{"metadata": {"vulnerability": "CVE-2024-5836", "count": 84, "kinds": {"milestone": 12, "sighting": 24, "kev": 0, "other": 48}}, "data": [{"timestamp": "2024-06-11T00:00:00Z", "date_only": true, "value": "2024-06-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0481", "record": "CERTFR-2024-AVI-0481", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-06-11T06:12:52.421Z", "date_only": false, "value": "2024-06-11T06:12:52.421Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-5836", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-11T20:58:10.427Z", "date_only": false, "value": "2024-06-11T20:58:10.427Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-11T21:15:54Z", "date_only": false, "value": "2024-06-11T21:15:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G9F9-C2XM-RWMM", "record": "GHSA-G9F9-C2XM-RWMM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-11T21:15:54.657Z", "date_only": false, "value": "2024-06-11T21:15:54.657", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5836", "record": "FKIE_CVE-2024-5836", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-11T21:32:19Z", "date_only": false, "value": "2024-06-11T21:32:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G9F9-C2XM-RWMM", "record": "GHSA-G9F9-C2XM-RWMM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "vulnerabilities.6.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": false, "value": "2024-06-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0481", "record": "CERTFR-2024-AVI-0481", "field": "revisions.0.revision_date"}, {"timestamp": "2024-06-12T22:00:00Z", "date_only": false, "value": "2024-06-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-06-13T00:00:00Z", "date_only": true, "value": "2024-06-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0495", "record": "CERTFR-2024-AVI-0495", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-06-13T00:00:00Z", "date_only": true, "value": "2024-06-13", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-27326", "record": "CNVD-2024-27326", "field": "submitTime"}, {"timestamp": "2024-06-13T22:00:00Z", "date_only": false, "value": "2024-06-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1377", "record": "WID-SEC-W-2024-1377", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-13T22:00:00Z", "date_only": false, "value": "2024-06-13T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1377", "record": "WID-SEC-W-2024-1377", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-13T22:00:00Z", "date_only": false, "value": "2024-06-13T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1377", "record": "WID-SEC-W-2024-1377", "field": "vulnerabilities.9.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-13T22:00:00Z", "date_only": false, "value": "2024-06-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1377", "record": "WID-SEC-W-2024-1377", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-14T00:00:00Z", "date_only": false, "value": "2024-06-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0495", "record": "CERTFR-2024-AVI-0495", "field": "revisions.0.revision_date"}, {"timestamp": "2024-06-14T03:06:06.567Z", "date_only": false, "value": "2024-06-14T03:06:06.567Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2024-5836", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-14T03:55:58.303Z", "date_only": false, "value": "2024-06-14T03:55:58.303414Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5836", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-06-14T03:55:58.303Z", "date_only": false, "value": "2024-06-14T03:55:58.303414Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5836", "record": "FKIE_CVE-2024-5836", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-16T22:00:00Z", "date_only": false, "value": "2024-06-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-06-17T00:00:00Z", "date_only": true, "value": "2024-06-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-27326", "record": "CNVD-2024-27326", "field": "openTime"}, {"timestamp": "2024-06-20T15:31:11Z", "date_only": false, "value": "2024-06-20T15:31:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G9F9-C2XM-RWMM", "record": "GHSA-G9F9-C2XM-RWMM", "field": "modified"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14122-1", "record": "OPENSUSE-SU-2024:14122-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14122-1", "record": "OPENSUSE-SU-2024:14122-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14122-1", "record": "OPENSUSE-SU-2024:14122-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14122-1", "record": "OPENSUSE-SU-2024:14122-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-18T18:10:25Z", "date_only": false, "value": "2024-07-18T18:10:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0204-1", "record": "OPENSUSE-SU-2024:0204-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-18T18:10:25Z", "date_only": false, "value": "2024-07-18T18:10:25Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0204-1", "record": "OPENSUSE-SU-2024:0204-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-18T18:10:25Z", "date_only": false, "value": "2024-07-18T18:10:25Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0204-1", "record": "OPENSUSE-SU-2024:0204-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-07-18T18:10:25Z", "date_only": false, "value": "2024-07-18T18:10:25Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0204-1", "record": "OPENSUSE-SU-2024:0204-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-18T22:00:00Z", "date_only": false, "value": "2024-07-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-07-20T18:01:28Z", "date_only": false, "value": "2024-07-20T18:01:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0205-1", "record": "OPENSUSE-SU-2024:0205-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-20T18:01:28Z", "date_only": false, "value": "2024-07-20T18:01:28Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0205-1", "record": "OPENSUSE-SU-2024:0205-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-20T18:01:28Z", "date_only": false, "value": "2024-07-20T18:01:28Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0205-1", "record": "OPENSUSE-SU-2024:0205-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-07-20T18:01:28Z", "date_only": false, "value": "2024-07-20T18:01:28Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0205-1", "record": "OPENSUSE-SU-2024:0205-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-21T22:00:00Z", "date_only": false, "value": "2024-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-07-26T14:31:50Z", "date_only": false, "value": "2024-07-26T14:31:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0223-1", "record": "OPENSUSE-SU-2024:0223-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-26T14:31:50Z", "date_only": false, "value": "2024-07-26T14:31:50Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0223-1", "record": "OPENSUSE-SU-2024:0223-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-26T14:31:50Z", "date_only": false, "value": "2024-07-26T14:31:50Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0223-1", "record": "OPENSUSE-SU-2024:0223-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-07-26T14:31:50Z", "date_only": false, "value": "2024-07-26T14:31:50Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0223-1", "record": "OPENSUSE-SU-2024:0223-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-01T21:25:02.853Z", "date_only": false, "value": "2024-08-01T21:25:02.853Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-5836", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:10:11.828Z", "date_only": false, "value": "2024-08-15T18:10:11.828+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1377", "record": "WID-SEC-W-2024-1377", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-23T22:00:00Z", "date_only": false, "value": "2024-09-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2024-09-25T22:00:00Z", "date_only": false, "value": "2024-09-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-10-17T05:21:34Z", "date_only": false, "value": "2024-10-17T05:21:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8764", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "dd7d186a-31c1-4bcb-a6d6-814065c6fd2c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension. \nURL\uff1ahttps://github.com/ading2210/CVE-2024-6778-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8764", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-18T12:32:20.467Z", "date_only": false, "value": "2024-10-18T12:32:20.467002Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "2088df4b-a0f8-4295-9fbe-1b44e7328ebe"}, {"timestamp": "2024-10-20T18:42:21Z", "date_only": false, "value": "2024-10-20T18:42:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CVvl4yAxD11343Smp8Poq2G7FUDQCjpXFFsP9PDh3yduS2g", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "dec76524-97a3-4511-8982-e55dae138f2f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-22T15:51:10Z", "date_only": false, "value": "2024-10-22T15:51:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/13779", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "719553f3-0844-4e4a-ba01-123ed5e6a0b2", "content": "\u2744 Escaping the Chrome Sandbox Through DevTools.\n\nhttps://ading.dev/blog/posts/chrome_sandbox_escape.html\n\n\ud83d\udcf1 A POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension.\n\nhttps://github.com/ading2210/CVE-2024-6778-POC", "url": "https://t.me/cKure/13779", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-27T04:37:04Z", "date_only": false, "value": "2024-10-27T04:37:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1109", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "f00ed29c-467e-4151-8034-8fde85537610", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1109", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-27T04:37:05Z", "date_only": false, "value": "2024-10-27T04:37:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3816", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "b58dd067-8664-4ff0-a2ce-1608f7fded34", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3816", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-27T05:11:12Z", "date_only": false, "value": "2024-10-27T05:11:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7542", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "92e08f07-89c6-4779-ad32-8f9672b23f74", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7542", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-27T05:11:12Z", "date_only": false, "value": "2024-10-27T05:11:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8916", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "652b3b8f-299f-4b32-bc86-39dc6c0897d3", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8916", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-27T05:11:16Z", "date_only": false, "value": "2024-10-27T05:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24202", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "48b352a4-c834-4aa2-8e30-4d0a32379e4e", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24202", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-27T05:11:16Z", "date_only": false, "value": "2024-10-27T05:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/577", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "9314d1cc-afab-4420-b7e5-593381446d0c", "content": "Tools - Hackers Factory \n\nJSNinja is a powerful tool for extracting URLs and sensitive information from JavaScript files\n\nhttps://github.com/iamunixtz/JSNinja\n\nAn x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution : \n\nhttps://github.com/Octoberfest7/Secure_Stager  \n\nA modern 64-bit position independent implant template : \n\nhttps://github.com/Cracked5pider/Stardust  credits\n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper : \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/577", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-31T04:21:04Z", "date_only": false, "value": "2024-10-31T04:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1126", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "f14cfa79-c364-4ebd-ac41-ffad28c46522", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1126", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-31T04:21:05Z", "date_only": false, "value": "2024-10-31T04:21:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3833", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "1012b079-bafa-4b24-b62e-5073279c9f0e", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3833", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-31T08:37:42Z", "date_only": false, "value": "2024-10-31T08:37:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7561", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "39f59665-3892-4df1-88de-9dde78ad6908", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7561", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-31T08:37:42Z", "date_only": false, "value": "2024-10-31T08:37:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8935", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "2c285d87-c707-40d9-bc36-835e6d9ebe26", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8935", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-31T08:38:00Z", "date_only": false, "value": "2024-10-31T08:38:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24234", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "8bbda203-77b5-471b-9e3b-12f856dc0de2", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24234", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-31T08:38:00Z", "date_only": false, "value": "2024-10-31T08:38:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/593", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "0e78e187-569f-4714-b2f5-e1fe9c70308c", "content": "Tools - Hackers Factory \n\nAwesome MXSS\n\nhttps://github.com/msrkp/MXSS\n\nA comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.\n\nhttps://github.com/djadmin/awesome-bug-bounty\n\nMulti-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart\n\nhttps://github.com/OffXec/brutecms\n\nCobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc\n\nhttps://github.com/wumb0/rust_bof\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension\n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nMaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection\n\nhttps://github.com/MaLDAPtive/Invoke-Maldaptive\n\nA Python static code analyzer that finds complex, remotely exploitable vulnerabilities powered by Claude.\n\nhttps://github.com/protectai/vulnhuntr\n\ndump Chrome cookies remotely with atexec and CDP\n\nhttps://github.com/zimnyaa/remotechrome\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/593", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-01T04:23:04Z", "date_only": false, "value": "2024-11-01T04:23:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1134", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "1c6a10f9-bfb2-430d-9a20-8eadb9e0afe1", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1134", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-01T04:43:04Z", "date_only": false, "value": "2024-11-01T04:43:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7569", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "e1e4a96f-d9a6-491f-b987-02e6082788b4", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7569", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-01T04:43:04Z", "date_only": false, "value": "2024-11-01T04:43:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8943", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "11d50918-c98d-485e-bde9-ff252478c6f4", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8943", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-01T04:43:11Z", "date_only": false, "value": "2024-11-01T04:43:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24248", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "541cf5af-2a7a-4752-8606-a7868d22b0a2", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24248", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-01T04:43:11Z", "date_only": false, "value": "2024-11-01T04:43:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/601", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "04866ad9-bc62-43f7-a496-542098023d96", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/601", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-01T05:23:04Z", "date_only": false, "value": "2024-11-01T05:23:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3840", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "04823cde-9cdc-41fd-b037-a7e33d2cf08a", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3840", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-01T23:00:00Z", "date_only": false, "value": "2024-12-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-12-01T23:00:00Z", "date_only": false, "value": "2024-12-01T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-02T11:34:10.279Z", "date_only": false, "value": "2024-12-02T11:34:10.279+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1353", "record": "WID-SEC-W-2024-1353", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-14T18:59:21.278Z", "date_only": false, "value": "2025-03-14T18:59:21.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-5836", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-14T18:59:21.278Z", "date_only": false, "value": "2025-03-14T18:59:21.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5836", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-14T19:45:08Z", "date_only": false, "value": "2025-03-14T19:45:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7639", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "ce0dc9ba-6229-425f-93cc-973b10bf6459", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5836\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)\n\ud83d\udccf Published: 2024-06-11T20:58:10.427Z\n\ud83d\udccf Modified: 2025-03-14T18:59:21.278Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html\n2. https://issues.chromium.org/issues/341875171\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/", "url": "https://t.me/DarkWebInformer_CVEAlerts/7639"}, {"timestamp": "2026-06-17T08:16:44.853Z", "date_only": false, "value": "2026-06-17T08:16:44.853", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5836", "record": "FKIE_CVE-2024-5836", "field": "lastModified"}, {"timestamp": "2026-07-21T13:00:06.919Z", "date_only": false, "value": "2026-07-21T13:00:06.919930Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/508", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "7da44f5a-1154-421b-b335-2d81fd73ceab", "content": "\u2744 Escaping the Chrome Sandbox Through DevTools.\n\nhttps://ading.dev/blog/posts/chrome_sandbox_escape.html\n\n\ud83d\udcf1 A POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension.\n\nhttps://github.com/ading2210/CVE-2024-6778-POC", "url": "https://t.me/ckuRED/508", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T19:48:51Z", "date_only": false, "value": "2026-09-20T19:48:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0204-1", "record": "OPENSUSE-SU-2024:0204-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:48:51Z", "date_only": false, "value": "2026-09-20T19:48:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0204-1", "record": "OPENSUSE-SU-2024:0204-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:48:53Z", "date_only": false, "value": "2026-09-20T19:48:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0205-1", "record": "OPENSUSE-SU-2024:0205-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:48:53Z", "date_only": false, "value": "2026-09-20T19:48:53Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0205-1", "record": "OPENSUSE-SU-2024:0205-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:49:06Z", "date_only": false, "value": "2026-09-20T19:49:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0223-1", "record": "OPENSUSE-SU-2024:0223-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:49:06Z", "date_only": false, "value": "2026-09-20T19:49:06Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0223-1", "record": "OPENSUSE-SU-2024:0223-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:14:09Z", "date_only": false, "value": "2026-09-20T21:14:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14122-1", "record": "OPENSUSE-SU-2024:14122-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:14:09Z", "date_only": false, "value": "2026-09-20T21:14:09Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14122-1", "record": "OPENSUSE-SU-2024:14122-1", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-28T13:28:21.704Z", "anchors": {"origin": {"timestamp": "2024-06-11T20:58:10.427Z", "date_only": false, "value": "2024-06-11T20:58:10.427Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-06-11T20:58:10.427Z", "date_only": false, "value": "2024-06-11T20:58:10.427Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-10-17T05:21:34Z", "date_only": false, "value": "2024-10-17T05:21:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8764", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "dd7d186a-31c1-4bcb-a6d6-814065c6fd2c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension. \nURL\uff1ahttps://github.com/ading2210/CVE-2024-6778-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8764", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 11003003.573, "hours": 3056.389881388889, "days": 127.3495783912037, "min_seconds": 11003003.573, "max_seconds": 11003003.573, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-06-11T20:58:10.427Z", "date_only": false, "value": "2024-06-11T20:58:10.427Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-10-17T05:21:34Z", "date_only": false, "value": "2024-10-17T05:21:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8764", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "dd7d186a-31c1-4bcb-a6d6-814065c6fd2c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension. \nURL\uff1ahttps://github.com/ading2210/CVE-2024-6778-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8764", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 75054611.27792, "hours": 20848.503132755555, "days": 868.6876305314814, "min_seconds": 75054611.27792, "max_seconds": 75054611.27792, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-06-11T20:58:10.427Z", "date_only": false, "value": "2024-06-11T20:58:10.427Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T13:28:21.704Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 64051607.70492, "hours": 17792.113251366667, "days": 741.3380521402778, "min_seconds": 64051607.70492, "max_seconds": 64051607.70492, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-17T05:21:34Z", "date_only": false, "value": "2024-10-17T05:21:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8764", "record": "CVE-2024-5836", "field": "creation_timestamp", "uuid": "dd7d186a-31c1-4bcb-a6d6-814065c6fd2c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension. \nURL\uff1ahttps://github.com/ading2210/CVE-2024-6778-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8764", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T13:28:21.704Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}