{"vulnerability": "cve-2024-4462", "sightings": [{"uuid": "3805dfb9-7394-4404-a8bc-080710b62a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}, {"uuid": "23159f7e-0c88-4a3b-9737-34fe3eb4d3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8521", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aDetails about the Blind RCE issue(SPX-GC) in SPX-GC\nURL\uff1ahttps://github.com/merbinr/CVE-2024-44623\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-13T17:14:20.000000Z"}, {"uuid": "db8f0d76-a7f0-462d-97a0-e26fc6657d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://t.me/cvedetector/11122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-44625 - Gogs Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-44625 \nPublished : Nov. 15, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : Gogs <=0.13.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:07:49.000000Z"}, {"uuid": "22501af5-8058-4f3e-b26f-b20d34b243d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1582", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:48.000000Z"}, {"uuid": "f971c31b-cea3-4086-9fe2-438b730de04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44623", "type": "seen", "source": "https://t.me/cvedetector/5731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-44623 - TuomoKu SPx-GC Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-44623 \nPublished : Sept. 16, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T18:42:15.000000Z"}, {"uuid": "58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4904", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:47.000000Z"}, {"uuid": "a95d0e12-fa36-4b2e-84ca-2579239cb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3239", "content": "https://github.com/merbinr/CVE-2024-44623\n\nDetails about the Blind RCE issue(SPX-GC) in SPX-GC CVE-2024-44623\n#github #poc", "creation_timestamp": "2024-09-29T09:31:09.000000Z"}, {"uuid": "41ccd11b-45ba-4abc-8554-ec012b65a787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11202", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769\n\n4. CVE-2024-45519: \nZimbra SMTP RCE\nhttps://blog.projectdiscovery.io/zimbra-remote-code-execution\n]-> https://github.com/p33d/CVE-2024-45519", "creation_timestamp": "2024-11-01T03:20:06.000000Z"}, {"uuid": "bf08c3d7-2856-4fa3-888e-64563ecfe22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11640", "content": "#WebApp_Security\n1. Unpatched RCE in Gogs (CVE-2024-44625)\nhttps://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs\n2. From Arbitrary File Write to RCE in Restricted Rails apps\nhttps://blog.convisoappsec.com/en/from-arbitrary-file-write-to-rce-in-restricted-rails-apps", "creation_timestamp": "2025-01-04T08:18:58.000000Z"}, {"uuid": "5892b38a-a270-4fd2-9008-57430aa23812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/301", "content": "https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/\n\nUnpatched Remote Code Execution in Gogs\n\nhttps://github.com/Fysac/CVE-2024-44625\n\n#github #\u5206\u6790 #poc", "creation_timestamp": "2025-01-04T03:06:33.000000Z"}, {"uuid": "f67f7186-58de-4dc7-9d96-8875acb326c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpr57hpbnm2l", "content": "", "creation_timestamp": "2026-07-03T18:07:06.633894Z"}]}