestroyed, aligning with the behavior introduced in commit\n7d1fd3638ee3 (\"drm/v3d: Stop the active perfmon before being destroyed\").\n\ud83d\udccf Published: 2025-03-06T16:28:23.042Z\n\ud83d\udccf Modified: 2025-03-06T16:28:23.042Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/95036d4c01167568166108d42c2b0e9f8dbd7d2b\n2. https://git.kernel.org/stable/c/eb0e0eca0eab93f310c6c37b8564049366704691\n3. https://git.kernel.org/stable/c/1c5673a2c8926adbb61f340c779b28e18188a8cd\n4. https://git.kernel.org/stable/c/f8805b12f477bd964e2820a87921c7b58cc2dee3\n5. https://git.kernel.org/stable/c/21f1435b1e6b012a07c42f36b206d2b66fc8f13b", "creation_timestamp": "2025-03-06T16:33:53.000000Z"}, {"uuid": "1da03a6f-a080-4c94-a719-b45256ae410e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58084", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6707", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58084\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()\n\nCommit 2e4955167ec5 (\"firmware: qcom: scm: Fix __scm and waitq\ncompletion variable initialization\") introduced a write barrier in probe\nfunction to store global '__scm' variable.  We all known barriers are\npaired (see memory-barriers.txt: \"Note that write barriers should\nnormally be paired with read or address-dependency barriers\"), therefore\naccessing it from concurrent contexts requires read barrier.  Previous\ncommit added such barrier in qcom_scm_is_available(), so let's use that\ndirectly.\n\nLack of this read barrier can result in fetching stale '__scm' variable\nvalue, NULL, and dereferencing it.\n\nNote that barrier in qcom_scm_is_available() satisfies here the control\ndependency.\n\ud83d\udccf Published: 2025-03-06T16:22:31.998Z\n\ud83d\udccf Modified: 2025-03-06T16:22:31.998Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/fee921e3c641f64185abee83f9a6e65f0b380682\n2. https://git.kernel.org/stable/c/e03db7c1255ebabba5e1a447754faeb138de15a2\n3. https://git.kernel.org/stable/c/b628510397b5cafa1f5d3e848a28affd1c635302", "creation_timestamp": "2025-03-06T16:34:07.000000Z"}, {"uuid": "d7d47e99-1c39-4691-999f-522de7c844e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58102", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58102\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C)\n\ud83d\udd39 Description: An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T07:53:21.454Z\n\ud83d\udd17 References:\n1. https://github.com/datalust/seq-tickets/issues/2367\n2. https://github.com/datalust/seq-tickets/issues/2086\n3. https://datalust.co/seq", "creation_timestamp": "2025-03-11T08:38:56.000000Z"}, {"uuid": "ce0dc9ba-6229-425f-93cc-973b10bf6459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7639", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5836\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)\n\ud83d\udccf Published: 2024-06-11T20:58:10.427Z\n\ud83d\udccf Modified: 2025-03-14T18:59:21.278Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html\n2. https://issues.chromium.org/issues/341875171\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/", "creation_timestamp": "2025-03-14T19:45:08.000000Z"}, {"uuid": "672a90ed-f568-4e84-bd32-15c78769d4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58105", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8801", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58105\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. \n\nThis CVE address an addtional bypass not covered in CVE-2024-58104.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2025-03-25T17:37:39.464Z\n\ud83d\udccf Modified: 2025-03-26T03:55:23.754Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0018217", "creation_timestamp": "2025-03-26T04:25:37.000000Z"}, {"uuid": "0558d1e5-feb0-46ce-892f-170dd890dc72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58083", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58083\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Explicitly verify target vCPU is online in kvm_get_vcpu()\n\nExplicitly verify the target vCPU is fully online _prior_ to clamping the\nindex in kvm_get_vcpu().  If the index is \"bad\", the nospec clamping will\ngenerate '0', i.e. KVM will return vCPU0 instead of NULL.\n\nIn practice, the bug is unlikely to cause problems, as it will only come\ninto play if userspace or the guest is buggy or misbehaving, e.g. KVM may\nsend interrupts to vCPU0 instead of dropping them on the floor.\n\nHowever, returning vCPU0 when it shouldn't exist per online_vcpus is\nproblematic now that KVM uses an xarray for the vCPUs array, as KVM needs\nto insert into the xarray before publishing the vCPU to userspace (see\ncommit c5b077549136 (\"KVM: Convert the kvm->vcpus array to a xarray\")),\ni.e. before vCPU creation is guaranteed to succeed.\n\nAs a result, incorrectly providing access to vCPU0 will trigger a\nuse-after-free if vCPU0 is dereferenced and kvm_vm_ioctl_create_vcpu()\nbails out of vCPU creation due to an error and frees vCPU0.  Commit\nafb2acb2e3a3 (\"KVM: Fix vcpu_array[0] races\") papered over that issue, but\nin doing so introduced an unsolvable teardown conundrum.  Preventing\naccesses to vCPU0 before it's fully online will allow reverting commit\nafb2acb2e3a3, without re-introducing the vcpu_array[0] UAF race.\n\ud83d\udccf Published: 2025-03-06T16:13:45.631Z\n\ud83d\udccf Modified: 2025-03-27T17:08:23.092Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/5cce2ed69b00e022b5cdf0c49c82986abd2941a8\n2. https://git.kernel.org/stable/c/09d50ccf0b2d739db4a485b08afe7520a4402a63\n3. https://git.kernel.org/stable/c/7c4899239d0f70f88ac42665b3da51678d122480\n4. https://git.kernel.org/stable/c/d817e510662fd1c9797952408d94806f97a5fffd\n5. https://git.kernel.org/stable/c/125da53b3c0c9d7f58353aea0076e9efd6498ba7\n6. https://git.kernel.org/stable/c/f2f805ada63b536bc192458a7098388286568ad4\n7. https://git.kernel.org/stable/c/ca8da90ed1432ff3d000de4f1e2275d4e7d21b96\n8. https://git.kernel.org/stable/c/1e7381f3617d14b3c11da80ff5f8a93ab14cfc46", "creation_timestamp": "2025-03-27T17:26:38.000000Z"}, {"uuid": "29884072-6a6c-4b11-8df0-ca9e2b5a2b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58131", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58131\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a large min_seal_time value) joins a blockchain network.\n\ud83d\udccf Published: 2025-04-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-06T02:58:16.429Z\n\ud83d\udd17 References:\n1. https://github.com/FISCO-BCOS/FISCO-BCOS/issues/4656", "creation_timestamp": "2025-04-06T03:38:18.000000Z"}, {"uuid": "7b6a990e-fda3-4b7f-94ff-f701a1f47dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58128", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9487", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58128\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks via a global menu link.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T22:12:38.708Z\n\ud83d\udd17 References:\n1. https://github.com/MISP/MISP/commit/33a1eb66408e16a7535b2bae48303efd9501a26a\n2. https://github.com/MISP/MISP/releases/tag/v2.4.193", "creation_timestamp": "2025-03-28T22:28:26.000000Z"}, {"uuid": "20a14525-a418-490c-9a23-2a9bc960a2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58129", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9486", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58129\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T22:13:51.812Z\n\ud83d\udd17 References:\n1. https://github.com/MISP/MISP/releases/tag/v2.4.193\n2. https://github.com/MISP/MISP/commit/09a43870e733f79ffa33753ddc7bce3cbb5a5647", "creation_timestamp": "2025-03-28T22:28:25.000000Z"}, {"uuid": "5f627e19-026b-43ab-bbd6-4d53b328eee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58130", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9485", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58130\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T22:16:15.136Z\n\ud83d\udd17 References:\n1. https://github.com/MISP/MISP/releases/tag/v2.4.193\n2. https://github.com/MISP/MISP/commit/f08a2eaec25f0212c22b225c0b654bd60d089ef9", "creation_timestamp": "2025-03-28T22:28:24.000000Z"}, {"uuid": "5fc88f5f-092b-4cd7-9925-c038b6dd3699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58132", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58132\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic.\n\ud83d\udccf Published: 2025-04-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-06T03:00:12.229Z\n\ud83d\udd17 References:\n1. https://git.chainmaker.org.cn/chainmaker/issue/-/issues/1202", "creation_timestamp": "2025-04-06T03:38:16.000000Z"}, {"uuid": "db06929c-b68a-487c-a054-ae896ef08ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58112", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10658", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58112\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:37:59.179Z\n\ud83d\udccf Modified: 2025-04-07T03:37:59.179Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:37.000000Z"}, {"uuid": "44460813-1e49-4959-9b74-a0dfedb0a8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58106", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58106\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:31:45.797Z\n\ud83d\udccf Modified: 2025-04-07T03:31:45.797Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:46.000000Z"}, {"uuid": "4b31fb7b-f949-42c3-9281-b4ea4d12f5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58124", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10654", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58124\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Access control vulnerability in the security verification module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.\n\ud83d\udccf Published: 2025-04-07T03:41:56.127Z\n\ud83d\udccf Modified: 2025-04-07T03:41:56.127Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:32.000000Z"}, {"uuid": "0b7ac045-714e-4e64-9b89-417c89da32b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58108", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10662", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58108\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:34:16.940Z\n\ud83d\udccf Modified: 2025-04-07T03:34:16.940Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:41.000000Z"}, {"uuid": "4c00373d-4b00-4f02-9618-1e481f2d8059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58109", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10661", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58109\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:35:12.667Z\n\ud83d\udccf Modified: 2025-04-07T03:35:12.667Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:40.000000Z"}, {"uuid": "f8d7f178-8cfd-47eb-8a1a-254513c59f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58110", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10660", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58110\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:36:06.556Z\n\ud83d\udccf Modified: 2025-04-07T03:36:06.556Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:39.000000Z"}, {"uuid": "e4a68314-e673-47c3-8e9c-a271b48376cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58133", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10622", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58133\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic.\n\ud83d\udccf Published: 2025-04-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-06T03:01:06.209Z\n\ud83d\udd17 References:\n1. https://git.chainmaker.org.cn/chainmaker/issue/-/issues/1228", "creation_timestamp": "2025-04-06T03:38:16.000000Z"}, {"uuid": "09d50fdc-1ed1-4b01-9844-1ad04dd80ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58036", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58036\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.\n\nSpecifically Net::Dropbox::API uses the Data::Random library which specifically states that it is \"Useful mostly for test programs\". Data::Random uses the rand() function.\n\ud83d\udccf Published: 2025-04-05T16:06:53.758Z\n\ud83d\udccf Modified: 2025-04-05T16:06:53.758Z\n\ud83d\udd17 References:\n1. https://perldoc.perl.org/functions/rand\n2. https://security.metacpan.org/docs/guides/random-data-for-security.html\n3. https://metacpan.org/release/BAREFOOT/Data-Random-0.13/source/lib/Data/Random.pm#L537\n4. https://metacpan.org/release/NORBU/Net-Dropbox-API-1.9/source/lib/Net/Dropbox/API.pm#L385\n5. https://metacpan.org/release/NORBU/Net-Dropbox-API-1.9/source/lib/Net/Dropbox/API.pm#L11", "creation_timestamp": "2025-04-05T16:39:07.000000Z"}, {"uuid": "b48aa23b-25df-4993-adcf-ba11b4d6b66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58111", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10659", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58111\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:37:11.430Z\n\ud83d\udccf Modified: 2025-04-07T03:37:11.430Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:38.000000Z"}, {"uuid": "6b1c0514-d4e6-46b6-ad06-0e4bda713c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58113", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10657", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58113\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Vulnerability of improper resource management in the memory management module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:38:56.455Z\n\ud83d\udccf Modified: 2025-04-07T03:38:56.455Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:35.000000Z"}, {"uuid": "28c08d76-859e-4575-9e60-b958315e1294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58115", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10656", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58115\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:40:13.360Z\n\ud83d\udccf Modified: 2025-04-07T03:40:13.360Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:34.000000Z"}, {"uuid": "d5973a85-b92b-4e24-bccb-9897f1b6ec05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58116", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58116\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:40:56.025Z\n\ud83d\udccf Modified: 2025-04-07T03:40:56.025Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:33.000000Z"}, {"uuid": "a70bd397-a2cf-4092-86f3-403b665baba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58092", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12006", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58092\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix legacy client tracking initialization\n\nGet rid of the nfsd4_legacy_tracking_ops->init() call in\ncheck_for_legacy_methods().  That will be handled in the caller\n(nfsd4_client_tracking_init()).  Otherwise, we'll wind up calling\nnfsd4_legacy_tracking_ops->init() twice, and the second time we'll\ntrigger the BUG_ON() in nfsd4_init_recdir().\n\ud83d\udccf Published: 2025-04-16T10:24:53.056Z\n\ud83d\udccf Modified: 2025-04-16T10:24:53.056Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/95407304253a4bf03494d921c6913e220c26cc63\n2. https://git.kernel.org/stable/c/cdd66082b227eb695cbf54b7c121ea032e869981\n3. https://git.kernel.org/stable/c/de71d4e211eddb670b285a0ea477a299601ce1ca", "creation_timestamp": "2025-04-16T10:55:49.000000Z"}, {"uuid": "c17188bf-e6fd-4260-b31e-223cd03c3a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58250", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12776", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58250\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T00:25:02.298Z\n\ud83d\udd17 References:\n1. https://github.com/ppp-project/ppp/commit/0a66ad22e54c72690ec2a29a019767c55c5281fc\n2. https://github.com/ppp-project/ppp/compare/v2.5.1...v2.5.2\n3. https://ppp.samba.org", "creation_timestamp": "2025-04-22T01:02:25.000000Z"}, {"uuid": "ff92b286-51b1-493f-8143-84f489b9817c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58251", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58251\n\ud83d\udd25 CVSS Score: 2.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T23:02:52.982Z\n\ud83d\udd17 References:\n1. https://www.busybox.net/downloads/\n2. https://www.busybox.net\n3. https://bugs.busybox.net/show_bug.cgi?id=15922", "creation_timestamp": "2025-04-24T00:05:27.000000Z"}, {"uuid": "7ee8c90d-7b02-4ab7-96ff-5b9ff3b02ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14583", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58253\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.\n\ud83d\udccf Published: 2025-05-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T19:52:38.335Z\n\ud83d\udd17 References:\n1. https://github.com/CasualX/obfstr/issues/60\n2. https://github.com/CasualX/obfstr/compare/v0.4.3...v0.4.4", "creation_timestamp": "2025-05-02T20:16:29.000000Z"}, {"uuid": "ee99d8bf-8ea4-448e-b165-9089c70b84bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58003", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14765", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58003\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: ds90ub9x3: Fix extra fwnode_handle_put()\n\nThe ub913 and ub953 drivers call fwnode_handle_put(priv->sd.fwnode) as\npart of their remove process, and if the driver is removed multiple\ntimes, eventually leads to put \"overflow\", possibly causing memory\ncorruption or crash.\n\nThe fwnode_handle_put() is a leftover from commit 905f88ccebb1 (\"media:\ni2c: ds90ub9x3: Fix sub-device matching\"), which changed the code\nrelated to the sd.fwnode, but missed removing these fwnode_handle_put()\ncalls.\n\ud83d\udccf Published: 2025-02-27T02:12:00.834Z\n\ud83d\udccf Modified: 2025-05-04T10:08:10.796Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/474d7baf91d37bc411fa60de5bbf03c9dd82e18a\n2. https://git.kernel.org/stable/c/f4e4373322f8d4c19721831f7fb989e52d30dab0\n3. https://git.kernel.org/stable/c/70743d6a8b256225675711e7983825f1be86062d\n4. https://git.kernel.org/stable/c/60b45ece41c5632a3a3274115a401cb244180646", "creation_timestamp": "2025-05-04T10:18:04.000000Z"}, {"uuid": "e26ec0be-65c1-4a91-a237-a0e3571d9eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58091", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58091\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/fbdev-dma: Add shadow buffering for deferred I/O\n\nDMA areas are not necessarily backed by struct page, so we cannot\nrely on it for deferred I/O. Allocate a shadow buffer for drivers\nthat require deferred I/O and use it as framebuffer memory.\n\nFixes driver errors about being \"Unable to handle kernel NULL pointer\ndereference at virtual address\" or \"Unable to handle kernel paging\nrequest at virtual address\".\n\nThe patch splits drm_fbdev_dma_driver_fbdev_probe() in an initial\nallocation, which creates the DMA-backed buffer object, and a tail\nthat sets up the fbdev data structures. There is a tail function for\ndirect memory mappings and a tail function for deferred I/O with\nthe shadow buffer.\n\nIt is no longer possible to use deferred I/O without shadow buffer.\nIt can be re-added if there exists a reliably test for usable struct\npage in the allocated DMA-backed buffer object.\n\ud83d\udccf Published: 2025-03-27T14:57:03.560Z\n\ud83d\udccf Modified: 2025-05-04T10:09:52.646Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/cdc581169942de3b9e2648cfbd98c5ff9111c2c8\n2. https://git.kernel.org/stable/c/3603996432997f7c88da37a97062a46cda01ac9d", "creation_timestamp": "2025-05-04T11:19:00.000000Z"}, {"uuid": "10c10597-0bce-4e40-a49c-a72a4f61ba5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58134", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14696", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58134\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default.\n\nThese predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user\u2019s session.\n\ud83d\udccf Published: 2025-05-03T16:08:55.042Z\n\ud83d\udccf Modified: 2025-05-03T16:08:55.042Z\n\ud83d\udd17 References:\n1. https://github.com/mojolicious/mojo/pull/1791\n2. https://github.com/mojolicious/mojo/pull/2200\n3. https://www.synacktiv.com/publications/baking-mojolicious-cookies\n4. https://medium.com/securing/baking-mojolicious-cookies-revisited-a-case-study-of-solving-security-problems-through-security-by-13da7c225802\n5. https://metacpan.org/release/SRI/Mojolicious-9.39/source/lib/Mojolicious.pm#L51\n6. https://github.com/hashcat/hashcat/pull/4090", "creation_timestamp": "2025-05-03T16:19:07.000000Z"}, {"uuid": "bbff8ae9-475e-4315-87fc-c22def0d47e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14692", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58135\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Mojolicious versions from 7.28 through 9.39 for Perl may generate weak HMAC session secrets.\n\nWhen creating a default app with the \"mojo generate app\" tool, a weak secret is written to the application's configuration file using the insecure rand() function, and used for authenticating and protecting the integrity of the application's sessions. This may allow an attacker to brute force the application's session keys.\n\ud83d\udccf Published: 2025-05-03T10:16:10.636Z\n\ud83d\udccf Modified: 2025-05-03T10:16:10.636Z\n\ud83d\udd17 References:\n1. https://perldoc.perl.org/functions/rand\n2. https://metacpan.org/release/SRI/Mojolicious-9.39/source/lib/Mojo/Util.pm#L181\n3. https://metacpan.org/release/SRI/Mojolicious-9.38/source/lib/Mojolicious/Command/Author/generate/app.pm#L202\n4. https://github.com/mojolicious/mojo/pull/2200\n5. https://metacpan.org/release/SRI/Mojolicious-7.28/source/lib/Mojolicious/Command/generate/app.pm#L220\n6. https://security.metacpan.org/docs/guides/random-data-for-security.html\n7. https://github.com/hashcat/hashcat/pull/4090", "creation_timestamp": "2025-05-03T11:18:52.000000Z"}, {"uuid": "46dfa9a3-4f1a-4747-bbaa-414ab4425ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58096", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14778", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58096\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode\n\nath11k_hal_srng_* should be used with srng->lock to protect srng data.\n\nFor ath11k_dp_rx_mon_dest_process() and ath11k_dp_full_mon_process_rx(),\nthey use ath11k_hal_srng_* for many times but never call srng->lock.\n\nSo when running (full) monitor mode, warning will occur:\nRIP: 0010:ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k]\nCall Trace:\n ? ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k]\n ath11k_dp_rx_process_mon_status+0xc45/0x1190 [ath11k]\n ? idr_alloc_u32+0x97/0xd0\n ath11k_dp_rx_process_mon_rings+0x32a/0x550 [ath11k]\n ath11k_dp_service_srng+0x289/0x5a0 [ath11k]\n ath11k_pcic_ext_grp_napi_poll+0x30/0xd0 [ath11k]\n __napi_poll+0x30/0x1f0\n net_rx_action+0x198/0x320\n __do_softirq+0xdd/0x319\n\nSo add srng->lock for them to avoid such warnings.\n\nInorder to fetch the srng->lock, should change srng's definition from\n'void' to 'struct hal_srng'. And initialize them elsewhere to prevent\none line of code from being too long. This is consistent with other ring\nprocess functions, such as ath11k_dp_process_rx().\n\nTested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30\nTested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1\n\ud83d\udccf Published: 2025-04-16T14:11:44.587Z\n\ud83d\udccf Modified: 2025-05-04T10:10:00.444Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b85758e76b6452740fc2a08ced6759af64c0d59a\n2. https://git.kernel.org/stable/c/63b7af49496d0e32f7a748b6af3361ec138b1bd3", "creation_timestamp": "2025-05-04T11:18:55.000000Z"}, {"uuid": "317e0ea0-edcd-4fdd-9da5-bb47215d9dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58075", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14793", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58075\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - do not transfer req when tegra init fails\n\nThe tegra_cmac_init or tegra_sha_init function may return an error when\nmemory is exhausted. It should not transfer the request when they return\nan error.\n\ud83d\udccf Published: 2025-03-06T16:04:30.864Z\n\ud83d\udccf Modified: 2025-05-04T10:09:24.851Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d\n2. https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e\n3. https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519", "creation_timestamp": "2025-05-04T11:19:14.000000Z"}, {"uuid": "63808183-224a-48e2-9412-1136be1beb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58086", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14784", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58086\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Stop active perfmon if it is being destroyed\n\nIf the active performance monitor (`v3d->active_perfmon`) is being\ndestroyed, stop it first. Currently, the active perfmon is not\nstopped during destruction, leaving the `v3d->active_perfmon` pointer\nstale. This can lead to undefined behavior and instability.\n\nThis patch ensures that the active perfmon is stopped before being\ndestroyed, aligning with the behavior introduced in commit\n7d1fd3638ee3 (\"drm/v3d: Stop the active perfmon before being destroyed\").\n\ud83d\udccf Published: 2025-03-06T16:28:23.042Z\n\ud83d\udccf Modified: 2025-05-04T10:09:45.730Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/22e19c8c5f6b709f4ae40227392a30d57bac187d\n2. https://git.kernel.org/stable/c/95036d4c01167568166108d42c2b0e9f8dbd7d2b\n3. https://git.kernel.org/stable/c/eb0e0eca0eab93f310c6c37b8564049366704691\n4. https://git.kernel.org/stable/c/1c5673a2c8926adbb61f340c779b28e18188a8cd\n5. https://git.kernel.org/stable/c/f8805b12f477bd964e2820a87921c7b58cc2dee3\n6. https://git.kernel.org/stable/c/21f1435b1e6b012a07c42f36b206d2b66fc8f13b", "creation_timestamp": "2025-05-04T11:19:03.000000Z"}, {"uuid": "83e8d5c5-cdcb-49ab-b880-721fa0aa4a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58087", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14783", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58087\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix racy issue from session lookup and expire\n\nIncrement the session reference count within the lock for lookup to avoid\nracy issue with session expire.\n\ud83d\udccf Published: 2025-03-12T07:28:09.114Z\n\ud83d\udccf Modified: 2025-05-04T10:09:47.171Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2107ab40629aeabbec369cf34b8cf0f288c3eb1b\n2. https://git.kernel.org/stable/c/37a0e2b362b3150317fb6e2139de67b1e29ae5ff\n3. https://git.kernel.org/stable/c/450a844c045ff0895d41b05a1cbe8febd1acfcfd\n4. https://git.kernel.org/stable/c/a39e31e22a535d47b14656a7d6a893c7f6cf758c\n5. https://git.kernel.org/stable/c/b95629435b84b9ecc0c765995204a4d8a913ed52\n6. https://www.zerodayinitiative.com/advisories/ZDI-25-100/", "creation_timestamp": "2025-05-04T11:19:02.000000Z"}, {"uuid": "1a35538a-13dc-41c7-85f4-a4595550af25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58014", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58014\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()\n\nIn 'wlc_phy_iqcal_gainparams_nphy()', add gain range check to WARN()\ninstead of possible out-of-bounds 'tbl_iqcal_gainparams_nphy' access.\nCompile tested only.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\ud83d\udccf Published: 2025-02-27T02:12:07.344Z\n\ud83d\udccf Modified: 2025-05-04T10:08:27.881Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/0a457223cb2b9ca46bae7de387d0f4c093b0220d\n2. https://git.kernel.org/stable/c/13ef16c4fe384b1e70277bbe1d87934ee6c81e12\n3. https://git.kernel.org/stable/c/d280a12e9b87819a8a209639d600b48a2d6d65dc\n4. https://git.kernel.org/stable/c/ada9df08b3ef683507e75b92f522fb659260147f\n5. https://git.kernel.org/stable/c/093286c33409bf38896f2dab0c0bb6ca388afb33\n6. https://git.kernel.org/stable/c/c27ce584d274f6ad3cba2294497de824a3c66646\n7. https://git.kernel.org/stable/c/6f6e293246dc1f5b2b6b3d0f2d757598489cda79\n8. https://git.kernel.org/stable/c/3f4a0948c3524ae50f166dbc6572a3296b014e62", "creation_timestamp": "2025-05-04T10:17:56.000000Z"}, {"uuid": "afa085ae-5bb2-47cf-9aac-486781a0a46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58015", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14758", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58015\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix for out-of bound access error\n\nSelfgen stats are placed in a buffer using print_array_to_buf_index() function.\nArray length parameter passed to the function is too big, resulting in possible\nout-of bound memory error.\nDecreasing buffer size by one fixes faulty upper bound of passed array.\n\nDiscovered in coverity scan, CID 1600742 and CID 1600758\n\ud83d\udccf Published: 2025-02-27T02:12:08.046Z\n\ud83d\udccf Modified: 2025-05-04T10:08:29.449Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/8700c4bf8b7ed98037d2acf1eaf770ad6dd431d4\n2. https://git.kernel.org/stable/c/eb8c0534713865d190856f10bfc97cf0b88475b1", "creation_timestamp": "2025-05-04T10:17:55.000000Z"}, {"uuid": "5f545548-ce5e-40cb-8996-e7c3cd862ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58016", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14757", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58016\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsafesetid: check size of policy writes\n\nsyzbot attempts to write a buffer with a large size to a sysfs entry\nwith writes handled by handle_policy_update(), triggering a warning\nin kmalloc.\n\nCheck the size specified for write buffers before allocating.\n\n[PM: subject tweak]\n\ud83d\udccf Published: 2025-02-27T02:12:08.547Z\n\ud83d\udccf Modified: 2025-05-04T10:08:30.860Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/976284b94f2021df09829e37a367e19b84d9e5f3\n2. https://git.kernel.org/stable/c/ecf6a4a558097920447a6fb84dfdb279e2ac749a\n3. https://git.kernel.org/stable/c/a0dec65f88c8d9290dfa1d2ca1e897abe54c5881\n4. https://git.kernel.org/stable/c/96fae5bd1589731592d30b3953a90a77ef3928a6\n5. https://git.kernel.org/stable/c/36b385d0f2b4c0bf41d491e19075ecd990d2bf94\n6. https://git.kernel.org/stable/c/c71d35676d46090c891b6419f253fb92a1a9f4eb\n7. https://git.kernel.org/stable/c/f09ff307c7299392f1c88f763299e24bc99811c7", "creation_timestamp": "2025-05-04T10:17:54.000000Z"}, {"uuid": "2d823197-fa22-43a8-af17-b9efa3b556f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58006", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14764", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58006\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()\n\nIn commit 4284c88fff0e (\"PCI: designware-ep: Allow pci_epc_set_bar() update\ninbound map address\") set_bar() was modified to support dynamically\nchanging the backing physical address of a BAR that was already configured.\n\nThis means that set_bar() can be called twice, without ever calling\nclear_bar() (as calling clear_bar() would clear the BAR's PCI address\nassigned by the host).\n\nThis can only be done if the new BAR size/flags does not differ from the\nexisting BAR configuration. Add these missing checks.\n\nIf we allow set_bar() to set e.g. a new BAR size that differs from the\nexisting BAR size, the new address translation range will be smaller than\nthe BAR size already determined by the host, which would mean that a read\npast the new BAR size would pass the iATU untranslated, which could allow\nthe host to read memory not belonging to the new struct pci_epf_bar.\n\nWhile at it, add comments which clarifies the support for dynamically\nchanging the physical address of a BAR. (Which was also missing.)\n\ud83d\udccf Published: 2025-02-27T02:12:02.932Z\n\ud83d\udccf Modified: 2025-05-04T10:08:15.420Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b5cacfd067060c75088363ed3e19779078be2755\n2. https://git.kernel.org/stable/c/3229c15d6267de8e704b4085df8a82a5af2d63eb\n3. https://git.kernel.org/stable/c/3708acbd5f169ebafe1faa519cb28adc56295546", "creation_timestamp": "2025-05-04T10:18:02.000000Z"}, {"uuid": "027d5441-2e81-4582-afb5-03d8bb88869f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58007", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14763", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58007\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: socinfo: Avoid out of bounds read of serial number\n\nOn MSM8916 devices, the serial number exposed in sysfs is constant and does\nnot change across individual devices. It's always:\n\n  db410c:/sys/devices/soc0$ cat serial_number\n  2644893864\n\nThe firmware used on MSM8916 exposes SOCINFO_VERSION(0, 8), which does not\nhave support for the serial_num field in the socinfo struct. There is an\nexisting check to avoid exposing the serial number in that case, but it's\nnot correct: When checking the item_size returned by SMEM, we need to make\nsure the *end* of the serial_num is within bounds, instead of comparing\nwith the *start* offset. The serial_number currently exposed on MSM8916\ndevices is just an out of bounds read of whatever comes after the socinfo\nstruct in SMEM.\n\nFix this by changing offsetof() to offsetofend(), so that the size of the\nfield is also taken into account.\n\ud83d\udccf Published: 2025-02-27T02:12:03.593Z\n\ud83d\udccf Modified: 2025-05-04T10:08:16.807Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/7445fa05317534bbd8b373c0eff8319187916030\n2. https://git.kernel.org/stable/c/2495c6598731b6d7f565140f2bd63ef4bc36ce7d\n3. https://git.kernel.org/stable/c/2d09d3c9afa2fc422ac3df7c9b8534f350ee19dd\n4. https://git.kernel.org/stable/c/9c88b3a3fae4d60641c3a45be66269d00eff33cd\n5. https://git.kernel.org/stable/c/47470acd719d45c4c8c418c07962f74cc995652b\n6. https://git.kernel.org/stable/c/407c928305c1a37232a63811c400ef616f85ccbc\n7. https://git.kernel.org/stable/c/0a92feddae0634a0b87c04b19d343f6af97af700\n8. https://git.kernel.org/stable/c/22cf4fae6660b6e1a583a41cbf84e3046ca9ccd0", "creation_timestamp": "2025-05-04T10:18:01.000000Z"}, {"uuid": "1562f419-abaa-4257-8e28-2badda854fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58008", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14762", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58008\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y\n\nWith vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted\nkeys can crash during en- and decryption of the blob encryption key via\nthe DCP crypto driver. This is caused by improperly using sg_init_one()\nwith vmalloc'd stack buffers (plain_key_blob).\n\nFix this by always using kmalloc() for buffers we give to the DCP crypto\ndriver.\n\ud83d\udccf Published: 2025-02-27T02:12:04.100Z\n\ud83d\udccf Modified: 2025-05-04T10:08:18.290Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/3192f1c54dddb9b5820bf5e8677809949d8e9c66\n2. https://git.kernel.org/stable/c/3355594de46fb1cba663f12b9644b664b8a609f4\n3. https://git.kernel.org/stable/c/e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4", "creation_timestamp": "2025-05-04T10:18:00.000000Z"}, {"uuid": "8aee140f-69a6-4766-ab48-d558b00a61a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58009", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14761", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58009\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc\n\nA NULL sock pointer is passed into l2cap_sock_alloc() when it is called\nfrom l2cap_sock_new_connection_cb() and the error handling paths should\nalso be aware of it.\n\nSeemingly a more elegant solution would be to swap bt_sock_alloc() and\nl2cap_chan_create() calls since they are not interdependent to that moment\nbut then l2cap_chan_create() adds the soon to be deallocated and still\ndummy-initialized channel to the global list accessible by many L2CAP\npaths. The channel would be removed from the list in short period of time\nbut be a bit more straight-forward here and just check for NULL instead of\nchanging the order of function calls.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE static\nanalysis tool.\n\ud83d\udccf Published: 2025-02-27T02:12:04.637Z\n\ud83d\udccf Modified: 2025-05-04T10:08:19.816Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/a9a7672fc1a0fe18502493936ccb06413ab89ea6\n2. https://git.kernel.org/stable/c/8e605f580a97530e5a3583beea458a3fa4cbefbd\n3. https://git.kernel.org/stable/c/cf601a24120c674cd7c907ea695f92617af6abd0\n4. https://git.kernel.org/stable/c/297ce7f544aa675b0d136d788cad0710cdfb0785\n5. https://git.kernel.org/stable/c/245d48c1ba3e7a1779c2f4cbc6f581ddc8a78e22\n6. https://git.kernel.org/stable/c/691218a50c3139f7f57ffa79fb89d932eda9571e\n7. https://git.kernel.org/stable/c/49c0d55d59662430f1829ae85b969619573d0fa1\n8. https://git.kernel.org/stable/c/5f397409f8ee5bc82901eeaf799e1cbc4f8edcf1", "creation_timestamp": "2025-05-04T10:17:59.000000Z"}, {"uuid": "93134334-1a56-4d2b-8f65-73ed66e0e976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58010", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14760", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58010\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbinfmt_flat: Fix integer overflow bug on 32 bit systems\n\nMost of these sizes and counts are capped at 256MB so the math doesn't\nresult in an integer overflow.  The \"relocs\" count needs to be checked\nas well.  Otherwise on 32bit systems the calculation of \"full_data\"\ncould be wrong.\n\n full_data = data_len + relocs * sizeof(unsigned long);\n\ud83d\udccf Published: 2025-02-27T02:12:05.165Z\n\ud83d\udccf Modified: 2025-05-04T10:08:21.490Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/0b6be54d7386b7addbf9e5947366f94aad046938\n2. https://git.kernel.org/stable/c/6fb98e0576ea155267e206286413dcb3a3d55c12\n3. https://git.kernel.org/stable/c/bc8ca18b8ef4648532c001bd6c8151143b569275\n4. https://git.kernel.org/stable/c/95506c7f33452450346fbe2975c1359100f854ca\n5. https://git.kernel.org/stable/c/d17ca8f2dfcf423c439859995910a20e38b86f00\n6. https://git.kernel.org/stable/c/a009378af674b808efcca1e2e67916e79ce866b3\n7. https://git.kernel.org/stable/c/8e8cd712bb06a507b26efd2a56155076aa454345\n8. https://git.kernel.org/stable/c/55cf2f4b945f6a6416cc2524ba740b83cc9af25a", "creation_timestamp": "2025-05-04T10:17:58.000000Z"}, {"uuid": "fff1f28d-175e-4db7-998f-ca990a5b5671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58000", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14768", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58000\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: prevent reg-wait speculations\n\nWith *ENTER_EXT_ARG_REG instead of passing a user pointer with arguments\nfor the waiting loop the user can specify an offset into a pre-mapped\nregion of memory, in which case the\n[offset, offset + sizeof(io_uring_reg_wait)) will be intepreted as the\nargument.\n\nAs we address a kernel array using a user given index, it'd be a subject\nto speculation type of exploits. Use array_index_nospec() to prevent\nthat. Make sure to pass not the full region size but truncate by the\nmaximum offset allowed considering the structure size.\n\ud83d\udccf Published: 2025-02-27T02:07:19.155Z\n\ud83d\udccf Modified: 2025-05-04T10:08:06.384Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2a6de94df7bfa76d9850443547e7b3333f63a16a\n2. https://git.kernel.org/stable/c/29b95ac917927ce9f95bf38797e16333ecb489b1", "creation_timestamp": "2025-05-04T10:18:06.000000Z"}, {"uuid": "96c5ff63-cc0e-4e87-8162-c82f796e28a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58001", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58001\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: handle a symlink read error correctly\n\nPatch series \"Convert ocfs2 to use folios\".\n\nMark did a conversion of ocfs2 to use folios and sent it to me as a\ngiant patch for review ;-)\n\nSo I've redone it as individual patches, and credited Mark for the patches\nwhere his code is substantially the same.  It's not a bad way to do it;\nhis patch had some bugs and my patches had some bugs.  Hopefully all our\nbugs were different from each other.  And hopefully Mark likes all the\nchanges I made to his code!\n\n\nThis patch (of 23):\n\nIf we can't read the buffer, be sure to unlock the page before returning.\n\ud83d\udccf Published: 2025-02-27T02:11:59.570Z\n\ud83d\udccf Modified: 2025-05-04T10:08:07.719Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/cd3e22b206189cbb4a94229002141e1529f83746\n2. https://git.kernel.org/stable/c/afa8003f8db62e46c4b171cbf4cec2824148b4f7\n3. https://git.kernel.org/stable/c/8aee4184c5b79e486598c15aa80687c77f6f6e6e\n4. https://git.kernel.org/stable/c/6e143eb4ab83c24e7ad3e3d8e7daa241d9c38377\n5. https://git.kernel.org/stable/c/b6833b38984d1e9f20dd80f9ec9050c10d687f30\n6. https://git.kernel.org/stable/c/52a326f93ceb9348264fddf7bab6e345db69e08c\n7. https://git.kernel.org/stable/c/5e3b3ec7c3cb5ba5629a766e4f0926db72cf0a1f\n8. https://git.kernel.org/stable/c/2b4c2094da6d84e69b843dd3317902e977bf64bd", "creation_timestamp": "2025-05-04T10:18:05.000000Z"}, {"uuid": "c0bc8139-4a9f-4962-bbcb-92c46613bb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58079", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58079\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Fix crash during unbind if gpio unit is in use\n\nWe used the wrong device for the device managed functions. We used the\nusb device, when we should be using the interface device.\n\nIf we unbind the driver from the usb interface, the cleanup functions\nare never called. In our case, the IRQ is never disabled.\n\nIf an IRQ is triggered, it will try to access memory sections that are\nalready free, causing an OOPS.\n\nWe cannot use the function devm_request_threaded_irq here. The devm_*\nclean functions may be called after the main structure is released by\nuvc_delete.\n\nLuckily this bug has small impact, as it is only affected by devices\nwith gpio units and the user has to unbind the device, a disconnect will\nnot trigger this error.\n\ud83d\udccf Published: 2025-03-06T16:13:42.640Z\n\ud83d\udccf Modified: 2025-05-04T10:09:30.587Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/0fdd7cc593385e46e92e180b71e264fc9c195298\n2. https://git.kernel.org/stable/c/3c00e94d00ca079bef7906d6f39d1091bccfedd3\n3. https://git.kernel.org/stable/c/0b5e0445bc8384c18bd35cb9fe87f6258c6271d9\n4. https://git.kernel.org/stable/c/d2eac8b14ac690aa73052aa6d4ba69005715367e\n5. https://git.kernel.org/stable/c/5d2e65cbe53d0141ed095cf31c2dcf3d8668c11d\n6. https://git.kernel.org/stable/c/a9ea1a3d88b7947ce8cadb2afceee7a54872bbc5", "creation_timestamp": "2025-05-04T11:19:10.000000Z"}, {"uuid": "90d9d1b3-471c-4291-9f3d-554abc738210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58097", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14777", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58097\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: fix RCU stall while reaping monitor destination ring\n\nWhile processing the monitor destination ring, MSDUs are reaped from the\nlink descriptor based on the corresponding buf_id.\n\nHowever, sometimes the driver cannot obtain a valid buffer corresponding\nto the buf_id received from the hardware. This causes an infinite loop\nin the destination processing, resulting in a kernel crash.\n\nkernel log:\nath11k_pci 0000:58:00.0: data msdu_pop: invalid buf_id 309\nath11k_pci 0000:58:00.0: data dp_rx_monitor_link_desc_return failed\nath11k_pci 0000:58:00.0: data msdu_pop: invalid buf_id 309\nath11k_pci 0000:58:00.0: data dp_rx_monitor_link_desc_return failed\n\nFix this by skipping the problematic buf_id and reaping the next entry,\nreplacing the break with the next MSDU processing.\n\nTested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30\nTested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1\n\ud83d\udccf Published: 2025-04-16T14:11:45.330Z\n\ud83d\udccf Modified: 2025-05-04T10:10:01.732Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b4991fc41745645f8050506f5a8578bd11e6b378\n2. https://git.kernel.org/stable/c/16c6c35c03ea73054a1f6d3302a4ce4a331b427d", "creation_timestamp": "2025-05-04T11:18:54.000000Z"}, {"uuid": "3dd4be94-337e-4e3e-9c99-1ffe56c2f874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58093", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58093\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/ASPM: Fix link state exit during switch upstream function removal\n\nBefore 456d8aa37d0f (\"PCI/ASPM: Disable ASPM on MFD function removal to\navoid use-after-free\"), we would free the ASPM link only after the last\nfunction on the bus pertaining to the given link was removed.\n\nThat was too late. If function 0 is removed before sibling function,\nlink->downstream would point to free'd memory after.\n\nAfter above change, we freed the ASPM parent link state upon any function\nremoval on the bus pertaining to a given link.\n\nThat is too early. If the link is to a PCIe switch with MFD on the upstream\nport, then removing functions other than 0 first would free a link which\nstill remains parent_link to the remaining downstream ports.\n\nThe resulting GPFs are especially frequent during hot-unplug, because\npciehp removes devices on the link bus in reverse order.\n\nOn that switch, function 0 is the virtual P2P bridge to the internal bus.\nFree exactly when function 0 is removed -- before the parent link is\nobsolete, but after all subordinate links are gone.\n\n[kwilczynski: commit log]\n\ud83d\udccf Published: 2025-04-16T14:11:42.682Z\n\ud83d\udccf Modified: 2025-05-04T10:09:55.686Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/cbf937dcadfd571a434f8074d057b32cd14fbea5", "creation_timestamp": "2025-05-04T11:18:59.000000Z"}, {"uuid": "726fa625-4e87-4946-b963-930f1770ea6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58094", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14780", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58094\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add check read-only before truncation in jfs_truncate_nolock()\n\nAdded a check for \"read-only\" mode in the `jfs_truncate_nolock`\nfunction to avoid errors related to writing to a read-only\nfilesystem.\n\nCall stack:\n\nblock_write_begin() {\n  jfs_write_failed() {\n    jfs_truncate() {\n      jfs_truncate_nolock() {\n        txEnd() {\n          ...\n          log = JFS_SBI(tblk->sb)->log;\n          // (log == NULL)\n\nIf the `isReadOnly(ip)` condition is triggered in\n`jfs_truncate_nolock`, the function execution will stop, and no\nfurther data modification will occur. Instead, the `xtTruncate`\nfunction will be called with the \"COMMIT_WMAP\" flag, preventing\nmodifications in \"read-only\" mode.\n\ud83d\udccf Published: 2025-04-16T14:11:43.298Z\n\ud83d\udccf Modified: 2025-05-04T10:09:57.136Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f605bc3e162f5c6faa9bd3602ce496053d06a4bb\n2. https://git.kernel.org/stable/c/b5799dd77054c1ec49b0088b006c9908e256843b", "creation_timestamp": "2025-05-04T11:18:58.000000Z"}, {"uuid": "160eb3b4-0d7a-440f-913f-1c793b779c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58095", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14779", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58095\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add check read-only before txBeginAnon() call\n\nAdded a read-only check before calling `txBeginAnon` in `extAlloc`\nand `extRecord`. This prevents modification attempts on a read-only\nmounted filesystem, avoiding potential errors or crashes.\n\nCall trace:\n txBeginAnon+0xac/0x154\n extAlloc+0xe8/0xdec fs/jfs/jfs_extent.c:78\n jfs_get_block+0x340/0xb98 fs/jfs/inode.c:248\n __block_write_begin_int+0x580/0x166c fs/buffer.c:2128\n __block_write_begin fs/buffer.c:2177 [inline]\n block_write_begin+0x98/0x11c fs/buffer.c:2236\n jfs_write_begin+0x44/0x88 fs/jfs/inode.c:299\n\ud83d\udccf Published: 2025-04-16T14:11:43.934Z\n\ud83d\udccf Modified: 2025-05-04T10:09:58.509Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/15469c408af2d7a52fb186a92f2f091b0f13b1fb\n2. https://git.kernel.org/stable/c/0176e69743ecc02961f2ae1ea42439cd2bf9ed58", "creation_timestamp": "2025-05-04T11:18:56.000000Z"}, {"uuid": "241f9f12-1b37-4092-8c4e-faea9954306d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58072", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14796", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58072\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: remove unused check_buddy_priv\n\nCommit 2461c7d60f9f (\"rtlwifi: Update header file\") introduced a global\nlist of private data structures.\n\nLater on, commit 26634c4b1868 (\"rtlwifi Modify existing bits to match\nvendor version 2013.02.07\") started adding the private data to that list at\nprobe time and added a hook, check_buddy_priv to find the private data from\na similar device.\n\nHowever, that function was never used.\n\nBesides, though there is a lock for that list, it is never used. And when\nthe probe fails, the private data is never removed from the list. This\nwould cause a second probe to access freed memory.\n\nRemove the unused hook, structures and members, which will prevent the\npotential race condition on the list and its corruption during a second\nprobe when probe fails.\n\ud83d\udccf Published: 2025-03-06T15:54:11.665Z\n\ud83d\udccf Modified: 2025-05-04T10:09:20.322Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f801e754efa21bd61b3cc15ec7565696165b272f\n2. https://git.kernel.org/stable/c/1b9cbd8a9ae68b32099fbb03b2d5ffa0c5e0dcc9\n3. https://git.kernel.org/stable/c/8e2fcc68fbaab3ad9f5671fee2be0956134b740a\n4. https://git.kernel.org/stable/c/1e39b0486cdb496cdfba3bc89886150e46acf6f4\n5. https://git.kernel.org/stable/c/465d01ef6962b82b1f0ad1f3e58b398dbd35c1c1\n6. https://git.kernel.org/stable/c/543e3e9f2e9e47ded774c74e680f28a0ca362aee\n7. https://git.kernel.org/stable/c/006e803af7408c3fc815b0654fc5ab43d34f0154\n8. https://git.kernel.org/stable/c/2fdac64c3c35858aa8ac5caa70b232e03456e120", "creation_timestamp": "2025-05-04T11:19:20.000000Z"}, {"uuid": "6f29c26d-cad6-447b-bdb2-bd99149c483e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58073", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14795", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58073\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp\n\nSimilar to the r_pipe sspp protect, add a check to protect\nthe pipe state prints to avoid NULL ptr dereference for cases when\nthe state is dumped without a corresponding atomic_check() where the\npipe->sspp is assigned.\n\nPatchwork: https://patchwork.freedesktop.org/patch/628404/\n\ud83d\udccf Published: 2025-03-06T15:54:12.374Z\n\ud83d\udccf Modified: 2025-05-04T10:09:21.884Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/008af2074e4b91d34440102501b710c235a3b245\n2. https://git.kernel.org/stable/c/789384eb1437aed94155dc0eac8a8a6ba1baf578", "creation_timestamp": "2025-05-04T11:19:16.000000Z"}, {"uuid": "08ff4b88-451c-4a01-b47e-2db619a116ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58074", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14794", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58074\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Grab intel_display from the encoder to avoid potential oopsies\n\nGrab the intel_display from 'encoder' rather than 'state'\nin the encoder hooks to avoid the massive footgun that is\nintel_sanitize_encoder(), which passes NULL as the 'state'\nargument to encoder .disable() and .post_disable().\n\nTODO: figure out how to actually fix intel_sanitize_encoder()...\n\ud83d\udccf Published: 2025-03-06T16:04:30.170Z\n\ud83d\udccf Modified: 2025-05-04T10:09:23.193Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/1885401569f24eb35c631bcc4e6543360dbe9292\n2. https://git.kernel.org/stable/c/dc3806d9eb66d0105f8d55d462d4ef681d9eac59", "creation_timestamp": "2025-05-04T11:19:15.000000Z"}, {"uuid": "50418220-2aaa-44f7-8b22-0ebdd5ebafd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58084", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14786", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58084\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()\n\nCommit 2e4955167ec5 (\"firmware: qcom: scm: Fix __scm and waitq\ncompletion variable initialization\") introduced a write barrier in probe\nfunction to store global '__scm' variable.  We all known barriers are\npaired (see memory-barriers.txt: \"Note that write barriers should\nnormally be paired with read or address-dependency barriers\"), therefore\naccessing it from concurrent contexts requires read barrier.  Previous\ncommit added such barrier in qcom_scm_is_available(), so let's use that\ndirectly.\n\nLack of this read barrier can result in fetching stale '__scm' variable\nvalue, NULL, and dereferencing it.\n\nNote that barrier in qcom_scm_is_available() satisfies here the control\ndependency.\n\ud83d\udccf Published: 2025-03-06T16:22:31.998Z\n\ud83d\udccf Modified: 2025-05-04T10:09:42.783Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/fee921e3c641f64185abee83f9a6e65f0b380682\n2. https://git.kernel.org/stable/c/e03db7c1255ebabba5e1a447754faeb138de15a2\n3. https://git.kernel.org/stable/c/b628510397b5cafa1f5d3e848a28affd1c635302", "creation_timestamp": "2025-05-04T11:19:05.000000Z"}, {"uuid": "3661e020-5ffa-4973-abb0-ec42a5712654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58085", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14785", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58085\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ntomoyo: don't emit warning in tomoyo_write_control()\n\nsyzbot is reporting too large allocation warning at tomoyo_write_control(),\nfor one can write a very very long line without new line character. To fix\nthis warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE,\nfor practically a valid line should be always shorter than 32KB where the\n\"too small to fail\" memory-allocation rule applies.\n\nOne might try to write a valid line that is longer than 32KB, but such\nrequest will likely fail with -ENOMEM. Therefore, I feel that separately\nreturning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant.\nThere is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.\n\ud83d\udccf Published: 2025-03-06T16:22:32.761Z\n\ud83d\udccf Modified: 2025-05-04T10:09:44.077Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/c67efabddc73171c7771d3ffe4ffa1e503ee533e\n2. https://git.kernel.org/stable/c/f6b37b3e12de638753bce79a2858070b9c4a4ad3\n3. https://git.kernel.org/stable/c/b2bd5857a0d6973ebbcb4d9831ddcaebbd257be1\n4. https://git.kernel.org/stable/c/a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f\n5. https://git.kernel.org/stable/c/fe1c021eb03dae0dc9dce55e81f77a60e419a27a\n6. https://git.kernel.org/stable/c/c9382f380e8d09209b8e5c0def0545852168be25\n7. https://git.kernel.org/stable/c/414705c0303350d139b1dc18f329fe47dfb642dd\n8. https://git.kernel.org/stable/c/3df7546fc03b8f004eee0b9e3256369f7d096685", "creation_timestamp": "2025-05-04T11:19:04.000000Z"}, {"uuid": "d45eb217-3b5b-4bf5-9ccb-e8cb11f9a1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58076", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58076\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: gcc-sm6350: Add missing parent_map for two clocks\n\nIf a clk_rcg2 has a parent, it should also have parent_map defined,\notherwise we'll get a NULL pointer dereference when calling clk_set_rate\nlike the following:\n\n  [    3.388105] Call trace:\n  [    3.390664]  qcom_find_src_index+0x3c/0x70 (P)\n  [    3.395301]  qcom_find_src_index+0x1c/0x70 (L)\n  [    3.399934]  _freq_tbl_determine_rate+0x48/0x100\n  [    3.404753]  clk_rcg2_determine_rate+0x1c/0x28\n  [    3.409387]  clk_core_determine_round_nolock+0x58/0xe4\n  [    3.421414]  clk_core_round_rate_nolock+0x48/0xfc\n  [    3.432974]  clk_core_round_rate_nolock+0xd0/0xfc\n  [    3.444483]  clk_core_set_rate_nolock+0x8c/0x300\n  [    3.455886]  clk_set_rate+0x38/0x14c\n\nAdd the parent_map property for two clocks where it's missing and also\nun-inline the parent_data as well to keep the matching parent_map and\nparent_data together.\n\ud83d\udccf Published: 2025-03-06T16:13:40.307Z\n\ud83d\udccf Modified: 2025-05-04T10:09:26.165Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/175af15551ed5aa6af16ff97aff75cfffb42da21\n2. https://git.kernel.org/stable/c/39336edd14a59dc086fb19957655e0f340bb28e8\n3. https://git.kernel.org/stable/c/08b77ed7cfaac62bba51ac7a0487409ec9fcbc84\n4. https://git.kernel.org/stable/c/b6fe13566bf5676b1e3b72d2a06d875733e93ee6\n5. https://git.kernel.org/stable/c/3e567032233a240b903dc11c9f18eeb3faa10ffa\n6. https://git.kernel.org/stable/c/96fe1a7ee477d701cfc98ab9d3c730c35d966861", "creation_timestamp": "2025-05-04T11:19:13.000000Z"}, {"uuid": "9cf19ab6-a940-4040-9902-e5985b1003e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58077", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14791", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58077\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback\n\ncommit 1f5664351410 (\"ASoC: lower \"no backend DAIs enabled for ... Port\"\nlog severity\") ignores -EINVAL error message on common soc_pcm_ret().\nIt is used from many functions, ignoring -EINVAL is over-kill.\n\nThe reason why -EINVAL was ignored was it really should only be used\nupon invalid parameters coming from userspace and in that case we don't\nwant to log an error since we do not want to give userspace a way to do\na denial-of-service attack on the syslog / diskspace.\n\nSo don't use soc_pcm_ret() on .prepare callback is better idea.\n\ud83d\udccf Published: 2025-03-06T16:13:41.159Z\n\ud83d\udccf Modified: 2025-05-04T10:09:27.591Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b65ba768302adc7ddc70811116cef80ca089af59\n2. https://git.kernel.org/stable/c/79b8c7c93beb4f5882c9ee5b9ba73354fa4bc9ee\n3. https://git.kernel.org/stable/c/90778f31efdf44622065ebbe8d228284104bd26f\n4. https://git.kernel.org/stable/c/8ec4e8c8e142933eaa8e1ed87168831069250e4e\n5. https://git.kernel.org/stable/c/301c26a018acb94dd537a4418cefa0f654500c6f", "creation_timestamp": "2025-05-04T11:19:12.000000Z"}, {"uuid": "f294a356-775a-4489-8a12-adf224ecf9b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58080", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58080\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: dispcc-sm6350: Add missing parent_map for a clock\n\nIf a clk_rcg2 has a parent, it should also have parent_map defined,\notherwise we'll get a NULL pointer dereference when calling clk_set_rate\nlike the following:\n\n  [    3.388105] Call trace:\n  [    3.390664]  qcom_find_src_index+0x3c/0x70 (P)\n  [    3.395301]  qcom_find_src_index+0x1c/0x70 (L)\n  [    3.399934]  _freq_tbl_determine_rate+0x48/0x100\n  [    3.404753]  clk_rcg2_determine_rate+0x1c/0x28\n  [    3.409387]  clk_core_determine_round_nolock+0x58/0xe4\n  [    3.421414]  clk_core_round_rate_nolock+0x48/0xfc\n  [    3.432974]  clk_core_round_rate_nolock+0xd0/0xfc\n  [    3.444483]  clk_core_set_rate_nolock+0x8c/0x300\n  [    3.455886]  clk_set_rate+0x38/0x14c\n\nAdd the parent_map property for the clock where it's missing and also\nun-inline the parent_data as well to keep the matching parent_map and\nparent_data together.\n\ud83d\udccf Published: 2025-03-06T16:13:43.414Z\n\ud83d\udccf Modified: 2025-05-04T10:09:31.843Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/3daca9050857220726732ad9d4a8512069386f46\n2. https://git.kernel.org/stable/c/3ad28517385e2821e8e43388d6a0b3e1ba0bc3ab\n3. https://git.kernel.org/stable/c/2dba8d5d423fa5f6f3a687aa6e0da5808f69091b\n4. https://git.kernel.org/stable/c/a1f15808adfd77268eac7fefce5378ad9fedbfba\n5. https://git.kernel.org/stable/c/d4cdb196f182d2fbe336c968228be00d8c3fed05", "creation_timestamp": "2025-05-04T11:19:09.000000Z"}, {"uuid": "a1f1098f-0b2e-4cf5-94a6-26272b2b50be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58081", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14788", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58081\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nclk: mmp2: call pm_genpd_init() only after genpd.name is set\n\nSetting the genpd's struct device's name with dev_set_name() is\nhappening within pm_genpd_init(). If it remains NULL, things can blow up\nlater, such as when crafting the devfs hierarchy for the power domain:\n\n  Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read\n  ...\n  Call trace:\n   strlen from start_creating+0x90/0x138\n   start_creating from debugfs_create_dir+0x20/0x178\n   debugfs_create_dir from genpd_debug_add.part.0+0x4c/0x144\n   genpd_debug_add.part.0 from genpd_debug_init+0x74/0x90\n   genpd_debug_init from do_one_initcall+0x5c/0x244\n   do_one_initcall from kernel_init_freeable+0x19c/0x1f4\n   kernel_init_freeable from kernel_init+0x1c/0x12c\n   kernel_init from ret_from_fork+0x14/0x28\n\nBisecting tracks this crash back to commit 899f44531fe6 (\"pmdomain: core:\nAdd GENPD_FLAG_DEV_NAME_FW flag\"), which exchanges use of genpd->name\nwith dev_name(&genpd->dev) in genpd_debug_add.part().\n\ud83d\udccf Published: 2025-03-06T16:13:44.176Z\n\ud83d\udccf Modified: 2025-05-04T10:09:38.230Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/eca01d5911fb34218d10a58d8d9534b758c8fd0a\n2. https://git.kernel.org/stable/c/763517124e27b07fa300b486d7d13c5d563a215e\n3. https://git.kernel.org/stable/c/e24b15d4704dcb73920c3d18a6157abd18df08c1", "creation_timestamp": "2025-05-04T11:19:08.000000Z"}, {"uuid": "2d662381-880b-4b62-835f-b770e82d3f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58252", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58252\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Vulnerability of insufficient information protection in the media library module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-05-06T07:15:24.968Z\n\ud83d\udccf Modified: 2025-05-06T14:02:20.928Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/5/", "creation_timestamp": "2025-05-06T14:21:31.000000Z"}, {"uuid": "f4c871d4-b7a5-4601-9484-3c932121369a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58237", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58237\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: consider that tail calls invalidate packet pointers\n\nTail-called programs could execute any of the helpers that invalidate\npacket pointers. Hence, conservatively assume that each tail call\ninvalidates packet pointers.\n\nMaking the change in bpf_helper_changes_pkt_data() automatically makes\nuse of check_cfg() logic that computes 'changes_pkt_data' effect for\nglobal sub-programs, such that the following program could be\nrejected:\n\n    int tail_call(struct __sk_buff *sk)\n    {\n     bpf_tail_call_static(sk, &jmp_table, 0);\n     return 0;\n    }\n\n    SEC(\"tc\")\n    int not_safe(struct __sk_buff *sk)\n    {\n     int *p = (void *)(long)sk->data;\n     ... make p valid ...\n     tail_call(sk);\n     *p = 42; /* this is unsafe */\n     ...\n    }\n\nThe tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that\ncan invalidate packet pointers. Otherwise, it can't be freplaced with\ntailcall_freplace.c:entry_freplace() that does a tail call.\n\ud83d\udccf Published: 2025-05-05T14:53:34.153Z\n\ud83d\udccf Modified: 2025-05-09T08:06:10.185Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f1692ee23dcaaddc24ba407b269707ee5df1301f\n2. https://git.kernel.org/stable/c/1c2244437f9ad3dd91215f920401a14f2542dbfc\n3. https://git.kernel.org/stable/c/1a4607ffba35bf2a630aab299e34dd3f6e658d70", "creation_timestamp": "2025-05-09T08:25:23.000000Z"}, {"uuid": "c972e6b8-2d46-444e-93bf-403a5edfd9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58098", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15705", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58098\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: track changes_pkt_data property for global functions\n\nWhen processing calls to certain helpers, verifier invalidates all\npacket pointers in a current state. For example, consider the\nfollowing program:\n\n    __attribute__((__noinline__))\n    long skb_pull_data(struct __sk_buff *sk, __u32 len)\n    {\n        return bpf_skb_pull_data(sk, len);\n    }\n\n    SEC(\"tc\")\n    int test_invalidate_checks(struct __sk_buff *sk)\n    {\n        int *p = (void *)(long)sk->data;\n        if ((void *)(p + 1) > (void *)(long)sk->data_end) return TCX_DROP;\n        skb_pull_data(sk, 0);\n        *p = 42;\n        return TCX_PASS;\n    }\n\nAfter a call to bpf_skb_pull_data() the pointer 'p' can't be used\nsafely. See function filter.c:bpf_helper_changes_pkt_data() for a list\nof such helpers.\n\nAt the moment verifier invalidates packet pointers when processing\nhelper function calls, and does not traverse global sub-programs when\nprocessing calls to global sub-programs. This means that calls to\nhelpers done from global sub-programs do not invalidate pointers in\nthe caller state. E.g. the program above is unsafe, but is not\nrejected by verifier.\n\nThis commit fixes the omission by computing field\nbpf_subprog_info->changes_pkt_data for each sub-program before main\nverification pass.\nchanges_pkt_data should be set if:\n- subprogram calls helper for which bpf_helper_changes_pkt_data\n  returns true;\n- subprogram calls a global function,\n  for which bpf_subprog_info->changes_pkt_data should be set.\n\nThe verifier.c:check_cfg() pass is modified to compute this\ninformation. The commit relies on depth first instruction traversal\ndone by check_cfg() and absence of recursive function calls:\n- check_cfg() would eventually visit every call to subprogram S in a\n  state when S is fully explored;\n- when S is fully explored:\n  - every direct helper call within S is explored\n    (and thus changes_pkt_data is set if needed);\n  - every call to subprogram S1 called by S was visited with S1 fully\n    explored (and thus S inherits changes_pkt_data from S1).\n\nThe downside of such approach is that dead code elimination is not\ntaken into account: if a helper call inside global function is dead\nbecause of current configuration, verifier would conservatively assume\nthat the call occurs for the purpose of the changes_pkt_data\ncomputation.\n\ud83d\udccf Published: 2025-05-05T14:53:32.417Z\n\ud83d\udccf Modified: 2025-05-09T08:06:08.048Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/79751e9227a5910c0e5a2c7186877d91821d957d\n2. https://git.kernel.org/stable/c/1d572c60488b52882b719ed273767ee3b280413d\n3. https://git.kernel.org/stable/c/51081a3f25c742da5a659d7fc6fd77ebfdd555be", "creation_timestamp": "2025-05-09T08:25:25.000000Z"}, {"uuid": "8da2b800-e47f-4dbf-a219-25dc79aa1ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58100", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: check changes_pkt_data property for extension programs\n\nWhen processing calls to global sub-programs, verifier decides whether\nto invalidate all packet pointers in current state depending on the\nchanges_pkt_data property of the global sub-program.\n\nBecause of this, an extension program replacing a global sub-program\nmust be compatible with changes_pkt_data property of the sub-program\nbeing replaced.\n\nThis commit:\n- adds changes_pkt_data flag to struct bpf_prog_aux:\n  - this flag is set in check_cfg() for main sub-program;\n  - in jit_subprogs() for other sub-programs;\n- modifies bpf_check_attach_btf_id() to check changes_pkt_data flag;\n- moves call to check_attach_btf_id() after the call to check_cfg(),\n  because it needs changes_pkt_data flag to be set:\n\n    bpf_check:\n      ...                             ...\n    - check_attach_btf_id             resolve_pseudo_ldimm64\n      resolve_pseudo_ldimm64   -->    bpf_prog_is_offloaded\n      bpf_prog_is_offloaded           check_cfg\n      check_cfg                     + check_attach_btf_id\n      ...                             ...\n\nThe following fields are set by check_attach_btf_id():\n- env->ops\n- prog->aux->attach_btf_trace\n- prog->aux->attach_func_name\n- prog->aux->attach_func_proto\n- prog->aux->dst_trampoline\n- prog->aux->mod\n- prog->aux->saved_dst_attach_type\n- prog->aux->saved_dst_prog_type\n- prog->expected_attach_type\n\nNeither of these fields are used by resolve_pseudo_ldimm64() or\nbpf_prog_offload_verifier_prep() (for netronome and netdevsim\ndrivers), so the reordering is safe.\n\ud83d\udccf Published: 2025-05-05T14:53:33.445Z\n\ud83d\udccf Modified: 2025-05-09T08:06:09.147Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/7197fc4acdf238ec8ad06de5a8235df0c1f9c7d7\n2. https://git.kernel.org/stable/c/3846e2bea565ee1c5195dcc625fda9868fb0e3b3\n3. https://git.kernel.org/stable/c/81f6d0530ba031b5f038a091619bf2ff29568852", "creation_timestamp": "2025-05-09T08:25:24.000000Z"}, {"uuid": "228348bd-208d-4d41-863e-13e80d36775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58101", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16405", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58101\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:55:09.386Z\n\ud83d\udd17 References:\n1. https://www.tarlogic.com/blog/cve-2024-58101", "creation_timestamp": "2025-05-14T20:32:35.000000Z"}, {"uuid": "f6890d72-6171-4522-a118-69da2028e17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5878", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16955", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5878\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled SimpleLightbox JavaScript library (version 2.1.5) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-20T07:22:29.588Z\n\ud83d\udccf Modified: 2025-05-20T07:22:29.588Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bcbc8ce6-5eb7-4599-b844-72eb2ff3093c?source=cve\n2. https://plugins.trac.wordpress.org/browser/nextgen-gallery/trunk/static/Lightbox/simplelightbox/nextgen_simple_lightbox_init.js\n3. https://plugins.trac.wordpress.org/browser/simplelightbox/trunk/dist/simple-lightbox.js\n4. https://plugins.trac.wordpress.org/changeset/3157076/nextgen-gallery", "creation_timestamp": "2025-05-20T07:39:50.000000Z"}, {"uuid": "71bff3c4-2c5f-4a81-9631-33d99edbfe82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58000", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5645", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58000\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: prevent reg-wait speculations\n\nWith *ENTER_EXT_ARG_REG instead of passing a user pointer with arguments\nfor the waiting loop the user can specify an offset into a pre-mapped\nregion of memory, in which case the\n[offset, offset + sizeof(io_uring_reg_wait)) will be intepreted as the\nargument.\n\nAs we address a kernel array using a user given index, it'd be a subject\nto speculation type of exploits. Use array_index_nospec() to prevent\nthat. Make sure to pass not the full region size but truncate by the\nmaximum offset allowed considering the structure size.\n\ud83d\udccf Published: 2025-02-27T02:07:19.155Z\n\ud83d\udccf Modified: 2025-02-27T02:07:19.155Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2a6de94df7bfa76d9850443547e7b3333f63a16a\n2. https://git.kernel.org/stable/c/29b95ac917927ce9f95bf38797e16333ecb489b1", "creation_timestamp": "2025-02-27T02:25:35.000000Z"}, {"uuid": "16e610eb-3dfb-49f3-bcd4-392bb9755c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58012", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58012\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params\n\nEach cpu DAI should associate with a widget. However, the topology might\nnot create the right number of DAI widgets for aggregated amps. And it\nwill cause NULL pointer deference.\nCheck that the DAI widget associated with the CPU DAI is valid to prevent\nNULL pointer deference due to missing DAI widgets in topologies with\naggregated amps.\n\ud83d\udccf Published: 2025-02-27T02:12:06.202Z\n\ud83d\udccf Modified: 2025-03-26T17:45:25.438Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/e012a77e4d7632cf615ba9625b1600ed8985c3b5\n2. https://git.kernel.org/stable/c/789a2fbf0900982788408d3b0034e0e3f914fb3b\n3. https://git.kernel.org/stable/c/569922b82ca660f8b24e705f6cf674e6b1f99cc7", "creation_timestamp": "2025-03-26T18:25:44.000000Z"}, {"uuid": "5269bd5e-21f5-4e90-82c6-d3a0d9312767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58002", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14766", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58002\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Remove dangling pointers\n\nWhen an async control is written, we copy a pointer to the file handle\nthat started the operation. That pointer will be used when the device is\ndone. Which could be anytime in the future.\n\nIf the user closes that file descriptor, its structure will be freed,\nand there will be one dangling pointer per pending async control, that\nthe driver will try to use.\n\nClean all the dangling pointers during release().\n\nTo avoid adding a performance penalty in the most common case (no async\noperation), a counter has been introduced with some logic to make sure\nthat it is properly handled.\n\ud83d\udccf Published: 2025-02-27T02:12:00.223Z\n\ud83d\udccf Modified: 2025-05-04T10:08:09.163Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2a29413ace64627e178fd422dd8a5d95219a2c0b\n2. https://git.kernel.org/stable/c/653993f46861f2971e95e9a0e36a34b49dec542c\n3. https://git.kernel.org/stable/c/117f7a2975baa4b7d702d3f4830d5a4ebd0c6d50\n4. https://git.kernel.org/stable/c/ac18d781466252cd35a3e311e0a4b264260fd927\n5. https://git.kernel.org/stable/c/4dbaa738c583a0e947803c69e8996e88cf98d971\n6. https://git.kernel.org/stable/c/438bda062b2c40ddd7df23b932e29ffe0a448cac\n7. https://git.kernel.org/stable/c/9edc7d25f7e49c33a1ce7a5ffadea2222065516c\n8. https://git.kernel.org/stable/c/221cd51efe4565501a3dbf04cc011b537dcce7fb", "creation_timestamp": "2025-05-04T10:18:05.000000Z"}, {"uuid": "719553f3-0844-4e4a-ba01-123ed5e6a0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13779", "content": "\u2744 Escaping the Chrome Sandbox Through DevTools.\n\nhttps://ading.dev/blog/posts/chrome_sandbox_escape.html\n\n\ud83d\udcf1 A POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension.\n\nhttps://github.com/ading2210/CVE-2024-6778-POC", "creation_timestamp": "2024-10-22T15:51:10.000000Z"}, {"uuid": "d681ff6f-b27a-45c1-8c52-56055ec6f10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58239", "type": "published-proof-of-concept", "source": "Telegram/FfKjltZxnaFwusyOHUgU-Wt35uG6_eCy4jZB30o26CR4Gps", "content": "", "creation_timestamp": "2025-10-14T15:00:09.000000Z"}, {"uuid": "b4166287-554f-451f-b216-68fce768ea59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/544", "content": "Top Security News for Today\n\nHistorical Analysis of Reflected Vulnerabilities: The Evolution of Windows Defender Defenses  \nhttps://www.reddit.com/r/netsec/comments/1lyprla/historical_analysis_of_reflected_vulnerabilities/\n\nLLM crawlers continue to DDoS SourceHut  \nhttps://www.reddit.com/r/netsec/comments/1lyoser/llm_crawlers_continue_to_ddos_sourcehut/\n\nKongTuke FileFix Leads to New Interlock RAT Variant  \nhttps://www.reddit.com/r/netsec/comments/1lz9tg8/kongtuke_filefix_leads_to_new_interlock_rat/\n\n[CVE-2024-58258] SugarCRM <=14.0.0 (css/preview) LESS Code Injection Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1lzgkiv/cve202458258_sugarcrm_1400_csspreview_less_code/\n\nTREVORspray \u2013 Credential Spray Toolkit for Azure, Okta, OWA & More  \nhttps://www.darknet.org.uk/2025/07/trevorspray-credential-spray-toolkit-for-azure-okta-owa-more/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-07-14T09:30:15.000000Z"}, {"uuid": "bf832052-ada4-47be-93f9-0caaab3ed532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58258", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/545", "content": "Top Security News for Today\n\nRevisiting automating MS-RPC vulnerability research and making the tool open source  \nhttps://www.reddit.com/r/netsec/comments/1lzh1t5/revisiting_automating_msrpc_vulnerability/\n\nForensic journey: Breaking down the UserAssist artifact structure  \nhttps://securelist.com/userassist-artifact-forensic-value-for-incident-response/116911/\n\nSecuring Against Phishing Beyond Email  \nhttps://www.tripwire.com/state-of-security/securing-against-phishing-beyond-email\n\nFooling the Sandbox: A Chrome-atic Escape  \nhttps://www.reddit.com/r/netsec/comments/1lzj3jt/fooling_the_sandbox_a_chromeatic_escape/\n\nRomanian police arrest 13 scammers targeting UK\u2019s tax authority  \nhttps://therecord.media/romania-arrests-tax-fraud-ring-britain-hmrc\n\n14th July \u2013 Threat Intelligence Report  \nhttps://research.checkpoint.com/2025/14th-july-threat-intelligence-report/\n\n[CVE-2024-58258] SugarCRM <= 14.0.0 (css/preview) LESS Code Injection Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1lzgkiv/cve202458258_sugarcrm_1400_csspreview_less_code/\n\nWatch the on-demand webinar: Shift left without the strain  \nhttps://portswigger.net/blog/watch-the-on-demand-webinar-shift-left-without-the-strain\n\nImproving IT efficiency with Microsoft Security Copilot in Microsoft Intune and Microsoft Entra  \nhttps://www.microsoft.com/en-us/security/blog/2025/07/14/improving-it-efficiency-with-microsoft-security-copilot-in-microsoft-intune-and-microsoft-entra/\n\nCVE-2025-5333 - CVSS 9.5: Remote Code Execution in Broadcom Symantec Endpoint Management Suite (Altiris)  \nhttps://www.reddit.com/r/netsec/comments/1lzo9wz/cve20255333_cvss_95_remote_code_execution_in/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-07-15T09:30:25.000000Z"}, {"uuid": "d25fd602-1b94-489e-aa40-b85c7c4ba96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/uappsec/153", "content": "CISA KEV\n\n\u0412\u0430\u043c \u043a\u043e\u043b\u0438\u0441\u044c \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0441\u043f\u0435\u0440\u0435\u0447\u0430\u0442\u0438\u0447\u044c \u0456\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0441\u0442\u043e\u0441\u043e\u0432\u043d\u043e \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0437\u0430\u0446\u0456\u0457 \u0437\u0430\u0434\u0430\u0447 \u043f\u043e \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044e \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439? \u041e\u0441\u043e\u0431\u043b\u0438\u0432\u043e \u044f\u043a\u0449\u043e \u0446\u0435 CVE \u044f\u043a\u0430\u0441\u044c. \u0423 \u0432\u0430\u0441 \u043f\u043e\u0447\u0438\u043d\u0430\u044e\u0442\u044c \u0432\u0438\u043c\u0430\u0433\u0430\u0442\u0438 \u0434\u043e\u043a\u0430\u0437\u0438,  \u0449\u043e \u0446\u0435 \u0441\u043f\u0440\u0430\u0432\u0434\u0456 \u0440\u0438\u0437\u0438\u043a, \u0456 \u0440\u043e\u0431\u043e\u0447\u0435 \u041f\u043e\u0421, \u044f\u043a\u0435 \u0437\u0440\u043e\u0431\u0438\u0442\u044c \u043c\u0430\u0441\u0441\u043e\u0432\u0438\u0439 \u0432\u0438\u0442\u0456\u043a \u0432\u0441\u0456\u0445 \u0434\u0430\u043d\u0438\u0445 \u0456 \u0437\u0430\u0445\u043e\u043f\u0438\u0442\u044c \u0432\u0441\u0456 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0456 \u0430\u043a\u0430\u043d\u0443\u0442\u0438 \u0430\u0434\u043c\u0456\u043d\u0456\u0432. \u0417\u0432\u0456\u0441\u043d\u043e. \u0449\u043e \u0443 \u0432\u0430\u0441 \u043d\u0435\u043c\u0430 \u043d\u0435 \u0442\u0435 \u0430 \u043d\u0456 \u0447\u0430\u0441\u0443, \u0430 \u043d\u0456 \u0456\u043d\u0448\u0438\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u0456\u0432. \u0414\u043e\u0432\u0435\u0441\u0442\u0438, \u0449\u043e \u0440\u0438\u0437\u0438\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0454 - \u0441\u0442\u0430\u0454 \u0441\u043a\u043b\u0430\u0434\u043d\u0456\u0448\u0438\u043c. \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u043e \u0446\u0435 \u0432\u0438\u0440\u0456\u0448\u0443\u044e\u0454\u0442\u044c\u0441\u044f \u044f\u043a\u0456\u0441\u043d\u0438\u043c \u043f\u0456\u0434\u0440\u0430\u0445\u0443\u043d\u043a\u043e\u043c EPSS, \u0430\u043b\u0435 \u0446\u0435 \u043d\u0435 \u0437\u0430\u0432\u0436\u0434\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0456 \u043d\u0435 \u0437\u0430\u0432\u0436\u0434\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e, \u0446\u0435 \u0456\u043d\u0448\u0438\u0439 \u0440\u0456\u0432\u0435\u043d\u044c \u0437\u0440\u0456\u043b\u043e\u0441\u0442\u0456. \u0410\u043b\u0435 \u0432\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u043f\u043e\u0441\u0438\u043b\u0438\u0442\u0438 \u0441\u0432\u043e\u044e \u043f\u043e\u0437\u0438\u0446\u0456\u044e \u0437\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e CISA KEV.\n\nKnown Exploited Vulnerabilities Catalog - \u044f\u043a\u0449\u043e \u0434\u0443\u0436\u0435 \u0441\u0442\u0438\u0441\u043b\u043e, \u0442\u043e \u043e\u0440\u0433\u0430\u043d\u0456\u0437\u0430\u0446\u0456\u044f CISA \u0432\u0435\u0434\u0435 \u043e\u043a\u0440\u0435\u043c\u0438\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0456\u0437 CVE-\u0448\u0435\u043a, \u044f\u043a\u0456 \u043c\u0430\u044e\u0442\u044c \u0447\u0456\u0442\u043a\u0456 \u043a\u0440\u043e\u043a\u0438 \u0434\u043e \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044f \u0442\u0430, \u043d\u0430\u0439\u0433\u043e\u043b\u043e\u0432\u043d\u0456\u0448\u0435, \u0456\u0441\u043d\u0443\u044e\u0442\u044c \u0434\u043e\u043a\u0430\u0437\u0438 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0456\u0457 \u0446\u0456\u0454\u0457 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 \u0434\u0438\u043a\u0456\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0456. \u0422\u0430\u043a\u0438\u043c \u0447\u0438\u043d\u043e\u043c, \u0432\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u0434\u043e\u0434\u0430\u0442\u0438 \u0432\u0430\u0433\u0438 \u0441\u0432\u043e\u0457\u043c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0432\u0448\u0438, \u0449\u043e CVE-\u0448\u043a\u0430 \u043d\u0430\u044f\u0432\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0437\u0456 KEV. \u041d\u0430 \u0434\u0435\u0432\u0435\u043b\u043e\u043f\u0435\u0440\u0441\u044c\u043a\u043e-\u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0441\u044c\u043a\u0443 \u043c\u043e\u0432\u0443 \u0446\u0435 \u043f\u0435\u0440\u0435\u043a\u043b\u0430\u0434\u0430\u044d\u0442\u044c\u0441\u044f \u201c\u043a\u043e\u0433\u043e\u0441\u044c \u0432\u0436\u0435 \u0436\u0430\u0445\u043d\u0443\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0457, \u044b \u043d\u0430\u0441\u0442\u0443\u043f\u043d\u0438\u043c\u0438 \u043c\u043e\u0436\u0435\u043c \u0441\u0442\u0430\u0442\u0438 \u043c\u0438\u201d. \n\u0417\u043d\u0430\u0447\u0435\u043d\u043d\u044f KEV \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0434\u043e EPSS \u044f\u043a \u043e\u0434\u0438\u043d \u0456\u0437 \u0435\u043b\u0435\u043c\u0435\u043d\u0442\u0456\u0432.\n\n\u0421\u0430\u043c\u0430 \u043b\u0456\u043d\u043a\u0430 \u043d\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433: https://www.cisa.gov/known-exploited-vulnerabilities-catalog\n\n\u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0437\u0430 \u0432\u0447\u043e\u0440\u0430 \u0442\u0443\u0434\u0438 \u043f\u043e\u0442\u0440\u0430\u043f\u0438\u043b\u0438 \u0434\u0432\u0456 CVE: \n \u2022 CVE-2024-58136 (Yiiframework Yii Improper Protection of Alternate Path Vulnerability, CVSS 3.1: 9.0, Critical)\n \u2022 CVE-2025-34028 (Commvault Command Center Path Traversal Vulnerability, CVSS 3.1: 10.0, Critical)", "creation_timestamp": "2025-05-05T07:04:33.000000Z"}, {"uuid": "852eb81a-44c6-4bc7-92d4-ea20ff54de03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/itsec_news/5879", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0445\u043e\u0440\u043e\u0448\u043e, \u0430 \u0434\u0432\u0435 \u2014 \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c\u0443 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0443: \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043d\u0430 Craft CMS\n\n\ud83d\udcac\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CSIRT \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Orange Cyberdefense \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0441\u0435\u0440\u0438\u044e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 Craft CMS \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432. \u0420\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u043b\u043e\u0449\u0430\u0434\u043e\u043a, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u044b\u044f\u0432\u0438\u043b\u0438: \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0438\u0437 \u0434\u0432\u0443\u0445 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0431\u0440\u0435\u0448\u0435\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u0438\u0437\u044a\u044f\u043d \u0432 \u0437\u0430\u0449\u0438\u0442\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0438\u043d\u0434\u0435\u043a\u0441 CVE-2025-32432, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2024-58136 \u0442\u0430\u0438\u0442\u0441\u044f \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii, \u043b\u0435\u0436\u0430\u0449\u0435\u043c \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 Craft CMS \u2014 \u043e\u043d\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u044d\u0442\u0438\u0447\u043d\u043e\u0433\u043e \u0445\u0430\u043a\u0438\u043d\u0433\u0430 SensePost, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Orange Cyberdefense, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043a\u0430\u0440\u0442\u0438\u043d\u0443 \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u044f. \u0410\u0432\u0442\u043e\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 PHP-\u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u0412\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u0442\u0443\u0435\u0442 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-32432: \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \"return URL\". \u041f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 PHP-\u0444\u0430\u0439\u043b \u0441\u0435\u0441\u0441\u0438\u0438, \u0430 \u0435\u0451 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 CVE-2024-58136, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f JSON-\u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0449\u0430\u044f PHP-\u043a\u043e\u0434 \u0438\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u043c, \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0442 \u043a\u0430\u043d\u0430\u043b\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0430 \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043f\u043e\u0437\u0436\u0435 \u0432 \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0435\u0439\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0421\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Yii \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-58136 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.0.52 \u043e\u0442 9 \u0430\u043f\u0440\u0435\u043b\u044f. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Craft CMS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f 3.9.15, 4.14.15 \u0438 5.6.17, \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0435 CVE-2025-32432.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 Craft CMS \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Yii 2.0.51, \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Orange \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442: \u043f\u043e\u0441\u043b\u0435 \u0430\u043f\u0434\u0435\u0439\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u0442\u0435\u0440\u044f\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0437\u044a\u044f\u043d \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0439. \u041f\u0435\u0440\u0432\u043e\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u2014 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 php craft setup/security-key \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 CRAFT_SECURITY_KEY \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043c\u0435\u043d\u0430 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 S3, Stripe \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438) \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u043a\u0432\u0438\u0437\u0438\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0431\u0440\u043e\u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b php craft resave/users --set passwordResetRequired --to \"fn() => true\".\n\n\u0418\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043a \u043e\u0442\u0447\u0435\u0442\u0443 SensePost . \u0415\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 Craft CMS \u0432\u0435\u0440\u0441\u0438\u0439 4 \u0438 5 \u2014 CVE-2025-23209, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0427\u0435\u0440\u0435\u0434\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u043a \u044d\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u043e\u0431\u043e\u0439 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u0442\u0440\u043e\u0433\u043e\u0433\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-28T04:49:19.000000Z"}, {"uuid": "c8a1375e-a8eb-46c4-a366-20eb0a6004a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58251", "type": "seen", "source": "https://t.me/cvedetector/23617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58251 - BusyBox Netstat Terminal Escape Sequence Injection Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-58251 \nPublished : April 23, 2025, 6:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. \nSeverity: 2.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T22:50:51.000000Z"}, {"uuid": "a7baa2c4-f307-4ad3-88eb-8fad800e0099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58250", "type": "seen", "source": "https://t.me/cvedetector/23475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58250 - ppp Passprompt Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58250 \nPublished : April 22, 2025, 1:15 a.m. | 31\u00a0minutes ago \nDescription : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T04:11:18.000000Z"}, {"uuid": "110815e0-d952-4e01-893e-f104b86d3068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58099", "type": "seen", "source": "https://t.me/cvedetector/23990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58099 - \"VMXNET3 DMA Address Calculation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-58099 \nPublished : April 29, 2025, 12:15 p.m. | 17\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame  \n  \nAndrew and Nikolay reported connectivity issues with Cilium's service  \nload-balancing in case of vmxnet3.  \n  \nIf a BPF program for native XDP adds an encapsulation header such as  \nIPIP and transmits the packet out the same interface, then in case  \nof vmxnet3 a corrupted packet is being sent and subsequently dropped  \non the path.  \n  \nvmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp()  \nthrough vmxnet3_xdp_xmit_back() calculates an incorrect DMA address:  \n  \n  page = virt_to_page(xdpf->data);  \n  tbi->dma_addr = page_pool_get_dma_addr(page) +  \n                  VMXNET3_XDP_HEADROOM;  \n  dma_sync_single_for_device(&adapter->pdev->dev,  \n                             tbi->dma_addr, buf_size,  \n                             DMA_TO_DEVICE);  \n  \nThe above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP  \nBPF program could have moved xdp->data. While the passed buf_size is  \ncorrect (xdpf->len), the dma_addr needs to have a dynamic offset which  \ncan be calculated as xdpf->data - (void *)xdpf, that is, xdp->data -  \nxdp->data_hard_start. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T15:09:22.000000Z"}, {"uuid": "9d0081cc-b705-4b06-9c72-1e88ca260917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58127", "type": "seen", "source": "https://t.me/cvedetector/22264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58127 - Cisco Security Verification Module Access Control Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-58127 \nPublished : April 7, 2025, 4:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : Access control vulnerability in the security verification module  \nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T08:42:06.000000Z"}, {"uuid": "01de4ad6-08e5-4649-9d3c-408f3a052dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58249", "type": "seen", "source": "https://t.me/cvedetector/23144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58249 - wxWidgets Curl Refused Connection Crash Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58249 \nPublished : April 16, 2025, 4:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:37.000000Z"}, {"uuid": "2478b2e8-13c8-46b1-a0f0-52f3687a66d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58129", "type": "seen", "source": "https://t.me/cvedetector/21474", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58129 - MISP Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-58129 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:50.000000Z"}, {"uuid": "e9e3c0c3-86a5-46f8-af42-48d0ecd72a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58092", "type": "seen", "source": "https://t.me/cvedetector/23070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58092 - Linux Kernel NFSd Double Initialization Double-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58092 \nPublished : April 16, 2025, 11:15 a.m. | 14\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnfsd: fix legacy client tracking initialization  \n  \nGet rid of the nfsd4_legacy_tracking_ops->init() call in  \ncheck_for_legacy_methods().  That will be handled in the caller  \n(nfsd4_client_tracking_init()).  Otherwise, we'll wind up calling  \nnfsd4_legacy_tracking_ops->init() twice, and the second time we'll  \ntrigger the BUG_ON() in nfsd4_init_recdir(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T13:31:21.000000Z"}, {"uuid": "781731a8-c60a-413f-b848-f6e3d71960e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58128", "type": "seen", "source": "https://t.me/cvedetector/21480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58128 - MISP Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58128 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : In MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks via a global menu link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:57.000000Z"}, {"uuid": "71ab9544-bda8-420b-be81-0fca9e0f22ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58130", "type": "seen", "source": "https://t.me/cvedetector/21475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58130 - MISP Unsanitized Non-JSON Response Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58130 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:50.000000Z"}, {"uuid": "a29bf4e2-bdec-4484-a7c4-d789f76e5ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/cvedetector/22621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58136 - Yii 2 Behavior Array Key Attachment Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58136 \nPublished : April 10, 2025, 3:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T06:59:54.000000Z"}, {"uuid": "0bf53d1e-fdd4-437a-a33d-d144de59b2fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58036", "type": "seen", "source": "https://t.me/cvedetector/22193", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58036 - Dropbox::API Cryptographically Insecure Random Number Generation\", \n  \"Content\": \"CVE ID : CVE-2024-58036 \nPublished : April 5, 2025, 4:15 p.m. | 36\u00a0minutes ago \nDescription : Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.  \n  \nSpecifically Net::Dropbox::API uses the Data::Random library which specifically states that it is \"Useful mostly for test programs\". Data::Random uses the rand() function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T19:05:41.000000Z"}, {"uuid": "f72f71ce-2418-4983-8a81-f42911af21be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58103", "type": "seen", "source": "https://t.me/cvedetector/20395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58103 - Square Wire Deserialization Recursion Limit Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58103 \nPublished : March 16, 2025, 4:15 a.m. | 21\u00a0minutes ago \nDescription : Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T06:20:27.000000Z"}, {"uuid": "756b0938-f398-4fe1-a74b-fb50d15b9ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58131", "type": "seen", "source": "https://t.me/cvedetector/22212", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58131 - FISCO BCOS Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-58131 \nPublished : April 6, 2025, 3:15 a.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a large min_seal_time value) joins a blockchain network. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-06T07:37:37.000000Z"}, {"uuid": "61f5dc5e-302e-4177-8dad-749dad0ed391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58133", "type": "seen", "source": "https://t.me/cvedetector/22211", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58133 - ChainMaker Go Concurrency Panic\", \n  \"Content\": \"CVE ID : CVE-2024-58133 \nPublished : April 6, 2025, 3:15 a.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-06T07:37:37.000000Z"}, {"uuid": "2faa2c40-841c-4e9f-a8a2-61f697682923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58132", "type": "seen", "source": "https://t.me/cvedetector/22210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58132 - ChainMaker Concurrent Map Panic\", \n  \"Content\": \"CVE ID : CVE-2024-58132 \nPublished : April 6, 2025, 3:15 a.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-06T07:37:36.000000Z"}, {"uuid": "fd8039e3-258d-4b98-a0f0-9f194c0547a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58105", "type": "seen", "source": "https://t.me/cvedetector/21116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58105 - Trend Micro Apex One Security Agent Plug-in Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58105 \nPublished : March 25, 2025, 6:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.   \n  \nThis CVE address an addtional bypass not covered in CVE-2024-58104.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T22:00:08.000000Z"}, {"uuid": "97101846-e40b-46e3-8370-fd06d6a8183e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/cvedetector/21116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58105 - Trend Micro Apex One Security Agent Plug-in Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58105 \nPublished : March 25, 2025, 6:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.   \n  \nThis CVE address an addtional bypass not covered in CVE-2024-58104.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T22:00:08.000000Z"}, {"uuid": "a575404c-cbfe-498e-8894-797449462a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/cvedetector/21115", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58104 - Trend Micro Apex One Security Agent Plug-in Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58104 \nPublished : March 25, 2025, 6:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.   \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T22:00:07.000000Z"}, {"uuid": "dc09ac40-4556-4b9f-a318-a59a8b0e861d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58077", "type": "seen", "source": "https://t.me/cvedetector/19730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58077 - Linux Kernel ASoC soc_pcm Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58077 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback  \n  \ncommit 1f5664351410 (\"ASoC: lower \"no backend DAIs enabled for ... Port\"  \nlog severity\") ignores -EINVAL error message on common soc_pcm_ret().  \nIt is used from many functions, ignoring -EINVAL is over-kill.  \n  \nThe reason why -EINVAL was ignored was it really should only be used  \nupon invalid parameters coming from userspace and in that case we don't  \nwant to log an error since we do not want to give userspace a way to do  \na denial-of-service attack on the syslog / diskspace.  \n  \nSo don't use soc_pcm_ret() on .prepare callback is better idea. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:53.000000Z"}, {"uuid": "148de6d8-bd3f-44ca-bd23-0ee3daa4eb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58082", "type": "seen", "source": "https://t.me/cvedetector/19729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58082 - NuvoMedia NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-58082 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: nuvoton: Fix an error check in npcm_video_ece_init()  \n  \nWhen function of_find_device_by_node() fails, it returns NULL instead of  \nan error code. So the corresponding error check logic should be modified  \nto check whether the return value is NULL and set the error code to be  \nreturned as -ENODEV. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:50.000000Z"}, {"uuid": "9c6c5049-1029-4abd-a884-dcb3826010b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58081", "type": "seen", "source": "https://t.me/cvedetector/19728", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58081 - Linux Kernel clk MMP2 NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58081 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nclk: mmp2: call pm_genpd_init() only after genpd.name is set  \n  \nSetting the genpd's struct device's name with dev_set_name() is  \nhappening within pm_genpd_init(). If it remains NULL, things can blow up  \nlater, such as when crafting the devfs hierarchy for the power domain:  \n  \n  Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read  \n  ...  \n  Call trace:  \n   strlen from start_creating+0x90/0x138  \n   start_creating from debugfs_create_dir+0x20/0x178  \n   debugfs_create_dir from genpd_debug_add.part.0+0x4c/0x144  \n   genpd_debug_add.part.0 from genpd_debug_init+0x74/0x90  \n   genpd_debug_init from do_one_initcall+0x5c/0x244  \n   do_one_initcall from kernel_init_freeable+0x19c/0x1f4  \n   kernel_init_freeable from kernel_init+0x1c/0x12c  \n   kernel_init from ret_from_fork+0x14/0x28  \n  \nBisecting tracks this crash back to commit 899f44531fe6 (\"pmdomain: core:  \nAdd GENPD_FLAG_DEV_NAME_FW flag\"), which exchanges use of genpd->name  \nwith dev_name(&genpd->dev) in genpd_debug_add.part(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:49.000000Z"}, {"uuid": "dc8e386f-1758-44e0-af51-fb01db46e094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58083", "type": "seen", "source": "https://t.me/cvedetector/19733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58083 - \"KVM Linux Online VCPU Access Control Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-58083 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nKVM: Explicitly verify target vCPU is online in kvm_get_vcpu()  \n  \nExplicitly verify the target vCPU is fully online _prior_ to clamping the  \nindex in kvm_get_vcpu().  If the index is \"bad\", the nospec clamping will  \ngenerate '0', i.e. KVM will return vCPU0 instead of NULL.  \n  \nIn practice, the bug is unlikely to cause problems, as it will only come  \ninto play if userspace or the guest is buggy or misbehaving, e.g. KVM may  \nsend interrupts to vCPU0 instead of dropping them on the floor.  \n  \nHowever, returning vCPU0 when it shouldn't exist per online_vcpus is  \nproblematic now that KVM uses an xarray for the vCPUs array, as KVM needs  \nto insert into the xarray before publishing the vCPU to userspace (see  \ncommit c5b077549136 (\"KVM: Convert the kvm->vcpus array to a xarray\")),  \ni.e. before vCPU creation is guaranteed to succeed.  \n  \nAs a result, incorrectly providing access to vCPU0 will trigger a  \nuse-after-free if vCPU0 is dereferenced and kvm_vm_ioctl_create_vcpu()  \nbails out of vCPU creation due to an error and frees vCPU0.  Commit  \nafb2acb2e3a3 (\"KVM: Fix vcpu_array[0] races\") papered over that issue, but  \nin doing so introduced an unsolvable teardown conundrum.  Preventing  \naccesses to vCPU0 before it's fully online will allow reverting commit  \nafb2acb2e3a3, without re-introducing the vcpu_array[0] UAF race. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:56.000000Z"}, {"uuid": "a5ea4082-aa9e-4bc7-be62-79e1d9a8b199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58085", "type": "seen", "source": "https://t.me/cvedetector/19732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58085 - Linux Tomoyo Overlong Line Allocation Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-58085 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntomoyo: don't emit warning in tomoyo_write_control()  \n  \nsyzbot is reporting too large allocation warning at tomoyo_write_control(),  \nfor one can write a very very long line without new line character. To fix  \nthis warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE,  \nfor practically a valid line should be always shorter than 32KB where the  \n\"too small to fail\" memory-allocation rule applies.  \n  \nOne might try to write a valid line that is longer than 32KB, but such  \nrequest will likely fail with -ENOMEM. Therefore, I feel that separately  \nreturning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant.  \nThere is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:55.000000Z"}, {"uuid": "0824fddd-9046-4e3f-855c-acf9aeb0372c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58084", "type": "seen", "source": "https://t.me/cvedetector/19731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58084 - Qualcomm QCOM Firmware Read Barrier Vulnerability (Data Corruption)\", \n  \"Content\": \"CVE ID : CVE-2024-58084 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfirmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()  \n  \nCommit 2e4955167ec5 (\"firmware: qcom: scm: Fix __scm and waitq  \ncompletion variable initialization\") introduced a write barrier in probe  \nfunction to store global '__scm' variable.  We all known barriers are  \npaired (see memory-barriers.txt: \"Note that write barriers should  \nnormally be paired with read or address-dependency barriers\"), therefore  \naccessing it from concurrent contexts requires read barrier.  Previous  \ncommit added such barrier in qcom_scm_is_available(), so let's use that  \ndirectly.  \n  \nLack of this read barrier can result in fetching stale '__scm' variable  \nvalue, NULL, and dereferencing it.  \n  \nNote that barrier in qcom_scm_is_available() satisfies here the control  \ndependency. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:54.000000Z"}, {"uuid": "8d021951-e63f-4ac6-b572-f22810190a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58079", "type": "seen", "source": "https://t.me/cvedetector/19727", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58079 - Linux UVC Driver GPIO Unbind Crash Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58079 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: uvcvideo: Fix crash during unbind if gpio unit is in use  \n  \nWe used the wrong device for the device managed functions. We used the  \nusb device, when we should be using the interface device.  \n  \nIf we unbind the driver from the usb interface, the cleanup functions  \nare never called. In our case, the IRQ is never disabled.  \n  \nIf an IRQ is triggered, it will try to access memory sections that are  \nalready free, causing an OOPS.  \n  \nWe cannot use the function devm_request_threaded_irq here. The devm_*  \nclean functions may be called after the main structure is released by  \nuvc_delete.  \n  \nLuckily this bug has small impact, as it is only affected by devices  \nwith gpio units and the user has to unbind the device, a disconnect will  \nnot trigger this error. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:48.000000Z"}, {"uuid": "cc8f67ff-7b2b-4a96-b914-1cef157cc07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58080", "type": "seen", "source": "https://t.me/cvedetector/19726", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58080 - Qualcomm QCOM Dispcc-sm6350 Clock Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58080 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nclk: qcom: dispcc-sm6350: Add missing parent_map for a clock  \n  \nIf a clk_rcg2 has a parent, it should also have parent_map defined,  \notherwise we'll get a NULL pointer dereference when calling clk_set_rate  \nlike the following:  \n  \n  [    3.388105] Call trace:  \n  [    3.390664]  qcom_find_src_index+0x3c/0x70 (P)  \n  [    3.395301]  qcom_find_src_index+0x1c/0x70 (L)  \n  [    3.399934]  _freq_tbl_determine_rate+0x48/0x100  \n  [    3.404753]  clk_rcg2_determine_rate+0x1c/0x28  \n  [    3.409387]  clk_core_determine_round_nolock+0x58/0xe4  \n  [    3.421414]  clk_core_round_rate_nolock+0x48/0xfc  \n  [    3.432974]  clk_core_round_rate_nolock+0xd0/0xfc  \n  [    3.444483]  clk_core_set_rate_nolock+0x8c/0x300  \n  [    3.455886]  clk_set_rate+0x38/0x14c  \n  \nAdd the parent_map property for the clock where it's missing and also  \nun-inline the parent_data as well to keep the matching parent_map and  \nparent_data together. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:47.000000Z"}, {"uuid": "46656661-848b-4e6f-a259-4ca2c14456ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58078", "type": "seen", "source": "https://t.me/cvedetector/19725", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58078 - Linux Kernel Misc Dynamic Minor Allocation IDA Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58078 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmisc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors  \n  \nmisc_minor_alloc was allocating id using ida for minor only in case of  \nMISC_DYNAMIC_MINOR but misc_minor_free was always freeing ids  \nusing ida_free causing a mismatch and following warn:  \n> > WARNING: CPU: 0 PID: 159 at lib/idr.c:525 ida_free+0x3e0/0x41f  \n> > ida_free called for id=127 which is not allocated.  \n> > <<> [<60941eb4] ida_free+0x3e0/0x41f  \n> > [<605ac993] misc_minor_free+0x3e/0xbc  \n> > [<605acb82] misc_deregister+0x171/0x1b3  \n  \nmisc_minor_alloc is changed to allocate id from ida for all minors  \nfalling in the range of dynamic/ misc dynamic minors \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:46.000000Z"}, {"uuid": "d7a6e6c5-35fb-484b-b09a-bebdf4f72d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58086", "type": "seen", "source": "https://t.me/cvedetector/19724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58086 - \"Linux Kernel V3D Uninitialized Pointer Use\"\", \n  \"Content\": \"CVE ID : CVE-2024-58086 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/v3d: Stop active perfmon if it is being destroyed  \n  \nIf the active performance monitor (`v3d->active_perfmon`) is being  \ndestroyed, stop it first. Currently, the active perfmon is not  \nstopped during destruction, leaving the `v3d->active_perfmon` pointer  \nstale. This can lead to undefined behavior and instability.  \n  \nThis patch ensures that the active perfmon is stopped before being  \ndestroyed, aligning with the behavior introduced in commit  \n7d1fd3638ee3 (\"drm/v3d: Stop the active perfmon before being destroyed\"). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:42.000000Z"}, {"uuid": "4dddf7ed-2017-4c8f-8027-7c6c1bf00c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/527", "content": "#Offensive_security\n1. Remote Kerberos Relay Framework\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n2. Compromising MSSQL Databases by Relaying\nhttps://lsecqt.github.io/Red-Teaming-Army/active-directory/compromising-mssql-databases-by-relaying\n3. Auth. Bypass In (Un)Limited Scenarios - Progress MOVEit Transfer (CVE-2024-5806)\nhttps://labs.watchtowr.com/auth-bypass-in-un-limited-scenarios-progress-moveit-transfer-cve-2024-5806", "creation_timestamp": "2024-06-26T09:50:07.000000Z"}, {"uuid": "f966fc66-8004-472c-b4ed-c98345c1875d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5872", "type": "seen", "source": "https://t.me/cvedetector/15002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5872 - Arista EOS VLAN Tag Parsing Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-5872 \nPublished : Jan. 10, 2025, 9:15 p.m. | 42\u00a0minutes ago \nDescription : On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:02:07.000000Z"}, {"uuid": "41f0ccd1-5ba6-488d-b5a3-53adac38c5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4116", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T04:47:11.000000Z"}, {"uuid": "d1d42804-5f56-4555-aee4-278c5c08cd3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5890", "type": "seen", "source": "https://t.me/cvedetector/11812", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5890 - \"ServiceNow Now Platform HTML Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-5890 \nPublished : Dec. 2, 2024, 7:15 p.m. | 38\u00a0minutes ago \nDescription : ServiceNow has addressed an HTML injection vulnerability that was identified in the Now Platform. This vulnerability could potentially enable an unauthenticated user to modify a web page or redirect users to another website.  \n  \nServiceNow released updates\u00a0to customers that addressed this vulnerability.  If you have not done so already, we recommend applying security patches relevant to your instance(s) as soon as possible. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T21:16:10.000000Z"}, {"uuid": "4211a247-96b9-473d-9fb1-a0a4e83b1bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5823", "type": "seen", "source": "https://t.me/cvedetector/9327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5823 - Chuanhuchatgpt File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5823 \nPublished : Oct. 29, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <=\nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T14:46:55.000000Z"}, {"uuid": "bdfd95bc-686b-49f7-b05b-fdfa058f8d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5803", "type": "seen", "source": "https://t.me/cvedetector/6897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5803 - Avast Antivirus AVGUI.exe COM Hijack Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-5803 \nPublished : Oct. 3, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T18:17:17.000000Z"}, {"uuid": "c3ef032e-e6f1-4023-b394-371bf6aebd9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5869", "type": "seen", "source": "https://t.me/cvedetector/5615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5869 - Neighborly WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5869 \nPublished : Sept. 13, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : The Neighborly theme for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018url\u2019 parameter within the theme's Button shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T17:58:00.000000Z"}, {"uuid": "40697499-8a50-4aa7-b724-379cf0d25c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5867", "type": "seen", "source": "https://t.me/cvedetector/5614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5867 - WordPress Delicate Theme Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5867 \nPublished : Sept. 13, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : The Delicate theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter within the theme's Button shortcode in all versions up to, and including, 3.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T17:57:59.000000Z"}, {"uuid": "e1d1edf5-33b4-4755-8bb8-992ff0896a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5870", "type": "seen", "source": "https://t.me/cvedetector/5617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5870 - Tweaker5 WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5870 \nPublished : Sept. 13, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : The Tweaker5 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018url\u2019 parameter within the theme's Button shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T17:58:04.000000Z"}, {"uuid": "9421378e-a222-48fe-b3b2-03210b7ed514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5884", "type": "seen", "source": "https://t.me/cvedetector/5609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5884 - \"WordPress Beauty Theme Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-5884 \nPublished : Sept. 13, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : The Beauty theme for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018tpl_featured_cat_id\u2019 parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T17:57:52.000000Z"}, {"uuid": "3bc4ea83-b268-4a25-b180-f706e225e2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5879", "type": "seen", "source": "https://t.me/cvedetector/4499", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5879 - HubSpot WordPress Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-5879 \nPublished : Aug. 30, 2024, 5:15 a.m. | 39\u00a0minutes ago \nDescription : The HubSpot \u2013 CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting Widget in all versions up to, and including, 11.1.22 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T08:07:39.000000Z"}, {"uuid": "43ee3082-1976-4836-afc5-3f10183359f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5857", "type": "seen", "source": "https://t.me/cvedetector/4381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5857 - WordPress Funnelforms File Deletion\", \n  \"Content\": \"CVE ID : CVE-2024-5857 \nPublished : Aug. 29, 2024, 11:15 a.m. | 21\u00a0minutes ago \nDescription : The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor \u2013 Funnelforms Free plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the af2_handel_file_remove AJAX action in all versions up to, and including, 3.7.3.2. This makes it possible for unauthenticated attackers to delete arbitrary media files. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T13:42:42.000000Z"}, {"uuid": "f2c40211-07f8-4124-8512-4935164e4027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "Telegram/DxGHCqfwG_bYacNrIebxQTeoU9o7IKAvZUNWxqMmMo_93w", "content": "", "creation_timestamp": "2024-11-21T23:20:14.000000Z"}, {"uuid": "e60dadb3-a84b-4ea9-af4d-dc871e8c134d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5814", "type": "seen", "source": "https://t.me/cvedetector/4271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5814 - Apache HTTP Server TLS Downgrade\", \n  \"Content\": \"CVE ID : CVE-2024-5814 \nPublished : Aug. 27, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello.   \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T22:24:48.000000Z"}, {"uuid": "c8dc4831-6979-47b3-8b9f-6ecf662a6b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1420", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8Exploit for Progress MOVEit Transfer CVE-2024-5806\n\nhttps://x.com/DarkWebInformer/status/1805979565132599462\n\nhttps://github.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806", "creation_timestamp": "2024-06-26T17:34:12.000000Z"}, {"uuid": "8d83a0c1-a14e-4474-b3d5-2274d5aa5ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5880", "type": "seen", "source": "https://t.me/cvedetector/3738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5880 - WordPress Hide My Site Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-5880 \nPublished : Aug. 21, 2024, 6:15 a.m. | 44\u00a0minutes ago \nDescription : The Hide My Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 due to the plugin not restricting access to the REST API when password protection is enabled. This makes it possible for unauthenticated attackers to gain unauthorized access to the site. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T09:01:54.000000Z"}, {"uuid": "f8009264-2295-4503-ac3c-e67ffe1e742a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5828", "type": "seen", "source": "https://t.me/cvedetector/2520", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5828 - Hitachi Tuning Manager Expression Language Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5828 \nPublished : Aug. 6, 2024, 3:15 a.m. | 22\u00a0minutes ago \nDescription : Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T05:48:22.000000Z"}, {"uuid": "4b7a5dfd-deaa-4e51-867f-44431cf9a4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5849", "type": "seen", "source": "https://t.me/cvedetector/3015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5849 - Apache Cassandra Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-5849 \nPublished : Aug. 13, 2024, 1:15 p.m. | 40\u00a0minutes ago \nDescription : An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T16:16:57.000000Z"}, {"uuid": "e792e349-2fe4-40ae-af5c-c26f7c17e966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5818", "type": "seen", "source": "https://t.me/cvedetector/1558", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5818 - WordPress Royal Elementor Magazine Grid/Slider Stored DOM-based Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-5818 \nPublished : July 24, 2024, 1:15 p.m. | 25\u00a0minutes ago \nDescription : The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via the plugin's Magazine Grid/Slider widget in all versions up to, and including, 1.3.980 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T15:48:39.000000Z"}, {"uuid": "db2ca84f-f323-460a-8471-4e849b4f476a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5861", "type": "seen", "source": "https://t.me/cvedetector/1538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5861 - \"WordPress WP EasyPay \u2013 Square Unauthorized Data Modification\"\", \n  \"Content\": \"CVE ID : CVE-2024-5861 \nPublished : July 24, 2024, 4:15 a.m. | 44\u00a0minutes ago \nDescription : The WP EasyPay \u2013 Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the wpep_square_disconnect() function in all versions up to, and including, 4.2.3. This makes it possible for unauthenticated attackers to disconnect square. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T07:27:09.000000Z"}, {"uuid": "39bee862-1e7b-4e65-9e99-dae82e89a18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5807", "type": "seen", "source": "https://t.me/cvedetector/1986", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5807 - WordPress Business Card Plugin Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5807 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:45.000000Z"}, {"uuid": "5bfb00ea-e385-4ec2-92eb-683a8effa381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5809", "type": "seen", "source": "https://t.me/cvedetector/1984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5809 - \"WordPress Ajax Contact Form Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-5809 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin users \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:43.000000Z"}, {"uuid": "59a40445-0f0d-4515-915e-33e90da2fdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5808", "type": "seen", "source": "https://t.me/cvedetector/1979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5808 - \"WordPress WP Ajax Contact Form CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-5808 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the email list, which could allow attackers to make a logged in admin perform such action via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:35.000000Z"}, {"uuid": "bb78f159-181b-46d5-9a09-9decd5e9db5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5883", "type": "seen", "source": "https://t.me/cvedetector/1813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5883 - \"WordPress Classified Listings XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-5883 \nPublished : July 29, 2024, 6:15 a.m. | 27\u00a0minutes ago \nDescription : The Ultimate Classified Listings WordPress plugin before 1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-29T08:45:57.000000Z"}, {"uuid": "238c9182-71e3-4b2b-b998-1c5fd8be2d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5882", "type": "seen", "source": "https://t.me/cvedetector/1810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5882 - Vulnerability Title: WordPress Ultimate Classified Listings Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5882 \nPublished : July 29, 2024, 6:15 a.m. | 27\u00a0minutes ago \nDescription : The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access PHP files on the server from the listings page \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-29T08:45:54.000000Z"}, {"uuid": "2a803cac-6b8f-4d6d-bd92-3f9bc49898c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5811", "type": "seen", "source": "https://t.me/cvedetector/707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5811 - The Simple Video Directory WordPress plugin before\", \n  \"Content\": \"CVE ID : CVE-2024-5811 \nPublished : July 12, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T09:23:13.000000Z"}, {"uuid": "d58b40cd-dd9e-4449-bf08-85234ef77e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5802", "type": "seen", "source": "https://t.me/cvedetector/254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5802 - The URL Shortener by Myhop WordPress plugin throug\", \n  \"Content\": \"CVE ID : CVE-2024-5802 \nPublished : July 9, 2024, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T08:53:51.000000Z"}, {"uuid": "41881814-de37-4458-a6c8-20aa76c10ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5810", "type": "seen", "source": "https://t.me/cvedetector/287", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5810 - The WP2Speed Faster \u2013 Optimize PageSpeed Insights\", \n  \"Content\": \"CVE ID : CVE-2024-5810 \nPublished : July 9, 2024, 9:15 a.m. | 31\u00a0minutes ago \nDescription : The WP2Speed Faster \u2013 Optimize PageSpeed Insights Score 90-100 plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.1. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to overwrite CSS, update the trial settings, purge the cache, and find attachments. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T11:50:00.000000Z"}, {"uuid": "00c83fb7-a780-41cd-a602-3fe08ad98195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5856", "type": "seen", "source": "https://t.me/cvedetector/283", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5856 - The Comment Images Reloaded plugin for WordPress i\", \n  \"Content\": \"CVE ID : CVE-2024-5856 \nPublished : July 9, 2024, 9:15 a.m. | 31\u00a0minutes ago \nDescription : The Comment Images Reloaded plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the cir_delete_image AJAX action in all versions up to, and including, 2.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary media attachments. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T11:49:53.000000Z"}, {"uuid": "32196ee9-f450-4860-84f3-488285dfa81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5881", "type": "seen", "source": "https://t.me/cvedetector/274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5881 - The Webico Slider Flatsome Addons plugin for WordP\", \n  \"Content\": \"CVE ID : CVE-2024-5881 \nPublished : July 9, 2024, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Webico Slider Flatsome Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wbc_image shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T10:59:38.000000Z"}, {"uuid": "51c7f78e-d998-4bec-8070-b36a260fedf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5804", "type": "seen", "source": "https://t.me/cvedetector/1237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5804 - WordPress Contact Form 7 Conditional Fields CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-5804 \nPublished : July 20, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : The Conditional Fields for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.13. This is due to missing or incorrect nonce validation on the wpcf7cf_admin_init function. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T04:44:58.000000Z"}, {"uuid": "673deeb0-935f-4b3b-a8b3-e35e75e2a849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5815", "type": "seen", "source": "https://t.me/cvedetector/1022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5815 - GitHub Enterprise Server CSRF Vulnerability Allow Write Operations\", \n  \"Content\": \"CVE ID : CVE-2024-5815 \nPublished : July 16, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : A Cross-Site Request Forgery vulnerability in GitHub Enterprise Server allowed write operations on a victim-owned repository by exploiting incorrect request types. A mitigating factor is that the attacker would have to be a trusted GitHub Enterprise Server user, and the victim would have to visit a tag in the attacker's fork of their own repository. vulnerability affected all versions of GitHub Enterprise Server prior 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17.  \n  \n  \n This vulnerability was reported via the GitHub Bug Bounty program. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T00:39:27.000000Z"}, {"uuid": "371f078a-ac1f-4f4b-a003-4b6e56dd8884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5817", "type": "seen", "source": "https://t.me/cvedetector/1020", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5817 - GitHub Enterprise Server Incorrect Project Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5817 \nPublished : July 16, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed read access to issue content via GitHub Projects. This was only exploitable in internal repositories and required the attacker to have access to the corresponding project board. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T00:39:25.000000Z"}, {"uuid": "ccf9a89a-6603-4502-a448-933b02bc299d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5816", "type": "seen", "source": "https://t.me/cvedetector/1018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5816 - GitHub Enterprise Server Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5816 \nPublished : July 16, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a suspended GitHub App to retain access to the repository via a scoped user access token. This was only exploitable in public repositories while private repositories were not impacted. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.9.17, 3.10.14, 3.11.12, 3.12.6, 3.13.1. This vulnerability was reported via the GitHub Bug Bounty program. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T00:39:20.000000Z"}, {"uuid": "48290b58-d559-4fa2-b795-92e9d9f51918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5852", "type": "seen", "source": "https://t.me/cvedetector/919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5852 - WordPress File Upload Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5852 \nPublished : July 16, 2024, 9:15 a.m. | 41\u00a0minutes ago \nDescription : The WordPress File Upload plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.24.7 via the 'uploadpath' parameter of the wordpress_file_upload shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload limited files to arbitrary locations on the web server. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T12:05:20.000000Z"}, {"uuid": "f11c6ab0-64c0-4b1f-b6e9-9f32dfb379e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5855", "type": "seen", "source": "https://t.me/cvedetector/222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5855 - The Media Hygiene: Remove or Delete Unused Images\", \n  \"Content\": \"CVE ID : CVE-2024-5855 \nPublished : July 9, 2024, 2:15 a.m. | 25\u00a0minutes ago \nDescription : The Media Hygiene: Remove or Delete Unused Images and More! plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the bulk_action_delete and delete_single_image_call AJAX actions in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary attachments. A nonce check was added in version 3.0.1, however, it wasn't until version 3.0.2 that a capability check was added. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T04:42:35.000000Z"}, {"uuid": "32f32520-5782-404b-8062-9130a6cf412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1097", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T04:47:11.000000Z"}, {"uuid": "9959064a-4407-46c3-af17-859026bf97f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/418", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-21T20:25:51.000000Z"}, {"uuid": "092f31de-a5b6-457a-8677-9afd4eb7cd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "Telegram/FXawtTBermqd5TQqAIahI87sLvuzqeKtvZa9UkgxVmA63A", "content": "", "creation_timestamp": "2024-06-26T20:10:04.000000Z"}, {"uuid": "a392478c-3eaf-4b90-8f93-e69a953fcda2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "Telegram/ZKiV0PkOKg-ChIDn8lFaC_KbA55kpW-hEmEwnxB8vEkHgc8", "content": "", "creation_timestamp": "2024-06-26T18:17:28.000000Z"}, {"uuid": "9475cf2e-d22e-4d40-af62-0cec984c7e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5818", "type": "seen", "source": "https://t.me/Blackhat_Officials/1185", "content": "CVE-2024-5818 \n\nThe Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOMbased CrossSite Scripting via the plugin's Magazine GridSlider widget in all versions up to, and including, 1.3.980 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributorlevel access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"National Vulnerability Database\"\n\n-D\n\nhttps://t.me/Blackhat_Officials", "creation_timestamp": "2024-07-24T16:05:52.000000Z"}, {"uuid": "6e0612e8-e485-46d9-83cb-c8e7fa999e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://t.me/HackingInsights/3754", "content": "\u200aCVE-2024-5806: MOVEit Transfer Vulnerability Under Active Exploit, PoC Published\n\nhttps://securityonline.info/cve-2024-5806-moveit-transfer-vulnerability-under-active-exploit-poc-published/", "creation_timestamp": "2024-06-27T04:28:28.000000Z"}, {"uuid": "9e2d6b30-f085-44c3-ac73-6bf26d5e81f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5805", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/3752", "content": "\u200aCVE-2024-5805: Critical SFTP Authentication Bypass Vulnerability in MOVEit Gateway\n\nhttps://securityonline.info/cve-2024-5805-critical-sftp-authentication-bypass-vulnerability-in-moveit-gateway/", "creation_timestamp": "2024-06-27T04:28:28.000000Z"}, {"uuid": "e40dedb7-f247-4374-bafa-1f80cdcbf5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/IntrusionExploit/142", "content": "Auth. Bypass In (Un)Limited Scenarios - Progress MOVEit Transfer (CVE-2024-5806)\n\nCVSS: 9.1 (CRITICAL) Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.\n\nExploit: https://github.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806\n\nThis issue affects MOVEit Transfer:\nfrom 2023.0.0 before 2023.0.11,\nfrom 2023.1.0 before 2023.1.6,\nfrom 2024.0.0 before 2024.0.2.\n\nQuery:\nHunter: /product.name=\"MOVEit Transfer\"\nFOFA: app=\"Progress-MOVEit\"\nSHODAN: product:\"MOVEit Transfer\"", "creation_timestamp": "2024-06-26T08:10:26.000000Z"}, {"uuid": "1781adb9-4e72-42b2-a3a8-1f64c893e7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/13384", "content": "The Hacker News\nNew MOVEit Transfer Vulnerability Under Active Exploitation - Patch ASAP!\n\nA newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after details of the bug were publicly disclosed.\nThe vulnerability, tracked as CVE-2024-5806 (CVSS score: 9.1), concerns an authentication bypass that impacts the following versions -\n\nFrom 2023.0.0 before 2023.0.11\nFrom 2023.1.0 before 2023.1.6, and&", "creation_timestamp": "2024-06-26T20:10:05.000000Z"}, {"uuid": "281c03ef-7344-4ce4-b668-3a6e38078a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "Telegram/ZTpnWEPbUH_AQXIkURmNaKrwFn3PQUMSDp9HVnPC-XpahQ", "content": "", "creation_timestamp": "2025-04-28T10:47:03.000000Z"}, {"uuid": "a4d739e4-5772-4ebd-ba35-04c60b58bd14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "Telegram/Yxhs8h6mKAoWafP_On7lFqRLf-ixdyRPTppdTWRlXLo7BQ", "content": "", "creation_timestamp": "2024-06-26T18:06:18.000000Z"}, {"uuid": "3cf33ef4-d7dc-4324-96cf-491fb6591ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1011", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-02T05:45:02.000000Z"}, {"uuid": "43d34e4a-b7d1-4892-9f75-803ab21c188d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5807", "type": "seen", "source": "Telegram/rnSeUs2qdya-yEinROFxA8N7F3mjvuSNXUGSd_-xczm3plg", "content": "", "creation_timestamp": "2025-01-31T14:10:05.000000Z"}, {"uuid": "1c6a10f9-bfb2-430d-9a20-8eadb9e0afe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1134", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:23:04.000000Z"}, {"uuid": "f14cfa79-c364-4ebd-ac41-ffad28c46522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1126", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-31T04:21:04.000000Z"}, {"uuid": "f00ed29c-467e-4151-8034-8fde85537610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1109", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-27T04:37:04.000000Z"}, {"uuid": "74d4a1c1-ccfa-4de4-8814-1187ee865271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1063", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-13T05:35:50.000000Z"}, {"uuid": "dc4942e2-6932-462f-a04f-58e537002f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/311", "content": "Tools - Hackers Factory \n\nYour best friend in credential reuse attacks\n\nhttps://github.com/D4Vinci/Cr3dOv3r\n\nA classic Anti-Sandbox technique \n\nhttps://github.com/knight0x07/onMouseMove-HtmlFile-PoC\n\nA metasploit module for CVE-2024-5806 in the pull queue\n\nhttps://github.com/rapid7/metasploit-framework/pull/19295\n\nAn automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.\n\nhttps://github.com/h4r5h1t/webcopilot\n\nDeobfuscator Code\n\nhttps://github.com/ergrelet/themida-unmutate\n\nExperimental Windows x64 Kernel Rootkit\n\nhttps://github.com/eversinc33/Banshee\n\nNice write up on exploiting CVE-2022-4262, Google Chrome V8 type confusion\n\nhttps://github.com/bjrjk/CVE-2022-4262\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nQuickly find differences and similarities in disassembled code\n\nhttps://github.com/google/bindiff\n\nA collaborative, multi-platform, red teaming framework\n\nhttps://github.com/its-a-feature/Mythic\n\nxyrella is a simple XLL builder without any remote injection functionality\n\nhttps://github.com/zimnyaa/xyrella\n\nStandalone client for proxies of Opera VPN\n\nhttps://github.com/Snawoot/opera-proxy\n\n#HackersFactory\nhttps://t.me/dilagrafie", "creation_timestamp": "2024-07-02T07:40:02.000000Z"}, {"uuid": "fdfea61e-3df8-4c18-850f-f4f17721a493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://t.me/CyberDilara/266", "content": "Top 5 Trending CVEs:\n\n    1 - CVE-2024-5806\n    2 - CVE-2024-34102\n    3 - CVE-2024-23958\n    4 - CVE-2024-37032\n    5 - CVE-2024-21338\n\n#cve #cvetrends #cveshield #cybersecurity", "creation_timestamp": "2024-06-27T02:35:30.000000Z"}, {"uuid": "8a005fb1-dd1a-4198-a30d-8db65d3ebada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "Telegram/ipjpDYeJYpkr0-KCaH9ZTh3O_pYjZtSTn69rRFBOcQY8YEY", "content": "", "creation_timestamp": "2024-08-06T23:48:46.000000Z"}, {"uuid": "ec3da17f-7ff6-4c69-a6b8-ba0497dbb65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/2655", "content": "The Hacker News\nNew MOVEit Transfer Vulnerability Under Active Exploitation - Patch ASAP!\n\nA newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after details of the bug were publicly disclosed.\nThe vulnerability, tracked as CVE-2024-5806 (CVSS score: 9.1), concerns an authentication bypass that impacts the following versions -\n\nFrom 2023.0.0 before 2023.0.11\nFrom 2023.1.0 before 2023.1.6, and&", "creation_timestamp": "2024-06-26T20:10:05.000000Z"}, {"uuid": "b963457f-c5ee-48e1-bd08-a79424563375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://t.me/KomunitiSiber/2168", "content": "New MOVEit Transfer Vulnerability Under Active Exploitation - Patch ASAP!\nhttps://thehackernews.com/2024/06/new-moveit-transfer-vulnerability-under.html\n\nA newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after details of the bug were publicly disclosed.\nThe vulnerability, tracked as CVE-2024-5806 (CVSS score: 9.1), concerns an authentication bypass that impacts the following versions -\n\nFrom 2023.0.0 before 2023.0.11\nFrom 2023.1.0 before 2023.1.6, and&", "creation_timestamp": "2024-06-26T17:23:55.000000Z"}, {"uuid": "fd610ec9-7c0d-418b-9fda-59f04f97cddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "Telegram/LZ7XOPRoqwALVNc8I3LUwpNf-8CJ2PR-4TjRcjv0Z8qsO3g", "content": "", "creation_timestamp": "2025-03-09T04:00:07.000000Z"}, {"uuid": "11d50918-c98d-485e-bde9-ff252478c6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8943", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:04.000000Z"}, {"uuid": "652b3b8f-299f-4b32-bc86-39dc6c0897d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8916", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-27T05:11:12.000000Z"}, {"uuid": "2c285d87-c707-40d9-bc36-835e6d9ebe26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8935", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-31T08:37:42.000000Z"}, {"uuid": "048948f6-0460-400d-9f00-e7e245836e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8879", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-13T05:35:55.000000Z"}, {"uuid": "708dbd80-7a0e-43b9-90cc-f43d7cf62478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8117", "content": "Tools - Hackers Factory \n\nYour best friend in credential reuse attacks\n\nhttps://github.com/D4Vinci/Cr3dOv3r\n\nA classic Anti-Sandbox technique \n\nhttps://github.com/knight0x07/onMouseMove-HtmlFile-PoC\n\nA metasploit module for CVE-2024-5806 in the pull queue\n\nhttps://github.com/rapid7/metasploit-framework/pull/19295\n\nAn automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.\n\nhttps://github.com/h4r5h1t/webcopilot\n\nDeobfuscator Code\n\nhttps://github.com/ergrelet/themida-unmutate\n\nExperimental Windows x64 Kernel Rootkit\n\nhttps://github.com/eversinc33/Banshee\n\nNice write up on exploiting CVE-2022-4262, Google Chrome V8 type confusion\n\nhttps://github.com/bjrjk/CVE-2022-4262\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nQuickly find differences and similarities in disassembled code\n\nhttps://github.com/google/bindiff\n\nA collaborative, multi-platform, red teaming framework\n\nhttps://github.com/its-a-feature/Mythic\n\nxyrella is a simple XLL builder without any remote injection functionality\n\nhttps://github.com/zimnyaa/xyrella\n\nStandalone client for proxies of Opera VPN\n\nhttps://github.com/Snawoot/opera-proxy\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-02T08:13:33.000000Z"}, {"uuid": "541cf5af-2a7a-4752-8606-a7868d22b0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24248", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:11.000000Z"}, {"uuid": "8bbda203-77b5-471b-9e3b-12f856dc0de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24234", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-31T08:38:00.000000Z"}, {"uuid": "48b352a4-c834-4aa2-8e30-4d0a32379e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24202", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-27T05:11:16.000000Z"}, {"uuid": "8cb7d660-b904-4326-b3f7-4ce10421de26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24069", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-13T05:36:01.000000Z"}, {"uuid": "fe7027eb-03a7-4883-b386-919c21b1c482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/23970", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-02T05:45:08.000000Z"}, {"uuid": "155ee6c7-cc8b-4088-8520-3e17b2119dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3368", "content": "Tools - Hackers Factory \n\nYour best friend in credential reuse attacks\n\nhttps://github.com/D4Vinci/Cr3dOv3r\n\nA classic Anti-Sandbox technique \n\nhttps://github.com/knight0x07/onMouseMove-HtmlFile-PoC\n\nA metasploit module for CVE-2024-5806 in the pull queue\n\nhttps://github.com/rapid7/metasploit-framework/pull/19295\n\nAn automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.\n\nhttps://github.com/h4r5h1t/webcopilot\n\nDeobfuscator Code\n\nhttps://github.com/ergrelet/themida-unmutate\n\nExperimental Windows x64 Kernel Rootkit\n\nhttps://github.com/eversinc33/Banshee\n\nNice write up on exploiting CVE-2022-4262, Google Chrome V8 type confusion\n\nhttps://github.com/bjrjk/CVE-2022-4262\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nQuickly find differences and similarities in disassembled code\n\nhttps://github.com/google/bindiff\n\nA collaborative, multi-platform, red teaming framework\n\nhttps://github.com/its-a-feature/Mythic\n\nxyrella is a simple XLL builder without any remote injection functionality\n\nhttps://github.com/zimnyaa/xyrella\n\nStandalone client for proxies of Opera VPN\n\nhttps://github.com/Snawoot/opera-proxy\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-02T07:39:25.000000Z"}, {"uuid": "b58dd067-8664-4ff0-a2ce-1608f7fded34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3816", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-27T04:37:05.000000Z"}, {"uuid": "04823cde-9cdc-41fd-b037-a7e33d2cf08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3840", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T05:23:04.000000Z"}, {"uuid": "1012b079-bafa-4b24-b62e-5073279c9f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3833", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-31T04:21:05.000000Z"}, {"uuid": "e64d6706-c9cc-425a-80c9-b7b99ee5fbda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3792", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling  \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/  \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark  \n\nScriptSentry finds misconfigured and dangerous logon scripts.  \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-13T05:35:42.000000Z"}, {"uuid": "7c761238-1af9-436e-9e82-838958583a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3773", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.  \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n \nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-02T05:45:22.000000Z"}, {"uuid": "58a7ecea-8466-4ef7-8a99-4ff0ad9eee19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6843", "content": "Tools - Hackers Factory \n\nYour best friend in credential reuse attacks\n\nhttps://github.com/D4Vinci/Cr3dOv3r\n\nA classic Anti-Sandbox technique \n\nhttps://github.com/knight0x07/onMouseMove-HtmlFile-PoC\n\nA metasploit module for CVE-2024-5806 in the pull queue\n\nhttps://github.com/rapid7/metasploit-framework/pull/19295\n\nAn automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.\n\nhttps://github.com/h4r5h1t/webcopilot\n\nDeobfuscator Code\n\nhttps://github.com/ergrelet/themida-unmutate\n\nExperimental Windows x64 Kernel Rootkit\n\nhttps://github.com/eversinc33/Banshee\n\nNice write up on exploiting CVE-2022-4262, Google Chrome V8 type confusion\n\nhttps://github.com/bjrjk/CVE-2022-4262\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nQuickly find differences and similarities in disassembled code\n\nhttps://github.com/google/bindiff\n\nA collaborative, multi-platform, red teaming framework\n\nhttps://github.com/its-a-feature/Mythic\n\nxyrella is a simple XLL builder without any remote injection functionality\n\nhttps://github.com/zimnyaa/xyrella\n\nStandalone client for proxies of Opera VPN\n\nhttps://github.com/Snawoot/opera-proxy\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-02T08:13:33.000000Z"}, {"uuid": "35ca6d76-8008-4520-8cb7-d58d044ad545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7514", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-13T05:35:55.000000Z"}, {"uuid": "e1e4a96f-d9a6-491f-b987-02e6082788b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7569", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:04.000000Z"}, {"uuid": "39f59665-3892-4df1-88de-9dde78ad6908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7561", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-31T08:37:42.000000Z"}, {"uuid": "92e08f07-89c6-4779-ad32-8f9672b23f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7542", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-27T05:11:12.000000Z"}, {"uuid": "a552893b-231a-45c8-bd1d-15aa1ba6782c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7487", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-02T05:45:15.000000Z"}, {"uuid": "d92a26c0-219d-46c8-8a57-1db36534c784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://t.me/GrayHatsHack/6811", "content": "Top 5 Trending CVEs:\n\n    1 - CVE-2024-5806\n    2 - CVE-2024-34102\n    3 - CVE-2024-23958\n    4 - CVE-2024-37032\n    5 - CVE-2024-21338\n\n#cve #cvetrends #cveshield #cybersecurity", "creation_timestamp": "2024-06-27T05:11:41.000000Z"}, {"uuid": "5e080f6c-deab-4040-ba40-0add1c2e1f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://t.me/true_secator/6472", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b GReAT \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0434\u044b\u0442\u043e\u0436\u0438\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u043e \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0430\u043c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0430 \u0443\u0433\u0440\u043e\u0437, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e APT \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\u0412 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0431\u043e\u043b\u0435\u0435 900 \u0433\u0440\u0443\u043f\u043f. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u0432\u0435\u0440\u0434\u0438\u043a\u0442\u044b \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0442\u0440\u0435\u043d\u0434\u0430\u043c - \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u041b\u041a: \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u044b \u0432 \u0446\u0435\u043b\u043e\u043c \u0441\u0431\u044b\u043b\u0438\u0441\u044c.\n\n\u0415\u0441\u043b\u0438 \u0432\u043a\u0440\u0430\u0442\u0446\u0435, \u0442\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430\u043c \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u0435\u0434\u0443\u0433\u0430\u0434\u0430\u0442\u044c, \u0447\u0442\u043e:\n\n1. \u0423\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0447\u0438\u0441\u043b\u043e \u0438\u0437\u043e\u0431\u0440\u0435\u0442\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435, \u043d\u043e\u0441\u0438\u043c\u044b\u0435 \u0438 \u0443\u043c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0412\u0441\u043b\u0435\u0434 \u0437\u0430 \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u0422\u0440\u0438\u0430\u043d\u0433\u0443\u043b\u044f\u0446\u0438\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0438\u0441\u044c \u0438 \u0432 2024\u00a0\u0433\u043e\u0434\u0443.\n\n\u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0432 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445 \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0CVE-2024-23222\u00a0\u0432 \u0434\u0432\u0438\u0436\u043a\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Safari, \u0430 \u043e\u0441\u0435\u043d\u044c\u044e \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u00a0\u0434\u0432\u0443\u0445 \u043d\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435: CVE-2024-23225 \u0432 \u044f\u0434\u0440\u0435 XNU \u0438 CVE-2024-23296 \u0432 RTKit.\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Android \u0442\u0430\u043a\u0436\u0435 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u043a\u0443\u0441\u0435 APT-\u0433\u0440\u0443\u043f\u043f.\u00a0\u0412 \u043d\u043e\u044f\u0431\u0440\u0435 Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445:\u00a0CVE-2024-43093 \u0438 CVE-2024-43047.\u00a0\n\n2. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0440\u0435\u0439\u0434\u044b \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u04212 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 APT-\u0433\u0440\u0443\u043f\u043f\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u0412 2024\u00a0\u0433\u043e\u0434\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0442\u0430\u0435\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u044b \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a. \u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0438\u0445 -\u00a0Quad7 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u0434\u0440\u0443\u0433\u043e\u0439 -\u00a0KV-Botnet, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445, \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0438 IP-\u043a\u0430\u043c\u0435\u0440\u0430\u0445.\n\n3. \u0421\u0442\u0430\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 (\u0440\u0443\u0442\u043a\u0438\u0442\u044b \u0440\u0435\u0436\u0438\u043c\u0430 \u044f\u0434\u0440\u0430 \u0441\u043d\u043e\u0432\u0430 \u0432 \u0434\u0435\u043b\u0435). \u0412 2024\u00a0\u0433\u043e\u0434\u0443 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 BYOVD, \u043e\u0441\u0442\u0430\u0432\u0430\u044f\u0441\u044c \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0434\u0440\u0443, \u0438 \u0441\u0442\u0430\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u0430\u0436\u0435 \u0447\u0430\u0449\u0435 (\u0440\u043e\u0441\u0442 \u043d\u0430 23%). \n\n4. \u0421 \u043a\u0430\u0436\u0434\u044b\u043c \u0433\u043e\u0434\u043e\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u043e\u043f\u044b\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0441\u0442\u0438, \u0438 2024\u00a0\u0433\u043e\u0434 \u043d\u0435 \u0441\u0442\u0430\u043b \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c. \u0412 \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430\u00a0\u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u00a0\u0440\u043e\u0441\u0442 \u043d\u0430 25% \u0447\u0438\u0441\u043b\u0430 APT-\u0430\u0442\u0430\u043a.\n\n5. \u041a\u0430\u043a \u043c\u044b \u0438 \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0441\u044f \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f \u043d\u0430 \u0444\u043e\u043d\u0435 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u043e\u0432. \u041e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c:\u00a0Twelve, Head Mare \u0438 Crypt Ghouls, BlackMeta.\n\n6. \u0421 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0418\u0418 \u043c\u043d\u043e\u0433\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u0430\u043a \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0441\u043f\u043e\u043d\u0441\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430\u043c\u0438, \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 -\u00a0\u043d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 KnowBe4.\n\n7. \u041d\u043e\u0432\u044b\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 MFT-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u043d\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 MFT: CVE-2024-0204 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 GoAnywhere MFT \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f CVE-2024-5806 \u0432 MOVEit Transfer.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u044b \u043f\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u043d\u0430 2025\u00a0\u0433\u043e\u0434 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442:\n\n- \u0410\u043b\u044c\u044f\u043d\u0441\u044b \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c\u0441\u044f\n- APT-\u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0443\u0434\u0443\u0442 \u0447\u0430\u0449\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IoT\n- \u0420\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\n- \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u0432 \u043d\u0430 \u044f\u0437\u044b\u043a\u0430\u0445 C++ \u0438 Go \u0434\u043b\u044f \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u0438 \u043a \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\n- \u0411\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0418\u0418 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435\n- APT-\u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0438\u043f\u0444\u0435\u0439\u043a\u0430\u043c\u0438\n- \u0411\u044d\u043a\u0434\u043e\u0440\u044b \u0432 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0418\u0418\n- \u0420\u043e\u0441\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0442\u0438\u043f\u0430 BYOVD \u0432 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445\n\n\u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-11-26T11:40:16.000000Z"}, {"uuid": "522049ba-b651-4b18-a6f0-d58063bb5c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/true_secator/6991", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u044f\u043b\u043e\u0441\u044c \u0437\u0430 Craft CMS, \u0443\u0441\u043f\u0435\u0432, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 0-day \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0410\u0442\u0430\u043a\u0438, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 Orange Cyberdefense SensePost 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n- CVE-2024-58136\u00a0(CVSS: 9,0): \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii PHP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c Craft CMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0438\u043b\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c (\u0440\u0435\u0433\u0440\u0435\u0441\u0441 CVE-2024-4990).\n\n- CVE-2025-32432\u00a0(CVSS: 10,0): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Craft CMS (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.9.15, 4.14.15 \u0438 5.6.17).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, CVE-2025-32432 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435.\n\nCVE-2025-32432 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 POST \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0437\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 POST \u0431\u0443\u0434\u0443\u0442 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.x Craft CMS \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 4.x \u0438 5.x \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440  \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0434\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0441 \u043a\u0430\u0436\u0434\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 Craft CMS, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430.\n\n\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 Craft CMS \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0441\u043f\u043e\u0441\u043e\u0431\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 \u0430\u043a\u0442\u0438\u0432\u0443 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043a\u0440\u0438\u043f\u0442 Python, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f PHP-\u0444\u0430\u0439\u043b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f GitHub.\n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 10 \u043f\u043e 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0442\u0442\u043e\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 filemanager.php \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 Python. \n\n\u0424\u0430\u0439\u043b filemanager.php \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d \u0432 autoload_classmap.php 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 18 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 13\u00a0000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Craft CMS, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043a\u043e\u043b\u043e 300 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Craft CMS, \u0435\u0441\u043b\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0430\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b POST \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Craft actions/assets/generate-transform, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043e \u0441\u0442\u0440\u043e\u043a\u043e\u0439 __class \u0432 \u0442\u0435\u043b\u0435, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u0430\u0439\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0446\u0435\u043b\u044f\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.", "creation_timestamp": "2025-04-28T15:10:37.000000Z"}, {"uuid": "ed64e061-dc84-4c97-b2f5-bf286080a5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://t.me/true_secator/5902", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u0430\u0447\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-5806 \u0432 MOVEit Transfer.\n\n\u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u043d\u0435\u0434\u0435\u043b\u0435 Progress Software \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2024-5805 \u0438 CVE-2024-5806, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 MOVEit Transfer.\n\n\u041e\u0431\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SFTP-\u043c\u043e\u0434\u0443\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 MOVEit Transfer.\n\nCVE-2024-5806 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c MOVEit Transfer \u0432\u0435\u0440\u0441\u0438\u0439 2023.0.11, 2023.1.6 \u0438 2024.0.2. CVE-2024-5805 \u0432\u043b\u0438\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 2024.0.0 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 2024.0.1.\u00a0\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e CVE-2024-5806 Progress \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u044d\u0442\u043e\u0439 CVE. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0430\u0442\u0447.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, WatchTowr \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0430\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f CVE-2024-5806\u00a0\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430, \u043a\u0430\u043a \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, WatchTowr \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0447\u0435\u0445\u043b\u044f\u043b\u0430 \u0438 \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 IPWorks SSH, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e MOVEit Transfer.\n\n\u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b Shadowserver Foundation \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u00a0\u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2024-5806.\n\n\u041e\u0434\u043d\u0430\u043a\u043e Rapid7 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u043b\u043e\u0433\u0435, \u0447\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u044e Shadowserver \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043b\u043e\u0432\u0443\u0448\u0435\u043a \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043a\u043e\u0440\u0440\u0435\u043b\u0438\u0440\u0443\u0435\u0442 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0433\u0440\u043e\u0437 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, Shadowserver \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043a\u043e\u043b\u043e 1700 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 MOVEit Transfer \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435.\n\n\u0410 \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys \u0438\u0445 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f 2700, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410, \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f.\n\n\u0418 \u044d\u0442\u043e \u0447\u0438\u0441\u043b\u043e, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0436\u0435\u0440\u0442\u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441 Cl0p. \u0421\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0435?", "creation_timestamp": "2024-06-26T16:35:06.000000Z"}, {"uuid": "8e994ccc-3b8e-4ee5-98af-129a0dbc21e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5805", "type": "exploited", "source": "https://t.me/true_secator/5902", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u0430\u0447\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-5806 \u0432 MOVEit Transfer.\n\n\u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u043d\u0435\u0434\u0435\u043b\u0435 Progress Software \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2024-5805 \u0438 CVE-2024-5806, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 MOVEit Transfer.\n\n\u041e\u0431\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SFTP-\u043c\u043e\u0434\u0443\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 MOVEit Transfer.\n\nCVE-2024-5806 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c MOVEit Transfer \u0432\u0435\u0440\u0441\u0438\u0439 2023.0.11, 2023.1.6 \u0438 2024.0.2. CVE-2024-5805 \u0432\u043b\u0438\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 2024.0.0 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 2024.0.1.\u00a0\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e CVE-2024-5806 Progress \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u044d\u0442\u043e\u0439 CVE. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0430\u0442\u0447.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, WatchTowr \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0430\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f CVE-2024-5806\u00a0\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430, \u043a\u0430\u043a \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, WatchTowr \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0447\u0435\u0445\u043b\u044f\u043b\u0430 \u0438 \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 IPWorks SSH, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e MOVEit Transfer.\n\n\u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b Shadowserver Foundation \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u00a0\u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2024-5806.\n\n\u041e\u0434\u043d\u0430\u043a\u043e Rapid7 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u043b\u043e\u0433\u0435, \u0447\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u044e Shadowserver \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043b\u043e\u0432\u0443\u0448\u0435\u043a \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043a\u043e\u0440\u0440\u0435\u043b\u0438\u0440\u0443\u0435\u0442 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0433\u0440\u043e\u0437 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, Shadowserver \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043a\u043e\u043b\u043e 1700 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 MOVEit Transfer \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435.\n\n\u0410 \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys \u0438\u0445 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f 2700, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410, \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f.\n\n\u0418 \u044d\u0442\u043e \u0447\u0438\u0441\u043b\u043e, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0436\u0435\u0440\u0442\u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441 Cl0p. \u0421\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0435?", "creation_timestamp": "2024-06-26T16:35:06.000000Z"}, {"uuid": "4cbceef3-010a-46ad-8eba-63ff45fe3605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/S_E_Reborn/5584", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u044f\u043b\u043e\u0441\u044c \u0437\u0430 Craft CMS, \u0443\u0441\u043f\u0435\u0432, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 0-day \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0410\u0442\u0430\u043a\u0438, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 Orange Cyberdefense SensePost 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n- CVE-2024-58136\u00a0(CVSS: 9,0): \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii PHP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c Craft CMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0438\u043b\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c (\u0440\u0435\u0433\u0440\u0435\u0441\u0441 CVE-2024-4990).\n\n- CVE-2025-32432\u00a0(CVSS: 10,0): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Craft CMS (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.9.15, 4.14.15 \u0438 5.6.17).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, CVE-2025-32432 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435.\n\nCVE-2025-32432 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 POST \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0437\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 POST \u0431\u0443\u0434\u0443\u0442 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.x Craft CMS \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 4.x \u0438 5.x \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440  \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0434\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0441 \u043a\u0430\u0436\u0434\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 Craft CMS, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430.\n\n\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 Craft CMS \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0441\u043f\u043e\u0441\u043e\u0431\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 \u0430\u043a\u0442\u0438\u0432\u0443 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043a\u0440\u0438\u043f\u0442 Python, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f PHP-\u0444\u0430\u0439\u043b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f GitHub.\n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 10 \u043f\u043e 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0442\u0442\u043e\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 filemanager.php \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 Python. \n\n\u0424\u0430\u0439\u043b filemanager.php \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d \u0432 autoload_classmap.php 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 18 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 13\u00a0000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Craft CMS, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043a\u043e\u043b\u043e 300 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Craft CMS, \u0435\u0441\u043b\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0430\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b POST \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Craft actions/assets/generate-transform, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043e \u0441\u0442\u0440\u043e\u043a\u043e\u0439 __class \u0432 \u0442\u0435\u043b\u0435, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u0430\u0439\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0446\u0435\u043b\u044f\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.", "creation_timestamp": "2025-04-28T18:02:47.000000Z"}, {"uuid": "70942820-d2ad-49c4-a575-a1ecab8679ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://t.me/information_security_channel/52442", "content": "Exploitation Attempts Target New MOVEit Transfer Vulnerability\nhttps://www.securityweek.com/exploitation-attempts-target-new-moveit-transfer-vulnerability/\n\nExploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started.\nThe post Exploitation Attempts Target New MOVEit Transfer Vulnerability (https://www.securityweek.com/exploitation-attempts-target-new-moveit-transfer-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-06-26T14:44:56.000000Z"}, {"uuid": "378a80bc-7e00-4a00-9aac-0a43f98d5f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://t.me/thehackernews/5176", "content": "\ud83d\udea8 Critical security flaw discovered in Progress Software's MOVEit Transfer. \n \nCVE-2024-5806 allows authentication bypass and is already being exploited. Update now to protect your systems. \n \nRead details: https://thehackernews.com/2024/06/new-moveit-transfer-vulnerability-under.html", "creation_timestamp": "2024-06-26T17:00:30.000000Z"}, {"uuid": "2aeb7b43-81ed-462b-8548-8817db85dab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/8861", "content": "Auth. Bypass In (Un)Limited Scenarios - Progress MOVEit Transfer (CVE-2024-5806)\n\nhttps://labs.watchtowr.com/auth-bypass-in-un-limited-scenarios-progress-moveit-transfer-cve-2024-5806/", "creation_timestamp": "2024-06-26T08:52:56.000000Z"}, {"uuid": "29ff0eaf-8214-4634-9122-70c282ef4528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2739", "content": "https://github.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806\n\nExploit for the CVE-2024-5806\n#github  #exploit", "creation_timestamp": "2024-06-29T18:06:18.000000Z"}, {"uuid": "90310bdb-f9fb-4aa7-9f0d-0dd9cacdfeb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10739", "content": "#Offensive_security\n1. Remote Kerberos Relay Framework\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n2. Compromising MSSQL DB by Relaying\nhttps://lsecqt.github.io/Red-Teaming-Army/active-directory/compromising-mssql-databases-by-relaying\n3. Auth. Bypass In (Un)Limited Scenarios - Progress MOVEit Transfer (CVE-2024-5806)\nhttps://labs.watchtowr.com/auth-bypass-in-un-limited-scenarios-progress-moveit-transfer-cve-2024-5806", "creation_timestamp": "2024-06-27T02:38:51.000000Z"}, {"uuid": "7291b8f3-1000-4b1c-b699-ff30686516d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11169", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T02:44:19.000000Z"}, {"uuid": "e7395bab-b148-483b-be72-f18afc067d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58253", "type": "seen", "source": "https://t.me/cvedetector/24379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58253 - Obfstr Crate Invalid UTF-8 Conversion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58253 \nPublished : May 2, 2025, 8:15 p.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T00:19:16.000000Z"}, {"uuid": "46aca284-7692-4f51-98bb-817e53b60783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58135", "type": "seen", "source": "https://t.me/cvedetector/24397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58135 - Mojolicious Weak HMAC Session Secret Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58135 \nPublished : May 3, 2025, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Mojolicious versions from 7.28 through 9.39 for Perl may generate weak HMAC session secrets.  \n  \nWhen creating a default app with the \"mojo generate app\" tool, a weak secret is written to the application's configuration file using the insecure rand() function, and used for authenticating and protecting the integrity of the application's sessions. This may allow an attacker to brute force the application's session keys. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T14:32:05.000000Z"}, {"uuid": "9987c6f3-0c46-4e47-9170-63738bbbb4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58134", "type": "seen", "source": "https://t.me/cvedetector/24405", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58134 - Mojolicious Default HMAC Session Secret Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58134 \nPublished : May 3, 2025, 4:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default.  \n  \nThese predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user\u2019s session. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T20:23:19.000000Z"}, {"uuid": "9314d1cc-afab-4420-b7e5-593381446d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/577", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-27T05:11:16.000000Z"}, {"uuid": "25a99229-3949-48d6-a0ce-f908caadc594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/419", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-02T05:45:09.000000Z"}, {"uuid": "04866ad9-bc62-43f7-a496-542098023d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/601", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:11.000000Z"}, {"uuid": "eb2932a3-9b36-4876-af30-5dd489c3162d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/496", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-13T05:36:02.000000Z"}, {"uuid": "0e78e187-569f-4714-b2f5-e1fe9c70308c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/593", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-10-31T08:38:00.000000Z"}, {"uuid": "516b5c51-77c5-4f6c-9aaa-36b9ff96dfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5830", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4491", "content": "#exploit\n1. CVE-2023-47253:\nQualitor <=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T12:58:13.000000Z"}, {"uuid": "f8a7b420-6a7f-4614-956f-642c534fdec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "published-proof-of-concept", "source": "https://t.me/club31337/2249", "content": "https://labs.watchtowr.com/auth-bypass-in-un-limited-scenarios-progress-moveit-transfer-cve-2024-5806\n\nPoC: https://github.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806 \n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T02:28:59.000000Z"}, {"uuid": "3e49a9fc-a3ec-443b-aee0-650838c6881e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "seen", "source": "https://t.me/club31337/2253", "content": "https://www.helpnetsecurity.com/2024/06/25/cve-2024-5805-cve-2024-5806/\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T02:28:59.000000Z"}, {"uuid": "0d2629ff-4bb1-4f38-aaca-d1af94cdf867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5805", "type": "seen", "source": "https://t.me/club31337/2253", "content": "https://www.helpnetsecurity.com/2024/06/25/cve-2024-5805-cve-2024-5806/\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T02:28:59.000000Z"}, {"uuid": "8ba50f6a-2ce2-4d49-825d-18da6ff5bd42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58240", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "22e20411-a39f-4e85-bc3a-5d63dccc000a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnqv2o5l6e2o", "content": "", "creation_timestamp": "2026-06-08T04:50:52.659532Z"}, {"uuid": "6f18a090-4c22-4a91-aa7a-7602cf75c771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnqvcnmdvl2r", "content": "", "creation_timestamp": "2026-06-08T04:55:20.548185Z"}, {"uuid": "bc8e394b-e639-4c4f-a24b-9977bd4d239a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnqwfrkn7r2y", "content": "", "creation_timestamp": "2026-06-08T05:14:58.834895Z"}, {"uuid": "800eeaac-c616-40ae-b67c-ee5ddc5a7956", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58274", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/89db0583-27f0-488f-8c79-cc9aa83d3081", "content": "", "creation_timestamp": "2026-06-19T12:42:13.067530Z"}, {"uuid": "d2b01e88-c83d-4fb3-9912-ef9fe588429c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moqakzjajf2b", "content": "", "creation_timestamp": "2026-06-20T16:09:24.297164Z"}, {"uuid": "252164e1-00c7-4b81-ab2a-c79a4b6844cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58351", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3morewulhnb2f", "content": "", "creation_timestamp": "2026-06-21T03:00:16.491049Z"}, {"uuid": "c569fff2-f266-4ecf-b2ea-85041cbbe910", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d932f82d-3a8e-4fbf-b3ee-0dabde0882d9", "content": "", "creation_timestamp": "2026-06-23T11:12:14.121034Z"}, {"uuid": "a63be558-fb4b-47c8-ab10-8bd006d22883", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d06db4f7-2315-4a19-873e-71f3299ec7dc", "content": "", "creation_timestamp": "2026-06-23T11:13:02.731091Z"}, {"uuid": "52357fbe-c34a-4abd-a57e-fcfdb4d1dbb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:11.204120Z"}, {"uuid": "544eef58-f215-4c6e-878e-11b9f1471c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5823", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpgun7btdc2m", "content": "", "creation_timestamp": "2026-06-29T16:07:06.405546Z"}, {"uuid": "c941770f-bb8d-4db0-9b55-2fd1e82de248", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5827", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c09f07b0-434a-4cb3-a887-1856fc5ad6d9", "content": "", "creation_timestamp": "2026-07-01T05:54:11.788536Z"}, {"uuid": "f0ee052e-f898-4894-910b-0d9bcb833e27", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5806", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f4580ec1-2fb8-4317-8a47-158dc52c6d70", "content": "", "creation_timestamp": "2026-07-01T07:18:21.188625Z"}, {"uuid": "6e12f837-3f65-48d2-97f8-22b41431dc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58352", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpoqqdpjdh2i", "content": "", "creation_timestamp": "2026-07-02T19:18:35.256436Z"}, {"uuid": "e1d8f2ca-081c-45f3-9252-318c19c4b8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mporpg2ujb2w", "content": "", "creation_timestamp": "2026-07-02T19:35:57.393498Z"}, {"uuid": "eb8d790e-2a50-44ef-9c1d-06c1761de7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq4lc7xyc27", "content": "", "creation_timestamp": "2026-07-03T08:23:10.256835Z"}, {"uuid": "30c72465-3633-4a17-b984-ddfcbc3edfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaknbagc2q", "content": "", "creation_timestamp": "2026-07-03T09:34:22.903237Z"}, {"uuid": "155e8b35-99d5-44d6-9c20-6c00990628bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcsqfn7m2q", "content": "", "creation_timestamp": "2026-07-03T10:14:42.116268Z"}, {"uuid": "14345b6d-36af-4303-8a78-fad006419138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58097", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T00:45:53.953637Z"}, {"uuid": "c65dac09-9ff1-475f-9bf9-e98ecc8be113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58096", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T00:45:51.608207Z"}, {"uuid": "ecd03d6d-a886-4892-bbc9-f3d2af7ce98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/brutsecurity/1837", "content": "", "creation_timestamp": "2026-07-11T13:00:05.373167Z"}, {"uuid": "98952f76-d331-4f6b-b092-b74f4c196920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/brutsecurity/1837", "content": "", "creation_timestamp": "2026-07-12T00:00:48.862514Z"}, {"uuid": "a28e9880-1528-47c9-9f00-2d529d5c254d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5846", "type": "seen", "source": "https://t.me/true_secator/8341", "content": "", "creation_timestamp": "2026-07-13T14:00:06.798824Z"}, {"uuid": "8f06a502-481e-467b-9a67-681ada8af80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5846", "type": "seen", "source": "https://t.me/true_secator/8341", "content": "", "creation_timestamp": "2026-07-14T00:00:44.695519Z"}, {"uuid": "fbd90d3c-bb8a-482d-b531-f07202e135fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58366", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqwicf6c5p2a", "content": "", "creation_timestamp": "2026-07-18T14:34:06.209355Z"}, {"uuid": "a284f526-3686-4161-ad39-7521bb3546b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwmug243p2i", "content": "", "creation_timestamp": "2026-07-18T15:55:46.047119Z"}, {"uuid": "4df3c4fe-6877-4dc4-b40a-b1694ea340a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58362", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr2gztcdge2a", "content": "", "creation_timestamp": "2026-07-20T04:22:04.101191Z"}, {"uuid": "e1490cb8-c12e-4d88-9d1f-9813a25627c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1145", "content": "", "creation_timestamp": "2026-07-20T21:00:05.615361Z"}, {"uuid": "7ad2c7bc-6c3c-4211-a7f3-4c9dba3f0db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1145", "content": "", "creation_timestamp": "2026-07-21T00:00:11.062597Z"}, {"uuid": "7da44f5a-1154-421b-b335-2d81fd73ceab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/ckuRED/508", "content": "", "creation_timestamp": "2026-07-21T13:00:06.919930Z"}, {"uuid": "f8d6b100-ed53-48d4-b1fa-0c0657bf8bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5836", "type": "published-proof-of-concept", "source": "https://t.me/ckuRED/508", "content": "", "creation_timestamp": "2026-07-22T00:00:23.451000Z"}, {"uuid": "18d1b8c0-b5a9-41ad-b160-dee21bb006c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58330", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrcpxuab4o2v", "content": "", "creation_timestamp": "2026-07-23T11:23:19.825626Z"}, {"uuid": "bfb13105-df82-4d2f-a871-1690c0fd30ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58023", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrcpvr54es2j", "content": "", "creation_timestamp": "2026-07-23T11:22:09.500815Z"}, {"uuid": "d9917b76-cde2-4a05-aed5-a615c4848cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58355", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrduoauc662j", "content": "", "creation_timestamp": "2026-07-23T22:20:05.834854Z"}, {"uuid": "7a9b28d8-2008-43be-b2f4-6d878108bb6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58353", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrduo7nkvw2j", "content": "", "creation_timestamp": "2026-07-23T22:20:04.579297Z"}, {"uuid": "6aeca15a-c886-4eed-859b-f13786c1cb55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58355", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mreg7wzkeu2g", "content": "", "creation_timestamp": "2026-07-24T03:34:13.034065Z"}, {"uuid": "3ff70f59-ba1b-44df-b347-7150bbc7c136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58354", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mreg5zx7qd2o", "content": "", "creation_timestamp": "2026-07-24T03:33:09.010606Z"}, {"uuid": "e7d7c6d4-9ded-4f60-a29e-1c8765e5f4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58353", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mreg3ynzgo25", "content": "", "creation_timestamp": "2026-07-24T03:32:00.526026Z"}, {"uuid": "02304053-29a4-43a4-981f-f52f78f73977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58086", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:39.352623Z"}, {"uuid": "dc225370-9a77-40b2-ae68-448a23e020d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58061", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:36.825904Z"}, {"uuid": "9c5d05c6-c9ac-42ee-964b-e6bd86b0bf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58058", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:34.385694Z"}, {"uuid": "db6dad4c-c683-4279-91e8-f7fd0ba7181d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58056", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:32.006372Z"}, {"uuid": "ce07d8d8-ac34-4a58-9a85-7ad2123b03f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58020", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:29.609635Z"}, {"uuid": "bc407740-6191-41e7-88f0-73b91b1bf98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58016", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:27.225475Z"}, {"uuid": "6fb0d75e-e590-4e18-ae3d-8f731cb0037d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58011", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:24.822262Z"}, {"uuid": "819acb08-6339-4d33-9874-f0f788da9ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58091", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msazu72zjv24", "content": "", "creation_timestamp": "2026-08-04T12:40:08.499452Z"}, {"uuid": "195d8e4d-cdf3-48f9-93f5-b881c4543544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://t.me/cyberok_news/95", "content": "", "creation_timestamp": "2026-08-04T13:00:22.734964Z"}, {"uuid": "4e4d4dc3-ce9e-41ae-b90f-08d047dd0fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5865", "type": "seen", "source": "https://t.me/purpleshift/133", "content": "", "creation_timestamp": "2026-08-04T13:00:04.669806Z"}, {"uuid": "233a74cb-792c-421b-88f8-e8140a74d508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5866", "type": "seen", "source": "https://t.me/purpleshift/133", "content": "", "creation_timestamp": "2026-08-04T13:00:04.639364Z"}, {"uuid": "48eb979c-7078-4599-84ba-e2bb5f79c8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58079", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msb274ehj22k", "content": "", "creation_timestamp": "2026-08-04T12:46:12.763151Z"}, {"uuid": "8d2fce1f-ab55-4195-afa4-1f5c66757246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58086", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msb24fvx772s", "content": "", "creation_timestamp": "2026-08-04T12:44:41.816959Z"}, {"uuid": "83bc4b91-4540-4419-8402-69c57f4b7ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58087", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msazzp6pc72c", "content": "", "creation_timestamp": "2026-08-04T12:43:12.539766Z"}, {"uuid": "da1b8431-10b2-47a3-b395-bc0a4fffabe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58089", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msazwwwfch2t", "content": "", "creation_timestamp": "2026-08-04T12:41:39.069188Z"}, {"uuid": "629c09ed-081b-4be7-adbc-4b83545dcdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://t.me/cyberok_news/111", "content": "", "creation_timestamp": "2026-08-04T14:00:22.412948Z"}, {"uuid": "83d8bf21-c0cf-4c9c-8a24-da97f78a689e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://t.me/cyberok_news/95", "content": "", "creation_timestamp": "2026-08-05T00:00:37.887893Z"}, {"uuid": "c142ce60-1120-4085-b400-a481c2c18f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "seen", "source": "https://t.me/cyberok_news/111", "content": "", "creation_timestamp": "2026-08-05T00:00:37.812912Z"}, {"uuid": "4cbdcbac-a90b-4732-87f1-7187cb40ae7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5865", "type": "seen", "source": "https://t.me/purpleshift/133", "content": "", "creation_timestamp": "2026-08-05T00:00:30.553359Z"}, {"uuid": "c3411d66-9e03-4334-a202-dc3d0258bee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-5866", "type": "seen", "source": "https://t.me/purpleshift/133", "content": "", "creation_timestamp": "2026-08-05T00:00:30.513821Z"}, {"uuid": "019e8dfa-5b7b-4284-bb19-cb8bb5e0081a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58274", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d60cc780-114d-429d-9970-b7a29bfb3449", "content": "", "creation_timestamp": "2026-08-05T01:00:24.877901Z"}, {"uuid": "bed65d06-9fdf-4b03-a257-b5bfce090521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/cyberok_news/111", "content": "", "creation_timestamp": "2026-08-06T00:00:47.466927Z"}, {"uuid": "7e310b88-4854-4af8-afb0-51c95df15083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58136", "type": "exploited", "source": "https://t.me/cyberok_news/95", "content": "", "creation_timestamp": "2026-08-06T00:00:47.172162Z"}, {"uuid": "029c37fc-7c40-409d-984a-5e344dc70238", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58374", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7c5ea119-1ac4-4dd4-b167-a2b209c8f5b0", "content": "", "creation_timestamp": "2026-08-29T11:00:33.036123Z"}, {"uuid": "08059d11-ee89-4c18-a0b7-95222282b0c5", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58374", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8c74cd20-479a-4b86-97fd-2ebc21dab358", "content": "", "creation_timestamp": "2026-08-30T01:01:24.419295Z"}, {"uuid": "a8aab230-662a-4ad3-9a11-33e676c08802", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58385", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8c4de8c6-8900-4df9-a73b-1be66f8bbbe6", "content": "", "creation_timestamp": "2026-09-16T18:00:36.530635Z"}]}