{"vulnerability": "cve-2024-5230", "sightings": [{"uuid": "46599a74-8652-4cd6-85a5-3e779ddd73e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52302", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmxigzhklk27", "content": "", "creation_timestamp": "2025-04-16T21:02:30.022707Z"}, {"uuid": "af686367-a828-4679-98f9-ce9d4dbc7089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52304", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "7efea6e6-c384-4465-8ddb-8157cb3cd2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52304", "type": "seen", "source": "https://gist.github.com/konard/0d69c914be52c3cee3437d4858b1c259", "content": "", "creation_timestamp": "2026-01-19T23:20:05.000000Z"}, {"uuid": "b962ba5d-941f-4cfe-a30f-e5cfc16ab363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://vulnerability.circl.lu/comment/cb0ad24f-1243-4f18-9607-95a5717fb451", "content": "", "creation_timestamp": "2024-11-18T07:05:03.432836Z"}, {"uuid": "f2d82691-491c-4bdd-bc88-0357828c8927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9045", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA bit of research around CVE-2024-52301\nURL\uff1ahttps://github.com/martinhaunschmid/CVE-2024-52301-Research\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-15T19:16:43.000000Z"}, {"uuid": "32a331a2-7a96-48cb-ba58-f72d167c6039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52302", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9040", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-4577 RCE PoC\nURL\uff1ahttps://github.com/d3sca/CVE-2024-52302\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-11-15T10:23:45.000000Z"}, {"uuid": "ea682574-e1e8-46f9-b84a-7e6ec58b3a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52303", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9080", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-52303 \nURL\uff1ahttps://github.com/ozempiic/CVE-2024-52303\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-19T02:13:49.000000Z"}, {"uuid": "ac33e445-08dd-45ae-af66-d057009dcd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/18105", "content": "HTB Environment. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u0435\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 Linux #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a\u00a0\u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432\u00a0Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 env_keep \u0434\u043b\u044f\u00a0sudo. \u0427\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u043a\u00a0\u041e\u0421, \u043d\u0430\u043c \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0433 CVE-2024-52301\u00a0\u0432\u043e\u00a0\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Laravel, \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0438\u00a0\u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432\u0435\u0431\u2011\u0448\u0435\u043b\u043b.\n\nhttps://xakep.ru/2025/09/08/htb-environment/", "creation_timestamp": "2025-09-08T13:47:35.000000Z"}, {"uuid": "5d361bd1-65df-4801-993c-2437f258113d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52304", "type": "seen", "source": "https://t.me/cvedetector/11387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52304 - ApacheIOHTTP Request Smuggling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-52304 \nPublished : Nov. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.10.11, the Python parser parses newlines in chunk extensions incorrectly which can lead to request smuggling vulnerabilities under certain conditions. If a pure Python version of aiohttp is installed (i.e. without the usual C extensions) or `AIOHTTP_NO_EXTENSIONS` is enabled, then an attacker may be able to execute a request smuggling attack to bypass certain firewalls or proxy protections. Version 3.10.11 fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T23:14:35.000000Z"}, {"uuid": "fff57370-5b6f-4c8d-9faa-d41c117d80be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52303", "type": "seen", "source": "https://t.me/cvedetector/11376", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52303 - Aiohttp MatchInfoError Memory Exhaustion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-52303 \nPublished : Nov. 18, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests. Those who use any middlewares with aiohttp.web should upgrade to version 3.10.11 to receive a patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T21:34:09.000000Z"}, {"uuid": "db209423-6cfb-42d8-a0ac-3f1d571f741b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52308", "type": "seen", "source": "https://t.me/cvedetector/11033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52308 - GitHub CLI Remote Code Execution via Malicious Devcontainer SSH Server\", \n  \"Content\": \"CVE ID : CVE-2024-52308 \nPublished : Nov. 14, 2024, 11:15 p.m. | 38\u00a0minutes ago \nDescription : The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0.  \n  \nDevelopers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image](). GitHub CLI [retrieves SSH connection details](), such as remote username, which is used in [executing `ssh` commands]() for `gh codespace ssh` or `gh codespace logs` commands.  \n  \nThis exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand=\"echo hacked\" #`.  The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored.  \n  \nIn `2.62.0`, the remote username information is being validated before being used. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T01:02:02.000000Z"}, {"uuid": "71975e8c-84a1-452b-8556-8e4da3cb6b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52302", "type": "seen", "source": "https://t.me/cvedetector/10966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52302 - Apache Common User Management File Upload RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-52302 \nPublished : Nov. 14, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : common-user-management is a robust Spring Boot application featuring user management services designed to control user access dynamically. There is a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture. This endpoint allows file uploads without proper validation or restrictions, enabling attackers to upload malicious files that can lead to Remote Code Execution (RCE). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T18:19:59.000000Z"}, {"uuid": "f80c0412-9368-4c33-9b86-39c9362f1329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52305", "type": "seen", "source": "https://t.me/cvedetector/10832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52305 - UnoPim Laravel Framework SVG Image Upload Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-52305 \nPublished : Nov. 13, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can upload a malicious SVG file containing an embedded script. When the profile image is accessed, the embedded script executes, leading to the potential theft of session cookies. This vulnerability is fixed in 0.1.5. \nSeverity: 0.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T18:03:51.000000Z"}, {"uuid": "52283e61-a7f0-4b86-a18d-a9bc23dac13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52300", "type": "seen", "source": "https://t.me/cvedetector/10831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52300 - XWiki PDF Viewer Macro Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-52300 \nPublished : Nov. 13, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any user who can edit a page. XSS can impact the confidentiality, integrity and availability of the whole XWiki installation when an admin visits the page with the malicious code. This is fixed in 2.5.6. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T18:03:50.000000Z"}, {"uuid": "f1df8836-0f77-48ef-9417-264ebd3ffbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/5492", "content": "Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access \u2013 gbhackers.com\n\nFri, 15 Nov 2024 17:26:05", "creation_timestamp": "2024-11-15T13:03:03.000000Z"}, {"uuid": "e4d3c791-5638-4ed4-9be6-1487e1a24f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/nusantaraMYID/1296", "content": "Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access \u2013 gbhackers.com\n\nFri, 15 Nov 2024 17:26:05", "creation_timestamp": "2024-11-15T13:03:00.000000Z"}, {"uuid": "6867ead5-cf86-4c7d-8a45-f31febc2bf4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "Telegram/WfjfuAdqF_eE1rSkcvQrADrgNJoWcaAV1zo-uhkA2rSSO9U", "content": "", "creation_timestamp": "2024-11-15T13:03:00.000000Z"}, {"uuid": "4eed6094-e454-4062-b501-d4f58b564460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52305", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476328977045887", "content": "", "creation_timestamp": "2024-11-13T15:22:48.169752Z"}, {"uuid": "c000c339-fe89-44ec-8fe1-815ab48f09fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52306", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476328992893189", "content": "", "creation_timestamp": "2024-11-13T15:22:48.534809Z"}, {"uuid": "d81a951f-f1b7-4085-89a2-76b44cc79f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52305", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476341957730359", "content": "", "creation_timestamp": "2024-11-13T15:26:06.026820Z"}, {"uuid": "317e81e0-8e03-4d33-95d8-71affa4b203e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52306", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476341971808030", "content": "", "creation_timestamp": "2024-11-13T15:26:06.859606Z"}, {"uuid": "5c1271a8-9467-4403-b4e6-533ef09f1e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52308", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113483800434488994", "content": "", "creation_timestamp": "2024-11-14T23:02:53.499725Z"}, {"uuid": "676cf53d-5205-4c66-8339-37b4e01428a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52302", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113482015467624579", "content": "", "creation_timestamp": "2024-11-14T15:28:56.928416Z"}, {"uuid": "2ffe0398-84c3-4ec2-9460-76d117b3fe52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52304", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505821932526019", "content": "", "creation_timestamp": "2024-11-18T20:23:14.906642Z"}, {"uuid": "53550584-78c2-446d-93e1-37a7e2d2eef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52303", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113505769937063933", "content": "", "creation_timestamp": "2024-11-18T20:10:01.345191Z"}, {"uuid": "9db4f04e-8907-48cc-ac67-d860061339f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-11-18T07:03:43.802280Z"}, {"uuid": "863efa1d-b0d9-43b3-9aa4-f7a24fb75c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/113502690070415629", "content": "", "creation_timestamp": "2024-11-18T07:06:46.068505Z"}, {"uuid": "2a91cc3e-1b70-44fe-8b34-45edcadeadde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-52301", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/11/kritische-sicherheitslucke-in-laravel-framework-updates-verfugbar", "content": "", "creation_timestamp": "2024-11-15T16:41:44.000000Z"}, {"uuid": "9e71fb6c-add7-4d7c-bf0f-245c4f1663ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/cvedetector/10715", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52301 - Laravel Environment Detection Denial of Service (DoS) Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-52301 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:19.000000Z"}, {"uuid": "40079f8a-23b7-4ba4-8755-44663bf4e7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52306", "type": "seen", "source": "https://t.me/cvedetector/10833", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52306 - FileManager Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-52306 \nPublished : Nov. 13, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerability is fixed in 3.0.9. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T18:03:52.000000Z"}, {"uuid": "b1a52bef-42d3-4fbb-8274-2ff816efb669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52308", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "c4a6bced-1ba4-4619-ad4f-d5375da6bf69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52303", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "e1c48f79-a149-45c8-a752-9ec58fa3e145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://gist.github.com/LeonardoRiveraITC/2946052976dc9e115d9104adc0c74558", "content": "", "creation_timestamp": "2025-09-05T10:00:10.000000Z"}, {"uuid": "69f733b4-c877-4122-a551-e92615a7e17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9252", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aArbitrary Argument Injection Scanner CVE-2024-52301\nURL\uff1ahttps://github.com/nanwinata/CVE-2024-52301\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-30T04:29:23.000000Z"}, {"uuid": "3cc2d0af-52bf-48df-a4c0-0c6178077b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/449", "content": "Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access \u2013 gbhackers.com\n\nFri, 15 Nov 2024 17:26:05", "creation_timestamp": "2024-11-15T13:03:03.000000Z"}, {"uuid": "9a4fa4e4-0929-4050-b14c-e4586bdd7a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52307", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113522077469095315", "content": "", "creation_timestamp": "2024-11-21T17:17:14.593730Z"}, {"uuid": "20f530a6-6993-48fc-a09e-b6a26bfdcce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-52309", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113522077482345132", "content": "", "creation_timestamp": "2024-11-21T17:17:14.824733Z"}]}