{"vulnerability": "cve-2024-4562", "sightings": [{"uuid": "34f2df3b-5d5a-4667-916d-a5182224d717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45627", "type": "seen", "source": "https://t.me/cvedetector/15302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45627 - Apache Linkis Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45627 \nPublished : Jan. 14, 2025, 5:15 p.m. | 36\u00a0minutes ago \nDescription : In Apache Linkis &lt;1.7.0,\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T19:01:15.000000Z"}, {"uuid": "f4116bca-d03a-4c43-961f-67669d278720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45623", "type": "seen", "source": "https://t.me/cvedetector/4661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45623 - D-Link DAP-2310 Apache HTTP Server (HTTPd) Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-45623 \nPublished : Sept. 2, 2024, 9:15 p.m. | 33\u00a0minutes ago \nDescription : D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the ATP binary that handles PHP HTTP GET requests for the Apache HTTP Server (httpd). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T23:54:46.000000Z"}, {"uuid": "764175a5-5aaa-4f74-a869-13b43d603fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45621", "type": "seen", "source": "https://t.me/cvedetector/4659", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45621 - Rocket.Chat Electron Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-45621 \nPublished : Sept. 2, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering third-party external actions from PDF documents. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T22:14:35.000000Z"}, {"uuid": "1db8700c-5c80-42ab-a253-c1cc0550ef69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45622", "type": "seen", "source": "https://t.me/cvedetector/4658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45622 - ASIS (aka Aplikasi Sistem Sekolah using CodeIgnite\", \n  \"Content\": \"CVE ID : CVE-2024-45622 \nPublished : Sept. 2, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T22:14:34.000000Z"}, {"uuid": "5cd0a758-fbcf-4b66-b5e3-70d0a4913381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45626", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dsezzz2u", "content": "", "creation_timestamp": "2025-02-05T17:55:10.067484Z"}, {"uuid": "ff01048f-89e6-4a45-b0b2-642e08a0ee4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45626", "type": "seen", "source": "https://t.me/cvedetector/17378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45626 - Apache James JMAP DoS Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-45626 \nPublished : Feb. 6, 2025, 12:15 p.m. | 16\u00a0minutes ago \nDescription : Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service.  \n  \nUsers are recommended to upgrade to version 3.7.6 and 3.8.2, which fix this issue. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T13:33:16.000000Z"}, {"uuid": "9b0faa78-1a74-48da-8e38-c66432deb0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45624", "type": "seen", "source": "https://t.me/cvedetector/5434", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45624 - Pgpool-II Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45624 \nPublished : Sept. 12, 2024, 5:15 a.m. | 44\u00a0minutes ago \nDescription : Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T08:05:30.000000Z"}, {"uuid": "abc398d0-68ef-4322-ae06-165929eb1bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45620", "type": "seen", "source": "https://t.me/cvedetector/4728", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45620 - OpenSC pkcs15-init Bad Read.Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-45620 \nPublished : Sept. 3, 2024, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed. \nSeverity: 3.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T01:00:16.000000Z"}, {"uuid": "1bf46999-0f47-4b68-a432-7a63812c4e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45625", "type": "seen", "source": "https://t.me/cvedetector/5093", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45625 - Forminator Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45625 \nPublished : Sept. 9, 2024, 5:15 a.m. | 45\u00a0minutes ago \nDescription : Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by Forminator. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-09T08:07:28.000000Z"}, {"uuid": "578fbbe9-c11d-41b0-b51a-abda9cef6a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45627", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpqv5ogr22r", "content": "", "creation_timestamp": "2025-01-14T17:15:47.559999Z"}, {"uuid": "43e659b2-52c3-435d-96b2-25a82dae0ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45627", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfplslqogz2u", "content": "", "creation_timestamp": "2025-01-14T15:44:53.173529Z"}, {"uuid": "f1c81c54-d5ea-48ee-81fd-269e4c85140d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45626", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjd4e6l5a2q", "content": "", "creation_timestamp": "2025-02-06T14:43:41.972931Z"}, {"uuid": "09136082-163f-41be-86cb-10bd1e94d466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45621", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7510", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45621\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering third-party external actions from PDF documents.\n\ud83d\udccf Published: 2024-09-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T20:22:43.986Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/1967109\n2. https://github.com/RocketChat/Rocket.Chat/releases/tag/6.3.4", "creation_timestamp": "2025-03-13T20:43:21.000000Z"}, {"uuid": "7688f52b-167a-460e-b321-bc71df430fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113956682386323050", "content": "", "creation_timestamp": "2025-02-06T11:22:59.299833Z"}, {"uuid": "ed9a7202-6dfe-4fd7-bd31-105e2355ba2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45626", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj2uzrwi32p", "content": "", "creation_timestamp": "2025-02-06T12:16:26.066343Z"}]}