{"vulnerability": "CVE-2024-4348", "sightings": [{"uuid": "d6d8fcf7-9469-42db-bfc7-a8ca4749fc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "eb62b733-b2fb-4b0b-ba63-647b6359fb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43480", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "c19802b6-c81d-409d-b793-23a4e62fff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "bb893a88-82d1-4fac-b2f9-dbf00ca9fc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43484", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "9ab2e02d-2265-4801-875f-e53f8e884239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "f74ebbb5-1bfa-4da0-a7ac-de907e04c4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43481", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "d5466b26-b346-4a16-8193-dc3d6e2fbcfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43482", "type": "seen", "source": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review", "content": "", "creation_timestamp": "2024-09-10T17:25:32.000000Z"}, {"uuid": "f4009067-79b8-43b6-9a3e-0e4684223c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43487", "type": "seen", "source": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review", "content": "", "creation_timestamp": "2024-09-10T17:25:32.000000Z"}, {"uuid": "961ef8ed-21ea-4f68-90b2-6d638668e555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lgw3brca3y2k", "content": "", "creation_timestamp": "2025-01-29T23:02:58.453897Z"}, {"uuid": "38828849-a3f9-48a9-ad0d-0af32efd6127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02", "content": "", "creation_timestamp": "2025-05-15T10:00:00.000000Z"}, {"uuid": "5dad24de-0225-4bd0-b18d-ebcb8fb17fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02", "content": "", "creation_timestamp": "2025-05-15T10:00:00.000000Z"}, {"uuid": "76b21ada-b7a4-49dc-8bcd-51b3b5696485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1390", "content": "", "creation_timestamp": "2024-10-09T04:00:00.000000Z"}, {"uuid": "fa6ead10-799c-4779-b12a-d814036fdc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-06-16T02:45:15.399Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-06-16T03:35:27.000000Z"}, {"uuid": "47eff563-38af-4880-bce3-8abd0a8542fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-01-23T01:39:34.702Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-01-23T02:02:34.000000Z"}, {"uuid": "527bbc6f-f5dd-4527-9c80-611aeb11c80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43487", "type": "seen", "source": "https://t.me/cvedetector/5281", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43487 - Microsoft Windows Mark of the Web Security Feature Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-43487 \nPublished : Sept. 10, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : Windows Mark of the Web Security Feature Bypass Vulnerability \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T20:06:18.000000Z"}, {"uuid": "6acadc5d-22fb-43ac-9b2b-2b055d55ef18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43482", "type": "seen", "source": "https://t.me/cvedetector/5280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43482 - Microsoft Outlook iOS Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-43482 \nPublished : Sept. 10, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : Microsoft Outlook for iOS Information Disclosure Vulnerability \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T20:06:16.000000Z"}, {"uuid": "0122dea3-db3a-483f-8661-8957455e1428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43489", "type": "seen", "source": "https://t.me/cvedetector/6077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43489 - Microsoft Edge Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43489 \nPublished : Sept. 19, 2024, 9:15 p.m. | 17\u00a0minutes ago \nDescription : Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T23:41:08.000000Z"}, {"uuid": "8a81b1d9-ca87-4f9b-9230-9fcb13ae3fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4348", "type": "seen", "source": "https://t.me/arpsyndicate/4910", "content": "#ExploitObserverAlert\n\nCVE-2024-4348\n\nDESCRIPTION: Exploit Observer has 5 entries in 2 file formats related to CVE-2024-4348. A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262488. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\nFIRST-EPSS: 0.000450000\nARPS-PRIORITY: 0.8702569", "creation_timestamp": "2024-05-02T22:31:13.000000Z"}, {"uuid": "a32ab4a8-dadc-4dd4-9fba-b501d20a26f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4348", "type": "seen", "source": "https://t.me/arpsyndicate/4921", "content": "#ExploitObserverAlert\n\nCVE-2024-4348\n\nDESCRIPTION: Exploit Observer has 5 entries in 2 file formats related to CVE-2024-4348. A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262488. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\nFIRST-EPSS: 0.000650000\nARPS-PRIORITY: 0.8702569", "creation_timestamp": "2024-05-04T08:06:46.000000Z"}, {"uuid": "cc60d945-ea7e-4506-b84e-90640cf30ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116719508098466554", "content": "", "creation_timestamp": "2026-06-09T09:46:02.715533Z"}, {"uuid": "ba98e67b-8854-41bf-8a90-ae3857c0dcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-43487", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116755475429413960", "content": "", "creation_timestamp": "2026-06-15T18:12:54.535782Z"}, {"uuid": "579d6182-6fed-41bd-bff8-71bb1d9c18c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpy2iivzyc2i", "content": "", "creation_timestamp": "2026-07-06T12:07:09.758979Z"}]}