{"vulnerability": "CVE-2024-5810", "sightings": [{"uuid": "f72f71ce-2418-4983-8a81-f42911af21be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58103", "type": "seen", "source": "https://t.me/cvedetector/20395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58103 - Square Wire Deserialization Recursion Limit Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58103 \nPublished : March 16, 2025, 4:15 a.m. | 21\u00a0minutes ago \nDescription : Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T06:20:27.000000Z"}, {"uuid": "fd8039e3-258d-4b98-a0f0-9f194c0547a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58105", "type": "seen", "source": "https://t.me/cvedetector/21116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58105 - Trend Micro Apex One Security Agent Plug-in Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58105 \nPublished : March 25, 2025, 6:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.   \n  \nThis CVE address an addtional bypass not covered in CVE-2024-58104.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T22:00:08.000000Z"}, {"uuid": "97101846-e40b-46e3-8370-fd06d6a8183e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/cvedetector/21116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58105 - Trend Micro Apex One Security Agent Plug-in Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58105 \nPublished : March 25, 2025, 6:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.   \n  \nThis CVE address an addtional bypass not covered in CVE-2024-58104.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T22:00:08.000000Z"}, {"uuid": "a575404c-cbfe-498e-8894-797449462a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/cvedetector/21115", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58104 - Trend Micro Apex One Security Agent Plug-in Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58104 \nPublished : March 25, 2025, 6:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations.   \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T22:00:07.000000Z"}, {"uuid": "448e3ca1-db0c-4ee0-9d04-ef83229df319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dh63lu26", "content": "", "creation_timestamp": "2025-03-25T21:05:03.884385Z"}, {"uuid": "052d1d63-78cb-424a-b95f-f5f0dfb25296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dg4pnj2l", "content": "", "creation_timestamp": "2025-03-25T21:04:58.723687Z"}, {"uuid": "32f1283a-eb03-4045-ab94-f8980997cd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wgrfos2w", "content": "", "creation_timestamp": "2025-05-14T22:57:22.831800Z"}, {"uuid": "7a64b880-c702-48e1-b13c-51b326281d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58101", "type": "seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3m33435oanj2u", "content": "", "creation_timestamp": "2025-10-13T11:24:21.575821Z"}, {"uuid": "4891521c-8efe-41f3-b16c-331b7677d9b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-58100", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "672a90ed-f568-4e84-bd32-15c78769d4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58105", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8801", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58105\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. \n\nThis CVE address an addtional bypass not covered in CVE-2024-58104.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2025-03-25T17:37:39.464Z\n\ud83d\udccf Modified: 2025-03-26T03:55:23.754Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0018217", "creation_timestamp": "2025-03-26T04:25:37.000000Z"}, {"uuid": "44460813-1e49-4959-9b74-a0dfedb0a8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58106", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58106\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:31:45.797Z\n\ud83d\udccf Modified: 2025-04-07T03:31:45.797Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:46.000000Z"}, {"uuid": "0b7ac045-714e-4e64-9b89-417c89da32b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58108", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10662", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58108\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:34:16.940Z\n\ud83d\udccf Modified: 2025-04-07T03:34:16.940Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:41.000000Z"}, {"uuid": "4c00373d-4b00-4f02-9618-1e481f2d8059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58109", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10661", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58109\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:35:12.667Z\n\ud83d\udccf Modified: 2025-04-07T03:35:12.667Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:40.000000Z"}, {"uuid": "228348bd-208d-4d41-863e-13e80d36775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58101", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16405", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58101\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:55:09.386Z\n\ud83d\udd17 References:\n1. https://www.tarlogic.com/blog/cve-2024-58101", "creation_timestamp": "2025-05-14T20:32:35.000000Z"}, {"uuid": "bf62092c-0d15-441e-bb14-0781a3b9aa63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ll7w3iarlo2w", "content": "", "creation_timestamp": "2025-03-25T18:37:22.571894Z"}, {"uuid": "1275b0ad-f192-4957-b3fb-eea4fe8fb5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58102", "type": "seen", "source": "https://t.me/cvedetector/20061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-58102 - Datalust Seq Stack Consumption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-58102 \nPublished : March 11, 2025, 8:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T11:46:27.000000Z"}, {"uuid": "b655181f-cd16-402b-adb1-8089f4928ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58107", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10663", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58107\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:33:15.998Z\n\ud83d\udccf Modified: 2025-04-07T03:33:15.998Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:42.000000Z"}, {"uuid": "8da2b800-e47f-4dbf-a219-25dc79aa1ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58100", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: check changes_pkt_data property for extension programs\n\nWhen processing calls to global sub-programs, verifier decides whether\nto invalidate all packet pointers in current state depending on the\nchanges_pkt_data property of the global sub-program.\n\nBecause of this, an extension program replacing a global sub-program\nmust be compatible with changes_pkt_data property of the sub-program\nbeing replaced.\n\nThis commit:\n- adds changes_pkt_data flag to struct bpf_prog_aux:\n  - this flag is set in check_cfg() for main sub-program;\n  - in jit_subprogs() for other sub-programs;\n- modifies bpf_check_attach_btf_id() to check changes_pkt_data flag;\n- moves call to check_attach_btf_id() after the call to check_cfg(),\n  because it needs changes_pkt_data flag to be set:\n\n    bpf_check:\n      ...                             ...\n    - check_attach_btf_id             resolve_pseudo_ldimm64\n      resolve_pseudo_ldimm64   --&gt;    bpf_prog_is_offloaded\n      bpf_prog_is_offloaded           check_cfg\n      check_cfg                     + check_attach_btf_id\n      ...                             ...\n\nThe following fields are set by check_attach_btf_id():\n- env-&gt;ops\n- prog-&gt;aux-&gt;attach_btf_trace\n- prog-&gt;aux-&gt;attach_func_name\n- prog-&gt;aux-&gt;attach_func_proto\n- prog-&gt;aux-&gt;dst_trampoline\n- prog-&gt;aux-&gt;mod\n- prog-&gt;aux-&gt;saved_dst_attach_type\n- prog-&gt;aux-&gt;saved_dst_prog_type\n- prog-&gt;expected_attach_type\n\nNeither of these fields are used by resolve_pseudo_ldimm64() or\nbpf_prog_offload_verifier_prep() (for netronome and netdevsim\ndrivers), so the reordering is safe.\n\ud83d\udccf Published: 2025-05-05T14:53:33.445Z\n\ud83d\udccf Modified: 2025-05-09T08:06:09.147Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/7197fc4acdf238ec8ad06de5a8235df0c1f9c7d7\n2. https://git.kernel.org/stable/c/3846e2bea565ee1c5195dcc625fda9868fb0e3b3\n3. https://git.kernel.org/stable/c/81f6d0530ba031b5f038a091619bf2ff29568852", "creation_timestamp": "2025-05-09T08:25:24.000000Z"}, {"uuid": "41881814-de37-4458-a6c8-20aa76c10ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-5810", "type": "seen", "source": "https://t.me/cvedetector/287", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5810 - The WP2Speed Faster \u2013 Optimize PageSpeed Insights\", \n  \"Content\": \"CVE ID : CVE-2024-5810 \nPublished : July 9, 2024, 9:15 a.m. | 31\u00a0minutes ago \nDescription : The WP2Speed Faster \u2013 Optimize PageSpeed Insights Score 90-100 plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.1. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to overwrite CSS, update the trial settings, purge the cache, and find attachments. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T11:50:00.000000Z"}, {"uuid": "1844349f-cd9b-40f1-97dd-1c4126f88c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrda2vmu22", "content": "", "creation_timestamp": "2025-05-05T16:16:29.029882Z"}, {"uuid": "3904f4e1-fb41-4145-8c15-11aae3097e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8801", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58105\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. \n\nThis CVE address an addtional bypass not covered in CVE-2024-58104.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2025-03-25T17:37:39.464Z\n\ud83d\udccf Modified: 2025-03-26T03:55:23.754Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0018217", "creation_timestamp": "2025-03-26T04:25:37.000000Z"}, {"uuid": "5855897f-3e3c-4f37-a0c3-a90cd3db56ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58104", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58104\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability  in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. \n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2025-03-25T17:37:28.783Z\n\ud83d\udccf Modified: 2025-03-26T03:55:25.056Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0018217", "creation_timestamp": "2025-03-26T04:25:37.000000Z"}, {"uuid": "d7d47e99-1c39-4691-999f-522de7c844e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-58102", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58102\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C)\n\ud83d\udd39 Description: An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T07:53:21.454Z\n\ud83d\udd17 References:\n1. https://github.com/datalust/seq-tickets/issues/2367\n2. https://github.com/datalust/seq-tickets/issues/2086\n3. https://datalust.co/seq", "creation_timestamp": "2025-03-11T08:38:56.000000Z"}]}