https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 31 May 2026 17:34:32 +0000 https://vulnerability.circl.lu/sighting/42593b67-e806-4f4f-beab-8de60bcbec4d/export {"uuid": "42593b67-e806-4f4f-beab-8de60bcbec4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11647", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T15:36:02.000000Z"} {"uuid": "42593b67-e806-4f4f-beab-8de60bcbec4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11647", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T15:36:02.000000Z"} https://vulnerability.circl.lu/sighting/42593b67-e806-4f4f-beab-8de60bcbec4d/export Mon, 06 Jan 2025 15:36:02 +0000 https://vulnerability.circl.lu/sighting/6a07a527-c17e-4952-a936-f70654752ae9/export {"uuid": "6a07a527-c17e-4952-a936-f70654752ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/313", "content": "https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/\n\nDelinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)\n#\u5206\u6790", "creation_timestamp": "2025-01-13T09:16:53.000000Z"} {"uuid": "6a07a527-c17e-4952-a936-f70654752ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/313", "content": "https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/\n\nDelinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)\n#\u5206\u6790", "creation_timestamp": "2025-01-13T09:16:53.000000Z"} https://vulnerability.circl.lu/sighting/6a07a527-c17e-4952-a936-f70654752ae9/export Mon, 13 Jan 2025 09:16:53 +0000 https://vulnerability.circl.lu/sighting/882363bf-9893-4906-b339-ffb127685a39/export {"uuid": "882363bf-9893-4906-b339-ffb127685a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12904", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrq7qw42c", "content": "", "creation_timestamp": "2025-02-11T02:18:06.097698Z"} {"uuid": "882363bf-9893-4906-b339-ffb127685a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12904", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrq7qw42c", "content": "", "creation_timestamp": "2025-02-11T02:18:06.097698Z"} https://vulnerability.circl.lu/sighting/882363bf-9893-4906-b339-ffb127685a39/export Tue, 11 Feb 2025 02:18:06 +0000 https://vulnerability.circl.lu/sighting/411d3318-9414-4069-99ab-867cd422caf9/export {"uuid": "411d3318-9414-4069-99ab-867cd422caf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12909", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhhpay72m", "content": "", "creation_timestamp": "2025-03-20T11:40:31.436223Z"} {"uuid": "411d3318-9414-4069-99ab-867cd422caf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12909", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhhpay72m", "content": "", "creation_timestamp": "2025-03-20T11:40:31.436223Z"} https://vulnerability.circl.lu/sighting/411d3318-9414-4069-99ab-867cd422caf9/export Thu, 20 Mar 2025 11:40:31 +0000 https://vulnerability.circl.lu/sighting/9031fac4-2464-40d7-8b45-e8b2bf7a1a80/export {"uuid": "9031fac4-2464-40d7-8b45-e8b2bf7a1a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-pq67-2wwv-3xjx", "content": "", "creation_timestamp": "2025-03-27T18:31:28.000000Z"} {"uuid": "9031fac4-2464-40d7-8b45-e8b2bf7a1a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-pq67-2wwv-3xjx", "content": "", "creation_timestamp": "2025-03-27T18:31:28.000000Z"} https://vulnerability.circl.lu/sighting/9031fac4-2464-40d7-8b45-e8b2bf7a1a80/export Thu, 27 Mar 2025 18:31:28 +0000 https://vulnerability.circl.lu/sighting/3482f9a0-7547-4280-b07a-2742c57e9621/export {"uuid": "3482f9a0-7547-4280-b07a-2742c57e9621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cvedetector/21321", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-12905 - \"Tar-fs Path Traversal Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-12905 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. \n \nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:09:52.000000Z"} {"uuid": "3482f9a0-7547-4280-b07a-2742c57e9621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cvedetector/21321", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-12905 - \"Tar-fs Path Traversal Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-12905 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. \n \nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:09:52.000000Z"} https://vulnerability.circl.lu/sighting/3482f9a0-7547-4280-b07a-2742c57e9621/export Thu, 27 Mar 2025 19:09:52 +0000 https://vulnerability.circl.lu/sighting/22f10a61-ce1a-4807-8aee-d1121f01d495/export {"uuid": "22f10a61-ce1a-4807-8aee-d1121f01d495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12905\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package.\n\nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.\n\ud83d\udccf Published: 2025-03-27T16:25:34.410Z\n\ud83d\udccf Modified: 2025-04-20T15:42:44.814Z\n\ud83d\udd17 References:\n1. https://github.com/mafintosh/tar-fs/commit/a1dd7e7c7f4b4a8bd2ab60f513baca573b44e2ed\n2. https://www.seal.security/blog/a-link-to-the-past-uncovering-a-new-vulnerability-in-tar-fs", "creation_timestamp": "2025-04-20T16:01:34.000000Z"} {"uuid": "22f10a61-ce1a-4807-8aee-d1121f01d495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12905\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package.\n\nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.\n\ud83d\udccf Published: 2025-03-27T16:25:34.410Z\n\ud83d\udccf Modified: 2025-04-20T15:42:44.814Z\n\ud83d\udd17 References:\n1. https://github.com/mafintosh/tar-fs/commit/a1dd7e7c7f4b4a8bd2ab60f513baca573b44e2ed\n2. https://www.seal.security/blog/a-link-to-the-past-uncovering-a-new-vulnerability-in-tar-fs", "creation_timestamp": "2025-04-20T16:01:34.000000Z"} https://vulnerability.circl.lu/sighting/22f10a61-ce1a-4807-8aee-d1121f01d495/export Sun, 20 Apr 2025 16:01:34 +0000 https://vulnerability.circl.lu/sighting/4a92f2cd-7c0f-4306-b2dc-906c6b359fd3/export {"uuid": "4a92f2cd-7c0f-4306-b2dc-906c6b359fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgywua2c", "content": "", "creation_timestamp": "2025-04-23T21:02:24.223548Z"} {"uuid": "4a92f2cd-7c0f-4306-b2dc-906c6b359fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgywua2c", "content": "", "creation_timestamp": "2025-04-23T21:02:24.223548Z"} https://vulnerability.circl.lu/sighting/4a92f2cd-7c0f-4306-b2dc-906c6b359fd3/export Wed, 23 Apr 2025 21:02:24 +0000 https://vulnerability.circl.lu/sighting/07fda8aa-e68b-4140-b9b5-042719560519/export {"uuid": "07fda8aa-e68b-4140-b9b5-042719560519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "Telegram/hru7NN7EYI-xT4JmOnsEkxtF0d6B0YZMLzams5CbWl1Ym4s", "content": "", "creation_timestamp": "2025-04-24T23:00:06.000000Z"} {"uuid": "07fda8aa-e68b-4140-b9b5-042719560519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "Telegram/hru7NN7EYI-xT4JmOnsEkxtF0d6B0YZMLzams5CbWl1Ym4s", "content": "", "creation_timestamp": "2025-04-24T23:00:06.000000Z"} https://vulnerability.circl.lu/sighting/07fda8aa-e68b-4140-b9b5-042719560519/export Thu, 24 Apr 2025 23:00:06 +0000 https://vulnerability.circl.lu/sighting/e8c90c98-e051-4cd8-8b70-a18c1e08831f/export {"uuid": "e8c90c98-e051-4cd8-8b70-a18c1e08831f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "58511dd9-fb6d-4bb5-baf7-360156556d4f", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://www.exploit-db.com/exploits/52268", "content": "", "creation_timestamp": "2026-01-30T10:30:07.024024Z"} {"uuid": "e8c90c98-e051-4cd8-8b70-a18c1e08831f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "58511dd9-fb6d-4bb5-baf7-360156556d4f", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://www.exploit-db.com/exploits/52268", "content": "", "creation_timestamp": "2026-01-30T10:30:07.024024Z"} https://vulnerability.circl.lu/sighting/e8c90c98-e051-4cd8-8b70-a18c1e08831f/export Fri, 30 Jan 2026 10:30:07 +0000