{"vulnerability": "cve-2025-24364", "sightings": [{"uuid": "cdd15ec2-3d49-412f-9e2d-b480320042d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901574697474273", "content": "", "creation_timestamp": "2025-01-27T17:48:22.671894Z"}, {"uuid": "08e0089c-696b-45d7-ab22-1e50bf7c9926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdgggem2w", "content": "", "creation_timestamp": "2025-01-27T18:16:21.617866Z"}, {"uuid": "22bac14a-8231-4957-8133-23c6a5adaee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-24364", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114434451714753157", "content": "", "creation_timestamp": "2025-05-01T20:26:00.595260Z"}, {"uuid": "1620de7b-4a3c-4d2e-9d7c-7b87841267fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "a6408848-f2d8-4748-847a-961692726e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/cvedetector/16491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24364 - DNSimple Vaultwarden Admin Panel Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2025-24364 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code in the system. The attacker could then change some settings to use sendmail as mail agent but adjust the settings in such a way that it would use a shell command. It then also needed to craft a special favicon image which would have the commands embedded to run during for example sending a test email. This vulnerability is fixed in 1.33.0. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:24.000000Z"}, {"uuid": "e21c81b8-00dc-42f5-8fed-44e6b31495c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24364", "type": "published-proof-of-concept", "source": "https://t.me/bizone_channel/1863", "content": "\ud83c\udf1b CVE-2025-24364 \u0438 CVE-2025-24365: \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Vaultwarden\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c BI.ZONE TDR, \u0432 2025 \u0433\u043e\u0434\u0443 Vaultwarden \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u0430\u0436\u0434\u0430\u044f \u0434\u0435\u0441\u044f\u0442\u0430\u044f \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 Vaultwarden, \u043f\u0440\u0438 \u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0443\u0437\u043d\u0430\u0435\u0442 \u0438 \u0438\u0445. \u0410 \u0435\u0441\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e API, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043f\u0430\u0434\u0435\u0442 \u043d\u0430 \u0445\u043e\u0441\u0442 \u0441 \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c\u044e.\n\n\u041d\u0430\u0448\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 Vaultwarden. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2025-24364 \u0438 CVE-2025-24365.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438, \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438 \u0434\u0430\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2025-04-22T15:37:47.000000Z"}, {"uuid": "94bab076-1a0d-4732-8f13-2a2c4b410891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/EchelonEyes/3829", "content": "", "creation_timestamp": "2026-07-26T02:00:30.952395Z"}, {"uuid": "81e5c990-187a-44dc-9a82-ffcbd2375f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-26T07:01:45.695465Z"}, {"uuid": "fcbdc45d-5671-4ba0-92ae-124261ef4c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-27T00:01:30.415563Z"}, {"uuid": "a3049d4b-bf34-47eb-a7b5-3472366b4aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/EchelonEyes/3829", "content": "", "creation_timestamp": "2026-07-27T00:00:35.893539Z"}, {"uuid": "f703c318-86fa-4ad3-801f-becb952fb83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3829", "content": "", "creation_timestamp": "2026-07-28T00:00:53.285947Z"}, {"uuid": "1251e828-4da9-4f0b-85df-34614f50c5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "published-proof-of-concept", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-28T21:00:05.560918Z"}, {"uuid": "e119367d-d341-4e06-bc90-97c223d12d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "published-proof-of-concept", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-29T00:00:12.934483Z"}, {"uuid": "b5505029-d919-42dd-ad12-48226a61509e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/divannyi_it/1863", "content": "", "creation_timestamp": "2026-07-29T09:00:07.727118Z"}, {"uuid": "51c9aaa4-7b77-4993-8885-72e22768ca86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/sysadm_in_up/2381", "content": "", "creation_timestamp": "2026-07-29T12:03:16.236719Z"}, {"uuid": "013a03a8-6e2e-4341-adc9-bf8b8b9dbb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/divannyi_it/1863", "content": "", "creation_timestamp": "2026-07-30T00:02:06.668668Z"}, {"uuid": "fb2bd5fd-470c-44bc-a3d4-b47d860d1119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/sysadm_in_up/2381", "content": "", "creation_timestamp": "2026-07-30T00:03:00.889619Z"}, {"uuid": "e99574cc-133a-4857-80f3-cd473159cea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2381", "content": "", "creation_timestamp": "2026-08-04T00:00:08.907267Z"}, {"uuid": "95362839-685a-4fc3-8c1d-5784a455356d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "", "creation_timestamp": "2026-08-04T13:00:14.024657Z"}, {"uuid": "d3193802-ad40-4519-ad70-d3e2ee73d210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24364", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "", "creation_timestamp": "2026-08-05T00:00:10.762679Z"}]}