https://vulnerability.circl.lu/sightings/feed 2026-09-02T23:19:17.463198+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d3b9517b-2db5-477d-9c14-d84d830f4070/export 2026-09-02T23:19:17.485644+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d3b9517b-2db5-477d-9c14-d84d830f4070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27804", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/65270", "content": "\u2757Attention!\n\n\ud83d\udd77\ufe0f Critical Vulnerability Alert: CVE-2024-27804\n\nA high-severity vulnerability has been identified affecting multiple Apple operating systems, including iOS 17.5, iPadOS 17.5, tvOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. An app could potentially execute arbitrary code with kernel privileges due to an issue with memory handling.\n\n\n\ud83d\udee1\ufe0f Risk Information:\n- CVSS v2 Base Score: 9.3 (High)\n- CVSS v3 Base Score: 7.8 (High)\n\n\ud83d\udcc5 Published: 2024-05-14\n\nEnsure your systems are updated to the latest versions to mitigate this vulnerability. Stay safe and vigilant!\n\n\nPoc:\nhttps://r00tkitsmm.github.io/fuzzing/2024/05/14/anotherappleavd.html\n\nSource:\nhttps://t.me/androidMalware/2231", "creation_timestamp": "2026-07-17T00:00:56.725147Z"} 2026-07-17T00:00:56.725147+00:00 https://vulnerability.circl.lu/sighting/1f958aa2-6202-4a75-9074-e859ebbcb14d/export 2026-09-02T23:19:17.488027+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1f958aa2-6202-4a75-9074-e859ebbcb14d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27804", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/65270", "content": "\u2757Attention!\n\n\ud83d\udd77\ufe0f Critical Vulnerability Alert: CVE-2024-27804\n\nA high-severity vulnerability has been identified affecting multiple Apple operating systems, including iOS 17.5, iPadOS 17.5, tvOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. An app could potentially execute arbitrary code with kernel privileges due to an issue with memory handling.\n\n\n\ud83d\udee1\ufe0f Risk Information:\n- CVSS v2 Base Score: 9.3 (High)\n- CVSS v3 Base Score: 7.8 (High)\n\n\ud83d\udcc5 Published: 2024-05-14\n\nEnsure your systems are updated to the latest versions to mitigate this vulnerability. Stay safe and vigilant!\n\n\nPoc:\nhttps://r00tkitsmm.github.io/fuzzing/2024/05/14/anotherappleavd.html\n\nSource:\nhttps://t.me/androidMalware/2231", "creation_timestamp": "2026-07-16T07:00:05.126321Z"} 2026-07-16T07:00:05.126321+00:00 https://vulnerability.circl.lu/sighting/26677c6e-4a97-4c84-885b-b95534afbe1c/export 2026-09-02T23:19:17.488289+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "26677c6e-4a97-4c84-885b-b95534afbe1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27804", "type": "published-proof-of-concept", "source": "Telegram/5nlZH64eaSc0VQABOHbEN1dSuLCYM7OSflTdmvExHj6zgtE", "content": "", "creation_timestamp": "2025-08-01T21:00:04.000000Z"} 2025-08-01T21:00:04+00:00 https://vulnerability.circl.lu/sighting/05031cbb-3f7b-418b-b569-ac071e473cc1/export 2026-09-02T23:19:17.488487+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "05031cbb-3f7b-418b-b569-ac071e473cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27808", "type": "published-proof-of-concept", "source": "Telegram/XQnuNd5X8XmOjKF9F0Yu3FlXocPy2dUR7xXCx3NP2hXIbzk", "content": "", "creation_timestamp": "2025-04-26T23:00:05.000000Z"} 2025-04-26T23:00:05+00:00 https://vulnerability.circl.lu/sighting/abb09d61-48f0-4447-8733-aa084376ea70/export 2026-09-02T23:19:17.488640+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "abb09d61-48f0-4447-8733-aa084376ea70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27803", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8739", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-27803\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to share items from the lock screen.\n\ud83d\udccf Published: 2024-05-13T23:00:49.678Z\n\ud83d\udccf Modified: 2025-03-25T18:53:36.173Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214101\n2. http://seclists.org/fulldisclosure/2024/May/10\n3. https://support.apple.com/kb/HT214101", "creation_timestamp": "2025-03-25T19:24:52.000000Z"} 2025-03-25T19:24:52+00:00 https://vulnerability.circl.lu/sighting/f242cdbb-6215-496b-aa83-dc5f38644068/export 2026-09-02T23:19:17.488755+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f242cdbb-6215-496b-aa83-dc5f38644068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27809", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7443", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-27809\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.\n\ud83d\udccf Published: 2024-07-29T22:16:27.629Z\n\ud83d\udccf Modified: 2025-03-13T17:34:38.561Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214084\n2. https://support.apple.com/kb/HT214084", "creation_timestamp": "2025-03-13T17:44:57.000000Z"} 2025-03-13T17:44:57+00:00 https://vulnerability.circl.lu/sighting/edc63e6b-74b5-42a2-9aa2-91d108084b44/export 2026-09-02T23:19:17.488851+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "edc63e6b-74b5-42a2-9aa2-91d108084b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2780", "type": "seen", "source": "Telegram/BvmUL_GGWqwZSMAWmjRsiWRRgKsLuC2DqA-nbbT0On2mJL_N", "content": "", "creation_timestamp": "2025-02-20T23:26:56.000000Z"} 2025-02-20T23:26:56+00:00 https://vulnerability.circl.lu/sighting/4a1a39f5-c559-44c7-88b6-12f2665755e6/export 2026-09-02T23:19:17.488944+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4a1a39f5-c559-44c7-88b6-12f2665755e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27804", "type": "published-proof-of-concept", "source": "https://t.me/androidMalware/2231", "content": "PoC for CVE-2024-27804, an iOS/macOS kernel vulnerability that leads to the execution of arbitrary code with kernel privileges\nhttps://r00tkitsmm.github.io/fuzzing/2024/05/14/anotherappleavd.html", "creation_timestamp": "2024-07-18T15:29:53.000000Z"} 2024-07-18T15:29:53+00:00 https://vulnerability.circl.lu/sighting/3f3a0cf5-c67d-406b-8b1e-5a4f6c917512/export 2026-09-02T23:19:17.489036+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3f3a0cf5-c67d-406b-8b1e-5a4f6c917512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27804", "type": "published-proof-of-concept", "source": "Telegram/E-NmoXvwttOQN14B2mJ97Ba90cgrfjuuWmvcO4iAL_DjChs", "content": "", "creation_timestamp": "2024-06-22T20:59:13.000000Z"} 2024-06-22T20:59:13+00:00 https://vulnerability.circl.lu/sighting/6b88a549-0a29-4061-b2de-dda5a6b76b52/export 2026-09-02T23:19:17.489136+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6b88a549-0a29-4061-b2de-dda5a6b76b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27801", "type": "seen", "source": "https://t.me/GrayHatsHack/7986", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "creation_timestamp": "2024-06-18T09:34:50.000000Z"} 2024-06-18T09:34:50+00:00