{"metadata": {"vulnerability": "CVE-2024-5932", "count": 78, "kinds": {"milestone": 4, "sighting": 65, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-06-12T20:03:22.687Z", "date_only": false, "value": "2024-06-12T20:03:22.687Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-5932", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-19T13:55:41Z", "date_only": false, "value": "2024-08-19T13:55:41.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-5932", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-08-20T02:03:16.108Z", "date_only": false, "value": "2024-08-20T02:03:16.108Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5932", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-20T02:15:04Z", "date_only": false, "value": "2024-08-20T02:15:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V25R-H42W-J2VQ", "record": "GHSA-V25R-H42W-J2VQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-20T02:15:04.240Z", "date_only": false, "value": "2024-08-20T02:15:04.240", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5932", "record": "FKIE_CVE-2024-5932", "field": "published"}, {"timestamp": "2024-08-20T03:32:24Z", "date_only": false, "value": "2024-08-20T03:32:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V25R-H42W-J2VQ", "record": "GHSA-V25R-H42W-J2VQ", "field": "published"}, {"timestamp": "2024-08-20T04:34:57Z", "date_only": false, "value": "2024-08-20T04:34:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/3590", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "9143df08-768c-4d7d-94dc-d11406efbed1", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5932 - GiveWP - PHP Object Injection and Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5932 \nPublished : Aug. 20, 2024, 2:15 a.m. | 17\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/3590"}, {"timestamp": "2024-08-20T13:04:10Z", "date_only": false, "value": "2024-08-20T13:04:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/10628", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "ead84567-ebbd-4c46-b7ae-9c0a24b58d21", "content": "\u200aCVE-2024-5932 (CVSS 10): Critical RCE Vulnerability Impacts 100k+ WordPress Sites\n\nhttps://securityonline.info/cve-2024-5932-cvss-10-critical-rce-vulnerability-impacts-100k-wordpress-sites/", "url": "https://t.me/HackingInsights/10628"}, {"timestamp": "2024-08-20T13:40:06.546Z", "date_only": false, "value": "2024-08-20T13:40:06.546669Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5932", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-20T13:40:06.546Z", "date_only": false, "value": "2024-08-20T13:40:06.546669Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5932", "record": "FKIE_CVE-2024-5932", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-20T13:40:12.334Z", "date_only": false, "value": "2024-08-20T13:40:12.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5932", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-20T18:01:05Z", "date_only": false, "value": "2024-08-20T18:01:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6114", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "596d7ef6-1058-4dae-b822-999488296281", "content": "Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GiveWP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0443\u0433\u0440\u043e\u0436\u0430\u044f \u0431\u043e\u043b\u0435\u0435 100\u00a0000 \u0441\u0430\u0439\u0442\u0430\u043c WordPress.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-5932 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10/10, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0441\u043e\u0431\u043e\u0439 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 give_title.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c PHP-\u043e\u0431\u044a\u0435\u043a\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 POP (Property Oriented Programming) \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043b\u0438 \u043e\u043d\u0438 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043f\u043e\u0441\u0442\u0430 give_title.\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435, \u0442\u0430\u043a\u0443\u044e \u043a\u0430\u043a \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 give_title.\n\n\u0417\u0430\u0442\u0435\u043c \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u043e\u0439 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0438 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u0430, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0441\u0430\u0439\u0442\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0432 \u0435\u0433\u043e, \u0435\u0441\u043b\u0438 \u043e\u043d \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442 \u0435\u0433\u043e \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u0439\u0441\u044f \u043f\u043e\u0434 \u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 GiveWP \u0432\u0435\u0440\u0441\u0438\u0438 3.14.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c 3.14.2.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "url": "https://t.me/true_secator/6114"}, {"timestamp": "2024-08-21T07:42:25Z", "date_only": false, "value": "2024-08-21T07:42:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KomunitiSiber/2434", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "1ebca40f-f27d-42ae-af22-5c9e029ad866", "content": "GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\nhttps://thehackernews.com/2024/08/givewp-wordpress-plugin-vulnerability.html\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "url": "https://t.me/KomunitiSiber/2434"}, {"timestamp": "2024-08-21T08:31:34Z", "date_only": false, "value": "2024-08-21T08:31:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Kelvinseccommunity/756", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "82740f6c-c33a-4bb2-ac8f-78066f538bec", "content": "GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\nhttps://thehackernews.com/2024/08/givewp-wordpress-plugin-vulnerability.html\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "url": "https://t.me/Kelvinseccommunity/756"}, {"timestamp": "2024-08-21T08:32:18Z", "date_only": false, "value": "2024-08-21T08:32:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Blackhat_Officials/1389", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "577eff15-95bb-470a-af9f-ca6fd6a28d6f", "content": "GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\nhttps://thehackernews.com/2024/08/givewp-wordpress-plugin-vulnerability.html\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "url": "https://t.me/Blackhat_Officials/1389"}, {"timestamp": "2024-08-21T09:48:51Z", "date_only": false, "value": "2024-08-21T09:48:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/18359", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "62347aa9-1796-459f-95aa-410273a3c18b", "content": "The Hacker News\nGiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "url": "https://t.me/tengkorakcybercrewz/18359"}, {"timestamp": "2024-08-21T09:48:51Z", "date_only": false, "value": "2024-08-21T09:48:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/3666", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "f7f6e429-213f-47fd-8530-023fa42f0212", "content": "The Hacker News\nGiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "url": "https://t.me/tengkorakcybercrewz/3666"}, {"timestamp": "2024-08-21T09:48:51Z", "date_only": false, "value": "2024-08-21T09:48:51.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/n1cKpTo1YZG03Fp2_v6aVF95dfI4Hw-1TtYepzj3seBijw", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "475eafc1-21bb-4619-b86d-401e183dd91e"}, {"timestamp": "2024-08-21T10:00:49Z", "date_only": false, "value": "2024-08-21T10:00:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ILyJ6K1ycSMNbsG96eFJPNoFRNMf6drptEVPTG6COjbL3w", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "66489c57-eede-479a-ab16-fc4f76ea99eb"}, {"timestamp": "2024-08-25T12:00:03Z", "date_only": false, "value": "2024-08-25T12:00:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8363", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "f41f0832-9134-417e-941a-1f6f864d84b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for CVE-2024-5932\nURL\uff1ahttps://github.com/EQSTSeminar/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8363"}, {"timestamp": "2024-08-26T21:30:32Z", "date_only": false, "value": "2024-08-26T21:30:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V25R-H42W-J2VQ", "record": "GHSA-V25R-H42W-J2VQ", "field": "modified"}, {"timestamp": "2024-08-28T00:33:04Z", "date_only": false, "value": "2024-08-28T00:33:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8385", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "b14b6855-3166-49e6-85e2-56c57cb9651f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/niktoproject/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8385"}, {"timestamp": "2024-08-28T00:37:13Z", "date_only": false, "value": "2024-08-28T00:37:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8386", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "6102f699-62ba-46db-a6ff-e973509132e2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932 \nURL\uff1ahttps://github.com/sqlmap-projects/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8386"}, {"timestamp": "2024-08-28T09:59:57Z", "date_only": false, "value": "2024-08-28T09:59:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8392", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "37b0956f-21e5-4d57-8613-6c19a055609c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/EQSTLab/CVE-2024-5932-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8392"}, {"timestamp": "2024-08-28T10:21:46Z", "date_only": false, "value": "2024-08-28T10:21:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8394", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "fc0c68d6-c851-4113-9e69-3ab80f484315", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/EQSTLab/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8394"}, {"timestamp": "2024-08-28T20:39:04Z", "date_only": false, "value": "2024-08-28T20:39:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_givewp_rce.rb", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "4b091db4-2e8c-4b65-af7d-243eb7ab7073", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_givewp_rce.rb"}, {"timestamp": "2024-08-29T12:18:16Z", "date_only": false, "value": "2024-08-29T12:18:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2251", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "c5d224a3-9d25-4614-a651-d68df64f1bcd", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "url": "https://t.me/proxy_bar/2251"}, {"timestamp": "2024-08-29T12:35:29Z", "date_only": false, "value": "2024-08-29T12:35:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/192", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "8bb1cbf9-8de4-4d67-bddc-7d8fb5acc505", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "url": "https://t.me/hackingbra/192"}, {"timestamp": "2024-08-29T12:43:57Z", "date_only": false, "value": "2024-08-29T12:43:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/231", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "9cf4bda7-c135-4164-8045-f83741438796", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "url": "https://t.me/HackerArsenal/231"}, {"timestamp": "2024-08-30T06:50:06Z", "date_only": false, "value": "2024-08-30T06:50:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4257", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "3237513e-6b82-48ff-9be3-189424f58e21", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/Rootsec_2/4257"}, {"timestamp": "2024-08-30T12:27:54Z", "date_only": false, "value": "2024-08-30T12:27:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/softrinx/146844", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "d4fe21f6-76e8-4a91-9bca-ca49ef37eb29", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "url": "https://t.me/softrinx/146844"}, {"timestamp": "2024-08-30T12:27:54Z", "date_only": false, "value": "2024-08-30T12:27:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/softrinx/477", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "59b8a5b1-21a3-4602-a7c7-94175bd2c62f", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "url": "https://t.me/softrinx/477"}, {"timestamp": "2024-08-30T16:51:16Z", "date_only": false, "value": "2024-08-30T16:51:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11054", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "6d84aca9-ff5c-410f-be01-aa00b459a506", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/CyberSecurityTechnologies/11054"}, {"timestamp": "2024-08-30T18:56:36Z", "date_only": false, "value": "2024-08-30T18:56:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/233", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "9058530a-c71a-4c6a-a083-60babbabeab7", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/HackerArsenal/233"}, {"timestamp": "2024-08-30T20:36:47Z", "date_only": false, "value": "2024-08-30T20:36:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4261", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "d42e30ec-a7f5-4f43-8519-292525124273", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/Rootsec_2/4261"}, {"timestamp": "2024-09-06T08:08:13Z", "date_only": false, "value": "2024-09-06T08:08:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qZM0NNijhQe30uI1HDidP8z9iH_9o-A7s4eoxr8GKg4wvWY", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "1792133a-3a1f-465c-91b3-ab1cadabf35f"}, {"timestamp": "2024-09-10T04:26:45Z", "date_only": false, "value": "2024-09-10T04:26:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8321", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "3755fd2e-f265-4a88-92c7-4b126d1de423", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932  GiveWP PHP Object Injection \nURL\uff1ahttps://github.com/0xb0mb3r/CVE-2024-5932-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8321"}, {"timestamp": "2024-09-22T10:37:56Z", "date_only": false, "value": "2024-09-22T10:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bads_community/1453", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "d4950a8c-fe10-4c90-8860-e29367c1786a", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "url": "https://t.me/bads_community/1453"}, {"timestamp": "2024-09-22T10:37:56Z", "date_only": false, "value": "2024-09-22T10:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bads_community/39028", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "6425a32b-70eb-4f09-8887-d8bca04b281a", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "url": "https://t.me/bads_community/39028"}, {"timestamp": "2024-09-22T10:37:56Z", "date_only": false, "value": "2024-09-22T10:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/mad_hackers_community/352", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "0e3ae017-7e07-494f-9f59-ee49e182c6dc", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "url": "https://t.me/mad_hackers_community/352"}, {"timestamp": "2024-09-22T10:37:56Z", "date_only": false, "value": "2024-09-22T10:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/six5zeroexploit/68", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "84779110-142d-4b76-be2d-fb172d798f5a", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "url": "https://t.me/six5zeroexploit/68"}, {"timestamp": "2024-09-24T10:01:15Z", "date_only": false, "value": "2024-09-24T10:01:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/8585", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "80b092fc-712d-498c-a8ae-a6f9a1f4a491", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/l8BL/CVE-2024-47066\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8585"}, {"timestamp": "2024-09-25T05:16:47Z", "date_only": false, "value": "2024-09-25T05:16:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/436", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "36c1f778-0573-437c-90b4-9ef76b4b56ef", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/l8BL/CVE-2024-47066\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/HackerArsenal/436"}, {"timestamp": "2024-09-27T18:49:57Z", "date_only": false, "value": "2024-09-27T18:49:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/26m3io3CxIbSducaPZiRB4zkX9wxvv0W5PpBovFhQPHDAmA", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "96c44071-6ad0-4f3b-9721-99537c8253bd"}, {"timestamp": "2024-09-28T05:17:09Z", "date_only": false, "value": "2024-09-28T05:17:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/6592", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "f955e580-b874-4f3c-990f-72332e95051b", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8353 - GiveWP PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-8353 \nPublished : Sept. 28, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1 via deserialization of untrusted input via several parameters like 'give_title' and 'card_address'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files and achieve remote code execution. This is essentially the same vulnerability as CVE-2024-5932, however, it was discovered the the presence of stripslashes_deep on user_info allows the is_serialized check to be bypassed. This issue was mostly patched in 3.16.1, but further hardening was added in 3.16.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/6592"}, {"timestamp": "2024-10-05T11:03:44Z", "date_only": false, "value": "2024-10-05T11:03:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlackHat0Hackers/3534", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "3c3b128b-6b85-4f16-b5b6-b110dd749ec9", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "url": "https://t.me/BlackHat0Hackers/3534"}, {"timestamp": "2024-10-11T08:02:19Z", "date_only": false, "value": "2024-10-11T08:02:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Team_Dot33/692", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "26595a07-244b-4af0-a53d-aa58a4c649a8", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "url": "https://t.me/Team_Dot33/692"}, {"timestamp": "2024-10-11T10:01:41Z", "date_only": false, "value": "2024-10-11T10:01:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WAVpI_mJxo3wUBY2hzto7NtUeqMIoVhFYJC69arERR2U", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "cae78400-e826-42d7-b8aa-fc765a3002f7"}, {"timestamp": "2024-10-11T12:24:11Z", "date_only": false, "value": "2024-10-11T12:24:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hitshare/2809", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "0420d36c-c7c7-441b-84c0-6ad67898a895", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)", "url": "https://t.me/hitshare/2809"}, {"timestamp": "2024-10-15T13:19:05Z", "date_only": false, "value": "2024-10-15T13:19:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WgpEig7cHbSwl6zO84Cy6KIpQtYjfwm8moSVfjTLyb9KLu9O", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "38ccf8ca-65e5-4c1c-9562-e56b0785a8c0"}, {"timestamp": "2024-10-16T23:31:10Z", "date_only": false, "value": "2024-10-16T23:31:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/malwarezh/24", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "a67f7f59-9e01-4517-86d3-c762c2bcdea0", "content": "#WordPress #GiveWP POP to RCE (#CVE-2024-5932 CVSS 10)\n\nThe GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files.\n\nPOC: https://github.com/EQSTSeminar/CVE-2024-5932\n\nSearch Query:\nHUNTER:  web.body=\"/wp-content/plugins/give\"\n\n\n========================\n\ud83c\udf10 Owner: @z3xrin \u2705\n\ud83c\udf10 Channel: @Malwarezh \n========================", "url": "https://t.me/malwarezh/24"}, {"timestamp": "2024-12-07T01:55:47Z", "date_only": false, "value": "2024-12-07T01:55:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/six5zeroexploit/93", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "607f27e9-ee16-41dc-8238-bde3dc7f3da5", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "url": "https://t.me/six5zeroexploit/93"}, {"timestamp": "2024-12-07T01:56:14Z", "date_only": false, "value": "2024-12-07T01:56:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bads_group/76166", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "582cefd8-f456-4ddb-b9b4-726246c80418", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "url": "https://t.me/bads_group/76166"}, {"timestamp": "2024-12-07T01:56:17Z", "date_only": false, "value": "2024-12-07T01:56:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bads_community/1603", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "94665010-e3a6-4bef-870d-918ca2a46c73", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "url": "https://t.me/bads_community/1603"}, {"timestamp": "2024-12-07T01:56:17Z", "date_only": false, "value": "2024-12-07T01:56:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bads_community/76167", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "142ba79b-79ba-4339-ad17-ff5907c0882a", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "url": "https://t.me/bads_community/76167"}, {"timestamp": "2024-12-07T01:56:17Z", "date_only": false, "value": "2024-12-07T01:56:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/mad_hackers_community/440", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "4e56be7d-d502-4ddc-8e40-359db9fe3d0f", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "url": "https://t.me/mad_hackers_community/440"}, {"timestamp": "2024-12-07T17:48:16Z", "date_only": false, "value": "2024-12-07T17:48:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/oxlogs/24", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "4d5caed4-d8a0-4a5d-b5cb-b4053472d1f3", "url": "https://t.me/oxlogs/24"}, {"timestamp": "2024-12-09T15:43:12Z", "date_only": false, "value": "2024-12-09T15:43:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TF8Vs6bNYDBC4FvfJA4wAxk-gnvDesrZRCD6Q4ejnVeW_ys", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "529c0c64-a45a-4a97-b35c-bf1c1f991ba9"}, {"timestamp": "2024-12-09T15:44:13Z", "date_only": false, "value": "2024-12-09T15:44:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6H4jcUE95EKXzm1YwE2bwqiF3BXGONJMZD9T_2IZ_846HqY", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "39195341-0e8a-4055-ab42-a2b481afe412"}, {"timestamp": "2024-12-09T16:43:12Z", "date_only": false, "value": "2024-12-09T16:43:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fHkb0CM1FzFAB8xBTZyHf3gn0Hu7gob4-PsX9T3gFkP-8Qga", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "d1132acf-4243-4044-920b-dfab03359508"}, {"timestamp": "2024-12-09T16:43:12Z", "date_only": false, "value": "2024-12-09T16:43:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oLGdsO7OYb3TfdUbQH0jy-A5TJwt4fzzmjTGX3o2dA-Cl_QbbQ", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "f1415aa8-e633-4c7d-9b92-c308636656b0"}, {"timestamp": "2024-12-09T16:44:13Z", "date_only": false, "value": "2024-12-09T16:44:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EZddkYqkboEk0cmGuSOX9VuQrZaciDyyzWDWEZuPrcby3jeK", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "1a9a3017-cff8-4062-9087-8c58786009fa"}, {"timestamp": "2024-12-13T17:48:29Z", "date_only": false, "value": "2024-12-13T17:48:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9411", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "a331cbef-2525-49a1-a6fe-4cc48145cd02", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932  GiveWP PHP Object Injection \nURL\uff1ahttps://github.com/TAM-K592/CVE-2024-53677-S2-067\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9411"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "875d5968-5c14-452b-a42b-721c6f1f99e2"}, {"timestamp": "2025-02-23T04:11:05Z", "date_only": false, "value": "2025-02-23T04:11:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "26e0f959-7f5a-4c4d-aa9b-31943d21259a"}, {"timestamp": "2025-02-28T20:06:20Z", "date_only": false, "value": "2025-02-28T20:06:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/jaredfolkins/600cb7daa0be7c977443205c2d073615", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "a67bca21-70cc-41ad-bfa7-26047ba24057", "url": "https://gist.github.com/jaredfolkins/600cb7daa0be7c977443205c2d073615"}, {"timestamp": "2025-03-27T21:02:07.333Z", "date_only": false, "value": "2025-03-27T21:02:07.333310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zvzj52p", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "4298ec70-1fca-4ec1-aadd-1e4c0d9a5be1", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zvzj52p"}, {"timestamp": "2025-05-04T07:31:22Z", "date_only": false, "value": "2025-05-04T07:31:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber_hsecurity/4439", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "7c8cfe20-e484-48bd-aa85-cd996135de83", "url": "https://t.me/cyber_hsecurity/4439"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "2b2eb85c-66dd-4885-be40-695b6375d391"}, {"timestamp": "2025-11-05T09:00:05Z", "date_only": false, "value": "2025-11-05T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/D5Tu51kSkXbo-9bxr-qOR_ZOPzuIV30YFNBGrLAWHGZFmmE", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "4a3a0802-3f15-4783-870a-a98af12790a1"}, {"timestamp": "2026-04-08T17:09:47.033Z", "date_only": false, "value": "2026-04-08T17:09:47.033Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-5932", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:09:47.033Z", "date_only": false, "value": "2026-04-08T17:09:47.033Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-5932", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:16:56.563Z", "date_only": false, "value": "2026-06-17T08:16:56.563", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5932", "record": "FKIE_CVE-2024-5932", "field": "lastModified"}, {"timestamp": "2026-07-06T11:00:05.137Z", "date_only": false, "value": "2026-07-06T11:00:05.137737Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/303", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "4a57c71c-6d9c-498f-9e94-d6c839cc44e4", "content": "\u041f\u043b\u0430\u0433\u0438\u043d GiveWP \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0444\u0430\u043d\u0434\u0440\u0430\u0439\u0437\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439\n\n\ud83d\udd24 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GiveWP \u0434\u043b\u044f WordPress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u2620\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5932) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442 PHP \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 give_title. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u044d\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043d\u043e \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u26a1\ufe0f \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 give_process_donation_form(), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0439. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.14.2 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #WordPressSecurity #RCEAlert #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/303"}, {"timestamp": "2026-08-04T13:00:25.792Z", "date_only": false, "value": "2026-08-04T13:00:25.792841Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/230", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "6f018288-d9c8-4ee1-9043-5ad01e52a54d", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Giveback \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 WordPress \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a RCE \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c GiveWP (CVE-2024-5932 \u0438 PoC) \u27a1\ufe0f\u041f\u043e\u043f\u0430\u0434\u0430\u0435\u043c \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 Kubernetes pod, \u0447\u0435\u0440\u0435\u0437 env \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d pod - LEGACY_INTRANET_SERVICE \u27a1\ufe0f CVE-2024-4577 \u0432 PHP-CGI \u0432\u0442\u043e\u0440\u043e\u0433\u043e pod'\u0430 (Advisory from famous researcher Orange Tsai)  \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c jwt-token \u0438\u0437 /var/run/secrets/kubernetes.io/serviceaccount \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 K8s API \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \"\u0441\u0435\u043a\u0440\u0435\u0442\u044b\" \u0441 https://$APISERVER/api/v1/namespaces/default/secrets \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043f\u043e SSH \u043a \u0445\u043e\u0441\u0442\u0443 \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 custom runc wrapper (CVE-2024-21626, \u0438\u043d\u0444\u043e \u043f\u043e \u0431\u0430\u0433\u0435)\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Giveback, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\n\u041f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043a\u0430 \u043f\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f uv:\ngit clone https://github.com/EQSTLab/CVE-2024-5932.git\ncd CVE-2024-5932/\nuv add --script CVE-2024-5932-rce.py -r requirements.txt\nuv run CVE-2024-5932-rce.py --help\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs #CVE_2024_5932 #CVE_2024_21626 #CVE_2024_4577", "url": "https://t.me/bagl3y_notes/230"}, {"timestamp": "2026-08-04T13:00:25.975Z", "date_only": false, "value": "2026-08-04T13:00:25.975100Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/174", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "22d1aa96-669c-4647-a8b2-5e51e3818952", "content": "\ud83d\udcac Season 9 Giveback Attack Chain:\n\n#\ufe0f\u20e3 Initial:\n\ud83d\udd34CVE-2024-5932\npython3 CVE-2024-5932-rce.py -u \"http://giveback.htb/donations/the-things-we-need/\" -c \"COMMAND_HERE\" 2>&1 \n\ud83d\udd34\u0421\u043c\u043e\u0442\u0440\u0438\u043c env, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438\n#\ufe0f\u20e3 Internal:\n\ud83d\udd34CVE-2024-4577 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0435, \u0432\u044b\u0432\u043e\u0434\u0438\u043c back-connect \u043a \u0441\u0435\u0431\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\n\ud83d\udd34\u0418\u0437\u0443\u0447\u0430\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 /run/secrets/kubernetes.io/serviceaccount, \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 api \u043a\u0443\u0431\u0435\u0440\u0430\n#\ufe0f\u20e3 User.txt:\n\ud83d\udd34\u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b $API_SERVER/api/v1/namespaces/$NAMESPACE/secrets\n\ud83d\udd34ssh babywyrm@giveback.htb -> and got user.txt\n#\ufe0f\u20e3 Root.txt:\n\ud83d\udd34sudo /opt/debug - runc (password reuse, \u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0441\u0442\u044c, \u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0442\u043e\u0436\u0435)\n\u0434\u0435\u043b\u0430\u0435\u043c \u0441\u0432\u043e\u0439 config.json \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\nsudo /opt/debug run --bundle /tmp/path_to_config_json name", "url": "https://t.me/bagl3y_notes/174"}, {"timestamp": "2026-08-06T00:00:39.833Z", "date_only": false, "value": "2026-08-06T00:00:39.833840Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bagl3y_notes/174", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "ebe3593e-4037-4c6f-b26f-da0caa3ee394", "content": "\ud83d\udcac Season 9 Giveback Attack Chain:\n\n#\ufe0f\u20e3 Initial:\n\ud83d\udd34CVE-2024-5932\npython3 CVE-2024-5932-rce.py -u \"http://giveback.htb/donations/the-things-we-need/\" -c \"COMMAND_HERE\" 2>&1 \n\ud83d\udd34\u0421\u043c\u043e\u0442\u0440\u0438\u043c env, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438\n#\ufe0f\u20e3 Internal:\n\ud83d\udd34CVE-2024-4577 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0435, \u0432\u044b\u0432\u043e\u0434\u0438\u043c back-connect \u043a \u0441\u0435\u0431\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\n\ud83d\udd34\u0418\u0437\u0443\u0447\u0430\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 /run/secrets/kubernetes.io/serviceaccount, \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 api \u043a\u0443\u0431\u0435\u0440\u0430\n#\ufe0f\u20e3 User.txt:\n\ud83d\udd34\u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b $API_SERVER/api/v1/namespaces/$NAMESPACE/secrets\n\ud83d\udd34ssh babywyrm@giveback.htb -> and got user.txt\n#\ufe0f\u20e3 Root.txt:\n\ud83d\udd34sudo /opt/debug - runc (password reuse, \u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0441\u0442\u044c, \u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0442\u043e\u0436\u0435)\n\u0434\u0435\u043b\u0430\u0435\u043c \u0441\u0432\u043e\u0439 config.json \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\nsudo /opt/debug run --bundle /tmp/path_to_config_json name", "url": "https://t.me/bagl3y_notes/174"}, {"timestamp": "2026-08-06T00:00:40.129Z", "date_only": false, "value": "2026-08-06T00:00:40.129125Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bagl3y_notes/230", "record": "CVE-2024-5932", "field": "creation_timestamp", "uuid": "f18a5bf8-bf43-4fc8-8ed3-7f201958d00c", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Giveback \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 WordPress \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a RCE \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c GiveWP (CVE-2024-5932 \u0438 PoC) \u27a1\ufe0f\u041f\u043e\u043f\u0430\u0434\u0430\u0435\u043c \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 Kubernetes pod, \u0447\u0435\u0440\u0435\u0437 env \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d pod - LEGACY_INTRANET_SERVICE \u27a1\ufe0f CVE-2024-4577 \u0432 PHP-CGI \u0432\u0442\u043e\u0440\u043e\u0433\u043e pod'\u0430 (Advisory from famous researcher Orange Tsai)  \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c jwt-token \u0438\u0437 /var/run/secrets/kubernetes.io/serviceaccount \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 K8s API \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \"\u0441\u0435\u043a\u0440\u0435\u0442\u044b\" \u0441 https://$APISERVER/api/v1/namespaces/default/secrets \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043f\u043e SSH \u043a \u0445\u043e\u0441\u0442\u0443 \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 custom runc wrapper (CVE-2024-21626, \u0438\u043d\u0444\u043e \u043f\u043e \u0431\u0430\u0433\u0435)\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Giveback, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\n\u041f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043a\u0430 \u043f\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f uv:\ngit clone https://github.com/EQSTLab/CVE-2024-5932.git\ncd CVE-2024-5932/\nuv add --script CVE-2024-5932-rce.py -r requirements.txt\nuv run CVE-2024-5932-rce.py --help\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs #CVE_2024_5932 #CVE_2024_21626 #CVE_2024_4577", "url": "https://t.me/bagl3y_notes/230"}]}