{"vulnerability": "2024-13", "sightings": [{"uuid": "2e9f5b67-6e8c-4303-96e3-449e405401c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqhpvvx2y", "content": "", "creation_timestamp": "2025-01-08T10:53:44.562149Z"}, {"uuid": "c08fab90-3fb4-401e-bed8-3000aeb5a2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13186", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqhtdfl2k", "content": "", "creation_timestamp": "2025-01-08T10:53:45.016992Z"}, {"uuid": "f22de709-5bc3-492c-9339-5365accee25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13312", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800364278246336", "content": "", "creation_timestamp": "2025-01-09T20:49:14.311094Z"}, {"uuid": "0fc5599e-e8ac-4f47-9f8b-ea3101b44c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13278", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5z5a3c2r", "content": "", "creation_timestamp": "2025-01-10T17:54:08.507632Z"}, {"uuid": "0e851688-aaa5-4919-9829-b2c043b1f747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13311", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800364263646320", "content": "", "creation_timestamp": "2025-01-09T20:49:14.753849Z"}, {"uuid": "16bc699c-d03e-4a2d-af83-e3c77026b82b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5zcuxv2i", "content": "", "creation_timestamp": "2025-01-10T17:54:09.161629Z"}, {"uuid": "220f87dc-0cbc-4a86-8dec-c14a51695302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13277", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5zgepu2b", "content": "", "creation_timestamp": "2025-01-10T17:54:09.831651Z"}, {"uuid": "06f815d3-c99a-4e5b-80b7-513fbeb2f5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13323", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfolynmpke2n", "content": "", "creation_timestamp": "2025-01-14T06:15:37.677584Z"}, {"uuid": "63a8fef9-6953-4286-846e-8d5af9d64849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13285", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5zjuv42y", "content": "", "creation_timestamp": "2025-01-10T17:54:10.407640Z"}, {"uuid": "b606acd9-b151-4dcc-ab7a-efaf56abd90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46oq2jk2k", "content": "", "creation_timestamp": "2025-01-16T10:48:37.386810Z"}, {"uuid": "ec54a85d-759d-481b-8493-12d90d699813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13288", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlxo3fn52d", "content": "", "creation_timestamp": "2025-01-09T21:15:46.628681Z"}, {"uuid": "85ea7871-6c00-49ed-bc52-e602928a9836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46oui4s2k", "content": "", "creation_timestamp": "2025-01-16T10:48:37.906843Z"}, {"uuid": "02ff1d39-f986-4c96-9473-c993237d7e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13289", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlxqdnez2e", "content": "", "creation_timestamp": "2025-01-09T21:15:48.706880Z"}, {"uuid": "3f4be646-2039-4808-98fb-54f8b434b895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13202", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795995107554875", "content": "", "creation_timestamp": "2025-01-09T02:18:06.114309Z"}, {"uuid": "e2288bb3-0637-471f-bbe1-dc1052109131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13290", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlxsxlys22", "content": "", "creation_timestamp": "2025-01-09T21:15:51.462770Z"}, {"uuid": "5e025bdd-00c0-4795-a323-48d0d4f4e5db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbo23z22h", "content": "", "creation_timestamp": "2025-01-15T10:58:38.615223Z"}, {"uuid": "62350e8b-6d42-40d6-95d7-d7d8c5328d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13200", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795995079379830", "content": "", "creation_timestamp": "2025-01-09T02:18:06.270890Z"}, {"uuid": "7ef3bd3e-4b69-4dc2-8547-7f33bc293800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13291", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlxvb3ks22", "content": "", "creation_timestamp": "2025-01-09T21:15:53.752835Z"}, {"uuid": "9b675db3-1655-4bcc-a625-503cb6a33f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13201", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795995093581480", "content": "", "creation_timestamp": "2025-01-09T02:18:06.360225Z"}, {"uuid": "1ddb75ab-edda-48f1-9de6-ca13df1fcc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13292", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlxxmr4q22", "content": "", "creation_timestamp": "2025-01-09T21:15:56.361408Z"}, {"uuid": "529a6aab-56b4-4187-8480-5e831705f211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13308", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlz3szkz27", "content": "", "creation_timestamp": "2025-01-09T21:16:34.216222Z"}, {"uuid": "3fc544b9-1249-44f4-87eb-4ba7d96d7701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13203", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795995121279689", "content": "", "creation_timestamp": "2025-01-09T02:18:07.322342Z"}, {"uuid": "0ba478f6-4186-406b-b04d-87d75ade67f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13293", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdly27h7u2x", "content": "", "creation_timestamp": "2025-01-09T21:15:58.956432Z"}, {"uuid": "9934112a-4138-445a-8bd2-0d020257a12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13323", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfonj4qtgo2g", "content": "", "creation_timestamp": "2025-01-14T06:42:43.088290Z"}, {"uuid": "203d978b-ee78-433e-8e67-09817a07361c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13188", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113794305532924069", "content": "", "creation_timestamp": "2025-01-08T19:08:25.097061Z"}, {"uuid": "3b151edb-7e49-42d5-9364-01dc2de62e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13294", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdly4boqj27", "content": "", "creation_timestamp": "2025-01-09T21:16:01.380974Z"}, {"uuid": "10666bba-9cbf-4942-8af1-5670af136056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13296", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlybm5ta22", "content": "", "creation_timestamp": "2025-01-09T21:16:06.748226Z"}, {"uuid": "a4f19969-50d1-4f7a-9d22-70f317a049f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13297", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlydsvpr2e", "content": "", "creation_timestamp": "2025-01-09T21:16:09.199046Z"}, {"uuid": "89413e3b-e92e-421f-b533-282d08936e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13298", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyg7iwg2k", "content": "", "creation_timestamp": "2025-01-09T21:16:11.528209Z"}, {"uuid": "f3fd0400-2be3-478c-9128-1ca6ab6ba7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13299", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyimfca25", "content": "", "creation_timestamp": "2025-01-09T21:16:14.108939Z"}, {"uuid": "d2f3e3a9-369c-4f9f-93e2-bcf1668b361b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13302", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyqty6f2d", "content": "", "creation_timestamp": "2025-01-09T21:16:22.723302Z"}, {"uuid": "a529f0c6-94df-49ea-bb12-a37e284d89d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13303", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlythl7b2e", "content": "", "creation_timestamp": "2025-01-09T21:16:25.474202Z"}, {"uuid": "d56edcc7-492f-4a6d-9501-82631ab6f5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13304", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyvpzdj27", "content": "", "creation_timestamp": "2025-01-09T21:16:27.838884Z"}, {"uuid": "cb0fbb71-1731-444f-bfd0-c03c46bc7d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13305", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyzi4bq2f", "content": "", "creation_timestamp": "2025-01-09T21:16:31.950826Z"}, {"uuid": "7f6b5d33-c9f1-4c8d-a005-b744b9e0145e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13204", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796054122582855", "content": "", "creation_timestamp": "2025-01-09T02:33:06.487620Z"}, {"uuid": "7d78ef56-2555-4f23-a520-c2cb9d18a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13295", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdly6wvze2l", "content": "", "creation_timestamp": "2025-01-09T21:16:03.942772Z"}, {"uuid": "c8f600b8-b4bd-4e80-8a7b-13aedc127694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13312", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzfmfj42x", "content": "", "creation_timestamp": "2025-01-09T21:16:44.548884Z"}, {"uuid": "e4582c18-567d-4650-bda2-0c5ce88b977d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13188", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfausg2ere2i", "content": "", "creation_timestamp": "2025-01-08T19:15:54.526512Z"}, {"uuid": "07937dc5-aca7-4afa-b4d3-5995e4b45105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13205", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796152684603958", "content": "", "creation_timestamp": "2025-01-09T02:58:10.675557Z"}, {"uuid": "e255fa6f-81ac-4356-bc3d-657bf66e742e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13300", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlymb2g72m", "content": "", "creation_timestamp": "2025-01-09T21:16:17.958879Z"}, {"uuid": "1ff093c4-157e-4fff-a896-7dad66257747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13311", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzcqtmp2m", "content": "", "creation_timestamp": "2025-01-09T21:16:41.567341Z"}, {"uuid": "163c3daa-10aa-4dd6-98b2-0b25630413b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13200", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbpmhwosg2k", "content": "", "creation_timestamp": "2025-01-09T03:15:46.341250Z"}, {"uuid": "e25b8683-c020-4b20-afeb-be8c868335b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13301", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyojnij2e", "content": "", "creation_timestamp": "2025-01-09T21:16:20.229457Z"}, {"uuid": "e2d9c0da-749f-4c9d-9459-3ef651c6ec06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13201", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbpmkz3zq22", "content": "", "creation_timestamp": "2025-01-09T03:15:49.456034Z"}, {"uuid": "5a61b6cd-2ee1-4e6b-8604-ef072c30ad9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13202", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbpmnbq5l2d", "content": "", "creation_timestamp": "2025-01-09T03:15:51.861263Z"}, {"uuid": "a6ddabf8-3377-4dee-8559-19eb54e0eba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13309", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlz67uus22", "content": "", "creation_timestamp": "2025-01-09T21:16:36.717415Z"}, {"uuid": "edb7f510-5df0-42f9-bee4-8cdefd1b067f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13203", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbpmprx4w2l", "content": "", "creation_timestamp": "2025-01-09T03:15:54.482174Z"}, {"uuid": "6a04a5f1-61b5-4b04-bd5e-5c8b8e6b3a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13310", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzagvme2x", "content": "", "creation_timestamp": "2025-01-09T21:16:39.071169Z"}, {"uuid": "10dd8680-4df3-4ce2-a4ef-a4a687068c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13204", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbpms6l5d2f", "content": "", "creation_timestamp": "2025-01-09T03:15:57.049313Z"}, {"uuid": "4ca48e63-5d18-4aee-82e9-b1a5d8756933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13205", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbpmukoe42a", "content": "", "creation_timestamp": "2025-01-09T03:15:59.718757Z"}, {"uuid": "867773d1-caf6-449d-8f20-a30ee08a57f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13206", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796243048510811", "content": "", "creation_timestamp": "2025-01-09T03:21:09.380523Z"}, {"uuid": "08191fc6-4ddc-497f-a0db-ddfa3eecfd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13209", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796243062953907", "content": "", "creation_timestamp": "2025-01-09T03:21:09.643393Z"}, {"uuid": "d86115b2-7f81-44ee-a1bc-b6654469f178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13153", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpimdlt2x", "content": "", "creation_timestamp": "2025-01-09T09:15:22.590864Z"}, {"uuid": "b2c4030a-666a-4c41-8605-40d8e28c0e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13296", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnaxvt762u", "content": "", "creation_timestamp": "2025-01-09T21:38:52.311785Z"}, {"uuid": "46cb0d33-0096-4cc4-a473-842050a883df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13183", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfeqtsbe232l", "content": "", "creation_timestamp": "2025-01-10T08:15:45.177927Z"}, {"uuid": "83aedaac-b6d3-4034-8f96-e88f4d2fb0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnayelqe2g", "content": "", "creation_timestamp": "2025-01-09T21:38:53.175084Z"}, {"uuid": "67782662-a636-4062-86b5-030378abf547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13298", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnayhsqq2q", "content": "", "creation_timestamp": "2025-01-09T21:38:53.817657Z"}, {"uuid": "5b702ffc-4d79-4ed9-bad3-e01b172be11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnayl4dk2w", "content": "", "creation_timestamp": "2025-01-09T21:38:54.362916Z"}, {"uuid": "960f7923-f9fe-4a1c-b245-18846a95fe8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnayomje2g", "content": "", "creation_timestamp": "2025-01-09T21:38:54.957013Z"}, {"uuid": "690ce729-15cd-4400-8e5c-c4fc5d1efafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13305", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnays74z2h", "content": "", "creation_timestamp": "2025-01-09T21:38:55.545910Z"}, {"uuid": "0183235f-d85d-4ee7-95f9-cff10bdbcf32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnayzy5r2h", "content": "", "creation_timestamp": "2025-01-09T21:38:56.228161Z"}, {"uuid": "17c4815b-c095-4918-ac9c-dc324e4eb7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13156", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfow2tpur22f", "content": "", "creation_timestamp": "2025-01-14T09:15:47.464340Z"}, {"uuid": "001eb644-64d7-4aa5-b671-6c9a305320d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13179", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpquvqa6v2r", "content": "", "creation_timestamp": "2025-01-14T17:15:39.374382Z"}, {"uuid": "50ef622c-bf44-45ed-83e4-f5382e877736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfawmb5ceu2b", "content": "", "creation_timestamp": "2025-01-08T19:48:17.488641Z"}, {"uuid": "0d6a4717-51ae-44b3-9852-0895415ac493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnaz5dbk2k", "content": "", "creation_timestamp": "2025-01-09T21:38:56.793283Z"}, {"uuid": "f115a438-c98e-471c-ae87-209ba26cfce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13180", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpquypfex2f", "content": "", "creation_timestamp": "2025-01-14T17:15:42.457305Z"}, {"uuid": "2e4f1380-685a-4e59-b312-3acde50bd4be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13299", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnazajr42g", "content": "", "creation_timestamp": "2025-01-09T21:38:57.442671Z"}, {"uuid": "de7cf512-d3dd-4b4b-838f-76de229e06af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13181", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpqv32avd2c", "content": "", "creation_timestamp": "2025-01-14T17:15:44.761040Z"}, {"uuid": "83118463-065c-4684-8cce-b72ab505aaac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13210", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796307339744083", "content": "", "creation_timestamp": "2025-01-09T03:37:30.419635Z"}, {"uuid": "d2f8da57-227b-4eca-8933-937daf49ee6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnazdsxv2q", "content": "", "creation_timestamp": "2025-01-09T21:38:58.000046Z"}, {"uuid": "7513e891-c1ab-453f-8ca9-1773f0839fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13211", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796307383439703", "content": "", "creation_timestamp": "2025-01-09T03:37:30.988560Z"}, {"uuid": "7643f60c-6e42-40a9-bbe3-16c6b0ab34cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnazhipy2e", "content": "", "creation_timestamp": "2025-01-09T21:38:58.568744Z"}, {"uuid": "241b51d3-1fe4-455e-ac4f-96eabd84bb3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbqvjola52k", "content": "", "creation_timestamp": "2025-01-09T03:38:44.046855Z"}, {"uuid": "b2c5c001-d5d9-4276-9676-16413e1825bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13205", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbqvjy7hu2q", "content": "", "creation_timestamp": "2025-01-09T03:38:44.646318Z"}, {"uuid": "5a8f0115-b06a-4fb9-95be-4ee742435b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbqvk5y5y25", "content": "", "creation_timestamp": "2025-01-09T03:38:45.188103Z"}, {"uuid": "4be36f5a-8e4f-4c55-9a67-e7752b16ebcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbqvkbhfk2g", "content": "", "creation_timestamp": "2025-01-09T03:38:45.688591Z"}, {"uuid": "ae29b05a-03c7-4bb6-9a48-52c544ca6913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13156", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoxubwrlt2i", "content": "", "creation_timestamp": "2025-01-14T09:47:55.424645Z"}, {"uuid": "74cd1a86-5f57-4d16-ad4d-3105cc94d927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13204", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbqvkhh4v2k", "content": "", "creation_timestamp": "2025-01-09T03:38:46.353182Z"}, {"uuid": "28c81265-2261-48b4-b10b-27ddda705e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13189", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113794546486780376", "content": "", "creation_timestamp": "2025-01-08T20:09:41.839933Z"}, {"uuid": "36830377-380d-4885-bd54-f238f3271b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbqvkn4lg2k", "content": "", "creation_timestamp": "2025-01-09T03:38:47.020844Z"}, {"uuid": "1fc5ac2c-5afe-4581-997a-ce7176aa81ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13318", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113803774203068144", "content": "", "creation_timestamp": "2025-01-10T11:16:25.654604Z"}, {"uuid": "2cf7d8d6-d49d-44ee-b4b0-023bf27cdac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13158", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827859560170423", "content": "", "creation_timestamp": "2025-01-14T17:21:39.008280Z"}, {"uuid": "541c6ec9-abf9-40ac-be23-6a6a6157a538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827859575039311", "content": "", "creation_timestamp": "2025-01-14T17:21:39.336503Z"}, {"uuid": "88f83dbc-54fc-480d-9914-ac0166ec5c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13189", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfay5jjjzd2l", "content": "", "creation_timestamp": "2025-01-08T20:15:48.832362Z"}, {"uuid": "776aed43-69cd-485b-ae7d-412f703438f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827859589893903", "content": "", "creation_timestamp": "2025-01-14T17:21:39.622528Z"}, {"uuid": "48c9901d-53fc-420a-a2b4-c4bac02a3882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827859604397642", "content": "", "creation_timestamp": "2025-01-14T17:21:39.990937Z"}, {"uuid": "88c57672-7c0b-408b-92ad-33368b223279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13212", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796414992931694", "content": "", "creation_timestamp": "2025-01-09T04:04:52.982424Z"}, {"uuid": "0034ed38-ffcc-4483-82ba-0691c6bad5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13323", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfozflljjv2h", "content": "", "creation_timestamp": "2025-01-14T10:15:29.969462Z"}, {"uuid": "75af6b00-b71a-45e9-9e18-2165385de064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13213", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796415007470852", "content": "", "creation_timestamp": "2025-01-09T04:04:53.231813Z"}, {"uuid": "2175e383-01c3-4701-875c-122e08517037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13206", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxeknhc2a", "content": "", "creation_timestamp": "2025-01-09T04:15:33.330509Z"}, {"uuid": "fa48f225-1fec-4d09-8db6-c4689e7749fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13318", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lff6bgcjap25", "content": "", "creation_timestamp": "2025-01-10T12:16:00.831994Z"}, {"uuid": "a267f405-04de-47be-a035-b5185e278e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13209", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxhbets2a", "content": "", "creation_timestamp": "2025-01-09T04:15:35.876044Z"}, {"uuid": "da439f1b-6165-4f37-868c-172200e15cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13210", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxjeqw427", "content": "", "creation_timestamp": "2025-01-09T04:15:38.127830Z"}, {"uuid": "991dee0a-ee74-4148-97f4-b49efe53c870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13211", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxlr5fr2f", "content": "", "creation_timestamp": "2025-01-09T04:15:40.641235Z"}, {"uuid": "9741ba99-318b-4710-a8bd-7ae3170d7cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lff7k63lvc2e", "content": "", "creation_timestamp": "2025-01-10T12:38:48.872587Z"}, {"uuid": "7f462553-eae4-49a0-9e47-f997db04e2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13212", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxocmvy2e", "content": "", "creation_timestamp": "2025-01-09T04:15:43.337956Z"}, {"uuid": "c20f8572-6c30-4c56-a214-1cc0a48dc6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13213", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxqstb22a", "content": "", "creation_timestamp": "2025-01-09T04:15:45.945347Z"}, {"uuid": "72243031-210b-45a6-83fe-cef80b7efab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13156", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825764267381499", "content": "", "creation_timestamp": "2025-01-14T08:28:47.359303Z"}, {"uuid": "9940db0a-3616-48dd-817f-40fa575e64f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13167", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827918606895748", "content": "", "creation_timestamp": "2025-01-14T17:36:39.959848Z"}, {"uuid": "96bdcf3d-e204-40b3-8393-f9d2ba7c992a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13169", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827918637313021", "content": "", "creation_timestamp": "2025-01-14T17:36:41.037406Z"}, {"uuid": "e356403f-50f8-4906-9432-3ae49676bb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbuaw7fbg2b", "content": "", "creation_timestamp": "2025-01-09T04:38:47.569347Z"}, {"uuid": "5c166d10-12f9-4a92-94ee-99be97d11235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbuax2ujs2q", "content": "", "creation_timestamp": "2025-01-09T04:38:50.539271Z"}, {"uuid": "54482ceb-06ad-4492-b148-159a04a123fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13168", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827918622348071", "content": "", "creation_timestamp": "2025-01-14T17:36:41.088573Z"}, {"uuid": "3469c8ad-2527-4ae5-bec1-cbf707307064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbuawm5qk2i", "content": "", "creation_timestamp": "2025-01-09T04:38:48.223128Z"}, {"uuid": "76aaf42d-c741-4ac4-97e6-f74c8e22701c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbuax6o6j2k", "content": "", "creation_timestamp": "2025-01-09T04:38:51.061585Z"}, {"uuid": "59f3fe29-bf54-4eb9-a418-fbeb3c7aa216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13348", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfp2j5m2u22z", "content": "", "creation_timestamp": "2025-01-14T10:35:23.013167Z"}, {"uuid": "7fac42d2-e912-4cd1-b55c-01e47f65d58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13170", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827918671138881", "content": "", "creation_timestamp": "2025-01-14T17:36:41.134954Z"}, {"uuid": "4a4ef3b9-fe43-4583-8cef-849fc0535680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13041", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113793610252558322", "content": "", "creation_timestamp": "2025-01-08T16:11:36.236214Z"}, {"uuid": "8f0ace3d-9813-4277-8b3e-13d35e234f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbuaxclde2k", "content": "", "creation_timestamp": "2025-01-09T04:38:51.649520Z"}, {"uuid": "b21a1676-b17d-4fd2-a814-9f3f380bd392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13171", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827977672601993", "content": "", "creation_timestamp": "2025-01-14T17:51:41.231478Z"}, {"uuid": "62f87ccb-2bdb-45e4-8f75-c007e3461309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113794749476257793", "content": "", "creation_timestamp": "2025-01-08T21:01:19.115225Z"}, {"uuid": "b11f6554-6454-4569-b17d-80f30eb4d307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13237", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799784007008040", "content": "", "creation_timestamp": "2025-01-09T18:21:39.966953Z"}, {"uuid": "93eb42ba-b9ea-4eff-ad36-3a094b98317b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13172", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827977687754174", "content": "", "creation_timestamp": "2025-01-14T17:51:41.553395Z"}, {"uuid": "b22d8083-a61c-4f84-96de-ceb89ea9dd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13154", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnnsyxpa42r", "content": "", "creation_timestamp": "2025-01-13T21:15:34.984045Z"}, {"uuid": "eedf78ab-3e82-4cc0-be9d-d565db1f367c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13238", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799835600368183", "content": "", "creation_timestamp": "2025-01-09T18:34:47.700100Z"}, {"uuid": "9c4ae6bd-8c76-4a61-a695-9f3908c65d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13324", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnnt33sbu2h", "content": "", "creation_timestamp": "2025-01-13T21:15:37.185332Z"}, {"uuid": "00434061-8e70-458b-b90e-c61a641cca07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13190", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfb3iiij2j2f", "content": "", "creation_timestamp": "2025-01-08T21:15:37.869707Z"}, {"uuid": "98a6f7b4-2b3a-489b-b037-e3794df62fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13239", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799874404488763", "content": "", "creation_timestamp": "2025-01-09T18:44:39.290205Z"}, {"uuid": "c8317d21-20c0-4325-b486-823993e04bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13240", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799904942981387", "content": "", "creation_timestamp": "2025-01-09T18:52:25.400040Z"}, {"uuid": "e8303917-1601-4d95-b548-7ba224be97dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13394", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113830738092327440", "content": "", "creation_timestamp": "2025-01-15T05:33:41.907501Z"}, {"uuid": "2e9a0d02-55ab-4619-8a57-ed12439538bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799904958008202", "content": "", "creation_timestamp": "2025-01-09T18:52:25.481507Z"}, {"uuid": "f680149a-912e-4fb8-821b-a5400641bc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13243", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799904988161936", "content": "", "creation_timestamp": "2025-01-09T18:52:25.997175Z"}, {"uuid": "5a694293-8590-4bb9-86d9-2363c9aa9687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13242", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799904972494491", "content": "", "creation_timestamp": "2025-01-09T18:52:25.674603Z"}, {"uuid": "62843a12-e770-4e0c-b7cb-4c61f7c80c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13394", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfr4hsbzg52r", "content": "", "creation_timestamp": "2025-01-15T06:15:44.185313Z"}, {"uuid": "dde9e5a4-5a99-4e8e-829d-9c589c724ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13244", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799963991910941", "content": "", "creation_timestamp": "2025-01-09T19:07:26.332691Z"}, {"uuid": "a698267a-9590-4fbc-bb3e-c40b79d7a57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13245", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799964006953621", "content": "", "creation_timestamp": "2025-01-09T19:07:26.550435Z"}, {"uuid": "c421237f-9417-47dc-96e3-5d2e348ec57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfb5czrtl42w", "content": "", "creation_timestamp": "2025-01-08T21:48:22.630734Z"}, {"uuid": "bf12e204-c283-4879-ba24-9f5ef91b0a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986024892307", "content": "", "creation_timestamp": "2025-01-09T19:13:02.593055Z"}, {"uuid": "63ca4486-8c88-4d12-8eb0-37856184d031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13244", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbabeqf2k", "content": "", "creation_timestamp": "2025-01-09T19:15:51.170465Z"}, {"uuid": "0735ed0a-9455-4ae2-a1af-be3cb77fa848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfcdl3jk2l", "content": "", "creation_timestamp": "2025-01-09T19:16:28.147777Z"}, {"uuid": "83806581-9f70-4ff0-a7de-44576c3a6527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986039874968", "content": "", "creation_timestamp": "2025-01-09T19:13:02.708245Z"}, {"uuid": "a8ed9583-665f-48b2-b552-75f54fff77c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13241", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfayp6zh2x", "content": "", "creation_timestamp": "2025-01-09T19:15:43.228637Z"}, {"uuid": "68bdc150-8cd9-4e5f-86c0-8595ec4f6a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuayh6su2r", "content": "", "creation_timestamp": "2025-01-14T18:16:06.049720Z"}, {"uuid": "3e2c3cc7-138b-4417-980f-4198ef149adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfr5z5ygwg2q", "content": "", "creation_timestamp": "2025-01-15T06:43:20.481436Z"}, {"uuid": "2b05fcb9-e1e8-44bf-8934-2137011b6f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986068466806", "content": "", "creation_timestamp": "2025-01-09T19:13:03.610021Z"}, {"uuid": "3bd72a73-7306-45e6-afbf-f559e64940fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986053818546", "content": "", "creation_timestamp": "2025-01-09T19:13:03.704745Z"}, {"uuid": "620a380e-ccbd-4428-b9ea-21f2f8912a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13172", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubvmysy2t", "content": "", "creation_timestamp": "2025-01-14T18:16:36.548322Z"}, {"uuid": "6adc1c1d-a14c-44a6-863b-dbf6817e4f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13237", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfaowe5z2f", "content": "", "creation_timestamp": "2025-01-09T19:15:33.003198Z"}, {"uuid": "2ae690c0-7156-4111-8c04-d81180bd9399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13191", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795117051195743", "content": "", "creation_timestamp": "2025-01-08T22:34:47.936001Z"}, {"uuid": "2f33357d-4369-4594-b521-6a0e630f8fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13238", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfarm67d2m", "content": "", "creation_timestamp": "2025-01-09T19:15:35.863631Z"}, {"uuid": "41cf7d1f-f8b2-4467-bbdc-e20a822ceb71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13239", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfau52es2l", "content": "", "creation_timestamp": "2025-01-09T19:15:38.413675Z"}, {"uuid": "25e73f4f-af06-4d7d-8325-d41e6a6dea18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfcfszjb27", "content": "", "creation_timestamp": "2025-01-09T19:16:30.626733Z"}, {"uuid": "36e651ba-94a8-47db-adf2-5a2d30ac2a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13158", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuapcvce2r", "content": "", "creation_timestamp": "2025-01-14T18:15:56.928916Z"}, {"uuid": "1f086898-e31e-45ff-9652-aef3de1b02fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuauw5tm2b", "content": "", "creation_timestamp": "2025-01-14T18:16:02.379491Z"}, {"uuid": "812fb0fd-0f7e-4329-9f2c-9dad7a61d838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13169", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubnjvco2e", "content": "", "creation_timestamp": "2025-01-14T18:16:28.401409Z"}, {"uuid": "9fe4dc75-b568-4a8b-965c-779d72627f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13240", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfawfyq42f", "content": "", "creation_timestamp": "2025-01-09T19:15:40.767100Z"}, {"uuid": "7e13435b-ea9d-4b0d-a52c-40bd16ceb0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuarlj5z2f", "content": "", "creation_timestamp": "2025-01-14T18:15:59.137524Z"}, {"uuid": "a81f71dd-68c3-415b-a3d5-7dde07b15c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13242", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfb366fc25", "content": "", "creation_timestamp": "2025-01-09T19:15:45.774795Z"}, {"uuid": "b3f96f28-51a7-4bf7-8217-90da7dd512b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13162", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpub3xxqk2n", "content": "", "creation_timestamp": "2025-01-14T18:16:09.742717Z"}, {"uuid": "ad84168f-0ad5-4422-990c-7cbeece5d801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13243", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfb5lmc722", "content": "", "creation_timestamp": "2025-01-09T19:15:48.324311Z"}, {"uuid": "7c6a164d-fd92-4474-b7f8-5e198bd0ee37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfc6krkk25", "content": "", "creation_timestamp": "2025-01-09T19:16:22.967669Z"}, {"uuid": "cc92b27f-7208-4e8e-b071-bf016eb5209a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13163", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpub6gefo2t", "content": "", "creation_timestamp": "2025-01-14T18:16:12.257580Z"}, {"uuid": "a72779e8-f652-4656-98d5-050e4524279a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13245", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbct7l722", "content": "", "creation_timestamp": "2025-01-09T19:15:53.926635Z"}, {"uuid": "ec23373b-1620-4ef3-b9dc-23b7ea56bf89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13164", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubaumjr2f", "content": "", "creation_timestamp": "2025-01-14T18:16:14.767319Z"}, {"uuid": "2983ca75-27b6-46c1-a47c-1683e113133c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13246", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbfj3e72k", "content": "", "creation_timestamp": "2025-01-09T19:15:56.638327Z"}, {"uuid": "5625fe66-6d10-4a65-b799-023e1003b55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13165", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubdozur2h", "content": "", "creation_timestamp": "2025-01-14T18:16:17.736320Z"}, {"uuid": "cfabc5e7-ed4a-4fdc-b609-9d9325aa9e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13187", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfao3ahscq2a", "content": "", "creation_timestamp": "2025-01-08T17:15:34.735355Z"}, {"uuid": "d38856e4-aa2b-427c-8b10-11acec74e47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13247", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbibs7x2k", "content": "", "creation_timestamp": "2025-01-09T19:15:59.537696Z"}, {"uuid": "bd3e2203-c109-40d6-956b-b5af1304b67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13248", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbksrz22l", "content": "", "creation_timestamp": "2025-01-09T19:16:02.444253Z"}, {"uuid": "615ba420-a775-4067-b030-e6f26795f92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbwqneb22", "content": "", "creation_timestamp": "2025-01-09T19:16:14.744480Z"}, {"uuid": "73aa4ad9-2ce7-455c-ab68-5c67d75d34d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13166", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubghjqz2c", "content": "", "creation_timestamp": "2025-01-14T18:16:20.744447Z"}, {"uuid": "6639d9c4-c219-4e77-af4a-fa8f49fefc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13170", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubqcwi42b", "content": "", "creation_timestamp": "2025-01-14T18:16:31.155851Z"}, {"uuid": "9a0f0e81-ab65-4fa9-986f-5a8ccaef8cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13191", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbc6uk2n22k", "content": "", "creation_timestamp": "2025-01-08T23:15:31.328921Z"}, {"uuid": "8f9dfd76-beae-4a20-86ac-eb47a058221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13249", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbmzzyt2m", "content": "", "creation_timestamp": "2025-01-09T19:16:04.686459Z"}, {"uuid": "73fe7e8e-4962-4efb-9392-ea0b1bea908f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbpnrqj2f", "content": "", "creation_timestamp": "2025-01-09T19:16:07.317935Z"}, {"uuid": "df900823-30ec-4267-81fc-1af07ed44c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbrvuv722", "content": "", "creation_timestamp": "2025-01-09T19:16:09.662148Z"}, {"uuid": "a2a72a83-035d-44fd-aa89-afbf4bfd48c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13167", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubip7ma2t", "content": "", "creation_timestamp": "2025-01-14T18:16:23.046884Z"}, {"uuid": "c67fa391-52f8-47d1-929f-a4c61cd448f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13168", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubkrisb2c", "content": "", "creation_timestamp": "2025-01-14T18:16:25.147167Z"}, {"uuid": "32a7b2e4-c9a4-47a6-b547-4ebedc96966f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13000", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113733794445286217", "content": "", "creation_timestamp": "2024-12-29T02:39:39.410660Z"}, {"uuid": "23fd05c8-a689-4c64-bf69-9146b3d632f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13001", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113733879827233928", "content": "", "creation_timestamp": "2024-12-29T03:01:22.113899Z"}, {"uuid": "304d8bab-5fd5-4dcc-b7e2-e47c4cb6222b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13000", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leg2hu7j3p2m", "content": "", "creation_timestamp": "2024-12-29T03:15:30.066934Z"}, {"uuid": "db9607f0-c95b-4403-918f-848a3ada597e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13001", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leg2hwequ522", "content": "", "creation_timestamp": "2024-12-29T03:15:32.231587Z"}, {"uuid": "3dbb592b-b739-4785-aa86-bc022fa788ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13002", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113734037049325929", "content": "", "creation_timestamp": "2024-12-29T03:41:21.027689Z"}, {"uuid": "4d28b7dc-336f-41ee-9f33-3c8a65c164e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13003", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113734151667545379", "content": "", "creation_timestamp": "2024-12-29T04:10:30.126619Z"}, {"uuid": "bcedce45-f384-420e-ad19-69e960d2f0db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13002", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leg5sxkdtl2l", "content": "", "creation_timestamp": "2024-12-29T04:15:24.452602Z"}, {"uuid": "54e1fa09-16b3-4a54-9a9b-12ced4980957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13003", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leg5sztrho2i", "content": "", "creation_timestamp": "2024-12-29T04:15:26.260444Z"}, {"uuid": "26d09d89-48b1-446f-a119-4fbafb8a2780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13004", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113734732444893707", "content": "", "creation_timestamp": "2024-12-29T06:38:12.166498Z"}, {"uuid": "668f538e-05b8-4eed-9bf7-687c95cf14ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13004", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leghusyvmu2k", "content": "", "creation_timestamp": "2024-12-29T07:15:23.633454Z"}, {"uuid": "3d20c589-fd9f-4b57-9141-2e6beed669c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13005", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113734957541914206", "content": "", "creation_timestamp": "2024-12-29T07:35:26.756371Z"}, {"uuid": "5fce845b-3789-4235-9c85-d2aabd30a401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13006", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113735093418778305", "content": "", "creation_timestamp": "2024-12-29T08:10:00.107285Z"}, {"uuid": "b34fc88f-0647-4bdd-a15d-72c5ad52c222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13005", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3legladbxah2k", "content": "", "creation_timestamp": "2024-12-29T08:15:31.286623Z"}, {"uuid": "1dde54ee-25c5-4e52-9bb8-874d0778d3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13006", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leglafsctt2e", "content": "", "creation_timestamp": "2024-12-29T08:15:33.607826Z"}, {"uuid": "7d823619-4242-44d1-ab00-5ea15353fcb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13007", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113735208022534122", "content": "", "creation_timestamp": "2024-12-29T08:39:08.661862Z"}, {"uuid": "3a0d43cb-bc74-4646-bbb7-a11578547ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13007", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3legolgxqlr2m", "content": "", "creation_timestamp": "2024-12-29T09:15:25.271767Z"}, {"uuid": "8a9ff1f1-a5f9-47e8-a49b-b11d5a61501a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13192", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbc6xmx6v2i", "content": "", "creation_timestamp": "2025-01-08T23:15:34.270574Z"}, {"uuid": "a474c607-2675-4797-adcd-0c42e3b4594b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbuckcv2k", "content": "", "creation_timestamp": "2025-01-09T19:16:12.131952Z"}, {"uuid": "d99cbd23-61ff-42e0-88e6-1a5831c73e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13171", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubsqiua2t", "content": "", "creation_timestamp": "2025-01-14T18:16:33.559376Z"}, {"uuid": "e1771c88-030d-4f62-9375-7440dc6d8584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13008", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113735432795561317", "content": "", "creation_timestamp": "2024-12-29T09:36:18.491248Z"}, {"uuid": "49f9b090-0c8d-4c09-b041-cbdbd853666a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13008", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3legrwscqpy25", "content": "", "creation_timestamp": "2024-12-29T10:15:27.826990Z"}, {"uuid": "a2eecb91-228d-47d4-98ed-a9a02d6b6d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13012", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3legyn7km4c2f", "content": "", "creation_timestamp": "2024-12-29T12:15:22.151092Z"}, {"uuid": "e911be69-ef80-41c3-b649-9ed276b91ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13193", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbc6zpz6k2k", "content": "", "creation_timestamp": "2025-01-08T23:15:36.440612Z"}, {"uuid": "b40359f3-44be-4451-afb9-7cd91de9561c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13041", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797009211537411", "content": "", "creation_timestamp": "2025-01-09T06:36:02.915869Z"}, {"uuid": "74e370f3-a3a5-45e3-b86d-fe365bae9abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbzmtd42f", "content": "", "creation_timestamp": "2025-01-09T19:16:17.746692Z"}, {"uuid": "0c6b266b-0c54-4b02-bf45-7e67438c56d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfc44fne2a", "content": "", "creation_timestamp": "2025-01-09T19:16:20.316131Z"}, {"uuid": "3c27287b-bdec-4224-a547-43b89ceb6ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113802868244933842", "content": "", "creation_timestamp": "2025-01-10T07:26:02.320595Z"}, {"uuid": "e82fafc8-2d6b-4c17-91b2-37fbb3fd868a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfcb3wkj27", "content": "", "creation_timestamp": "2025-01-09T19:16:25.556745Z"}, {"uuid": "ab39a6f2-7a11-4537-a67d-a914ec093534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13030", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113736183009466505", "content": "", "creation_timestamp": "2024-12-29T12:47:06.613124Z"}, {"uuid": "fc0e8adc-b845-4809-af6a-95f096ef4ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13013", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113736380737379887", "content": "", "creation_timestamp": "2024-12-29T13:37:22.927030Z"}, {"uuid": "2b174458-0191-4b37-884f-186c6b8f3258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13013", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leh7dokfdh2a", "content": "", "creation_timestamp": "2024-12-29T14:15:18.363773Z"}, {"uuid": "97f8cd78-007f-48fa-a8aa-7f441d473017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13014", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113736726872132085", "content": "", "creation_timestamp": "2024-12-29T15:05:24.746758Z"}, {"uuid": "d0b8283f-9ead-4ac8-ad44-3ebcb8d763be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13014", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehcpakzvo25", "content": "", "creation_timestamp": "2024-12-29T15:15:27.879968Z"}, {"uuid": "3aadcd06-bbdd-45be-bb94-ed58fd3ab16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13015", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113736854040364156", "content": "", "creation_timestamp": "2024-12-29T15:37:44.990420Z"}, {"uuid": "e9123ce4-407d-4064-b991-a47007e9cbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13016", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113736977496301643", "content": "", "creation_timestamp": "2024-12-29T16:09:08.795250Z"}, {"uuid": "5c539244-6ac1-4c39-94b7-857e3130cd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13015", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehg2efbp522", "content": "", "creation_timestamp": "2024-12-29T16:15:22.038077Z"}, {"uuid": "3d6c1bad-7743-4f5e-bfd4-3d495a913d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13016", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehg2gj3yd2c", "content": "", "creation_timestamp": "2024-12-29T16:15:25.530707Z"}, {"uuid": "fb5c114b-4d32-43ec-856e-caca5ab3431f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13017", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehjfphgsp25", "content": "", "creation_timestamp": "2024-12-29T17:15:24.078675Z"}, {"uuid": "8975d7cc-869d-45d0-86a3-286b9c8901fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13018", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113737425678406803", "content": "", "creation_timestamp": "2024-12-29T18:03:07.444859Z"}, {"uuid": "72d8b54e-78b9-42e4-bfe2-cf9655e0c82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13018", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehmrca2kn25", "content": "", "creation_timestamp": "2024-12-29T18:15:34.143532Z"}, {"uuid": "f56add5e-3795-4134-b65c-03b908e97a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13019", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113737548497911439", "content": "", "creation_timestamp": "2024-12-29T18:34:21.599603Z"}, {"uuid": "8513dc73-4d81-49a8-b7af-e5adbd2d70ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13020", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113737675775565147", "content": "", "creation_timestamp": "2024-12-29T19:06:43.637925Z"}, {"uuid": "dbfda113-e5b0-4cef-920b-9c2f876a3db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13019", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehq4exrnr22", "content": "", "creation_timestamp": "2024-12-29T19:15:27.378193Z"}, {"uuid": "339ed7bd-d34d-40ab-940b-01c62b7ca012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13020", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehq4h4o4b2m", "content": "", "creation_timestamp": "2024-12-29T19:15:30.915464Z"}, {"uuid": "a388c627-c365-47db-ad2b-1b01ec670810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13022", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113737904535445026", "content": "", "creation_timestamp": "2024-12-29T20:04:54.251268Z"}, {"uuid": "c50c808a-73bc-46c2-b9e5-cfea11c6473b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13021", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehthiji6o22", "content": "", "creation_timestamp": "2024-12-29T20:15:21.864220Z"}, {"uuid": "ff7c24cc-7e0f-42e3-87bd-4a31b2f28ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13022", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehthkpx3622", "content": "", "creation_timestamp": "2024-12-29T20:15:24.891841Z"}, {"uuid": "30807bba-e8b5-4af1-b3db-f1488f894104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13023", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113738010318555474", "content": "", "creation_timestamp": "2024-12-29T20:31:48.323143Z"}, {"uuid": "13dca848-9b46-4681-bb99-4c8feae41352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13024", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113738133305922144", "content": "", "creation_timestamp": "2024-12-29T21:03:05.239034Z"}, {"uuid": "3f272379-112f-4c3b-9c45-d491865f6477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13023", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehwstbwtq2m", "content": "", "creation_timestamp": "2024-12-29T21:15:33.596215Z"}, {"uuid": "534ccf25-6e45-4049-89d7-0abf22e7c13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13024", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lehwsvkwqb2i", "content": "", "creation_timestamp": "2024-12-29T21:15:37.019204Z"}, {"uuid": "5e86e313-5bab-4d43-92a3-bd8505d4b1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13025", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113738488177848249", "content": "", "creation_timestamp": "2024-12-29T22:33:19.912177Z"}, {"uuid": "3fcab739-eb6f-4665-b7ad-c99af55d61cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13028", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113738611185027596", "content": "", "creation_timestamp": "2024-12-29T23:04:36.862646Z"}, {"uuid": "db21d334-be65-4754-b8af-6ddc0fcf7226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13029", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113738738400003723", "content": "", "creation_timestamp": "2024-12-29T23:36:57.969655Z"}, {"uuid": "e80aa10a-4e54-40b7-a09c-a5133d0fb95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13030", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113738954495833597", "content": "", "creation_timestamp": "2024-12-30T00:31:55.641487Z"}, {"uuid": "b14998d6-6170-4bd9-8299-0dac8e4fa336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13031", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113739043756073271", "content": "", "creation_timestamp": "2024-12-30T00:54:37.489046Z"}, {"uuid": "cd8517d6-1f84-438c-a109-a25bb9433198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13032", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113739170986547140", "content": "", "creation_timestamp": "2024-12-30T01:26:58.800044Z"}, {"uuid": "37486886-dfad-443d-bacc-eef82a47fa10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13035", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113739433881412303", "content": "", "creation_timestamp": "2024-12-30T02:33:50.149938Z"}, {"uuid": "61500e0e-1d77-4f18-8202-3c5076c9df8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13036", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113739565665097148", "content": "", "creation_timestamp": "2024-12-30T03:07:21.167003Z"}, {"uuid": "8c483a63-73cc-44f4-87c2-c709e5437914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13037", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113739697607084761", "content": "", "creation_timestamp": "2024-12-30T03:40:54.670851Z"}, {"uuid": "56e3edec-fe14-45bf-bb45-9e24d68b7c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13038", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113739816718367054", "content": "", "creation_timestamp": "2024-12-30T04:11:11.836885Z"}, {"uuid": "57d8d5fe-40d0-40d1-abb2-4312c8328b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13039", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113739902063679070", "content": "", "creation_timestamp": "2024-12-30T04:32:54.112851Z"}, {"uuid": "ecc2a28c-480b-43f8-b271-218cf99cbfe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13043", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743682834418784", "content": "", "creation_timestamp": "2024-12-30T20:34:24.068609Z"}, {"uuid": "90b3ec95-da67-4d3d-88c5-f8c69e4aa203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13044", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743682848366947", "content": "", "creation_timestamp": "2024-12-30T20:34:24.332558Z"}, {"uuid": "71952b45-315d-4348-98a9-76fbd9323719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13045", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743682862014055", "content": "", "creation_timestamp": "2024-12-30T20:34:24.579007Z"}, {"uuid": "0ad99313-2565-4c82-ac10-02ca3aef0dcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13049", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743741908450621", "content": "", "creation_timestamp": "2024-12-30T20:49:29.799951Z"}, {"uuid": "22f9f187-8b75-473f-ba98-eb1435706917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13046", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743741865046531", "content": "", "creation_timestamp": "2024-12-30T20:49:30.038047Z"}, {"uuid": "267712a1-4fb3-4a3f-bd18-ca12ba3fab5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13048", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743741894507245", "content": "", "creation_timestamp": "2024-12-30T20:49:30.145602Z"}, {"uuid": "fc2c86f1-5ea0-427f-8a72-7a43342b9bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13047", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743741879163553", "content": "", "creation_timestamp": "2024-12-30T20:49:30.294618Z"}, {"uuid": "ab592ade-824c-405f-93fc-83ee13de8ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13050", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743800907443432", "content": "", "creation_timestamp": "2024-12-30T21:04:25.777312Z"}, {"uuid": "4627bf4f-cc2c-47c3-9ccc-cfd476ec1631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13051", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743800921784443", "content": "", "creation_timestamp": "2024-12-30T21:04:25.966148Z"}, {"uuid": "9d79a2a9-f2f6-473c-a338-fc6dcdfd90a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13042", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743813918791710", "content": "", "creation_timestamp": "2024-12-30T21:07:44.271081Z"}, {"uuid": "68221a43-8738-4d77-8c46-1adc5e247c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13058", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113744060768180912", "content": "", "creation_timestamp": "2024-12-30T22:10:30.903436Z"}, {"uuid": "1beaf358-7fe8-46bf-9766-b8460865a707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13051", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1735/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "591fe043-5a0f-464e-98e1-51ffd3085c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13050", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1734/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "c5320b5d-f103-470c-bb6a-202fb93235a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13049", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1733/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "c67e9168-1ca4-4bcd-8f9b-64ff6d3973bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13048", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1732/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "46fbe702-203c-464f-9002-16b24bf12d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13047", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1731/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "1870c50f-ac1b-4abb-8dd3-7904be942f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13046", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1730/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "5a789cb0-699c-405f-9fec-9b6d7ea38bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13045", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1729/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "e3032b84-873e-41bc-a5cf-060a4d80430a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13044", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1728/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "a9d184c6-68f7-4b46-b90f-4ccbf5119713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13043", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1727/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "2aa4d6a6-c7ec-40d9-baf0-9475fc800286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13040", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113744992650690013", "content": "", "creation_timestamp": "2024-12-31T02:07:30.310808Z"}, {"uuid": "a397bd01-e774-41fd-be8e-f8b3ea9dbef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113746644001441615", "content": "", "creation_timestamp": "2024-12-31T09:07:28.047748Z"}, {"uuid": "20754c74-84fb-4fe4-95a0-3a5cf9f31b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13061", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113747157856589140", "content": "", "creation_timestamp": "2024-12-31T11:18:08.840390Z"}, {"uuid": "f30a498a-88f3-411d-a92c-da1ff1e5a605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13040", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113747171252357787", "content": "", "creation_timestamp": "2024-12-31T11:21:32.975044Z"}, {"uuid": "32e4aa80-653b-4a43-8ae9-744bdacdc14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6360c159-b674e73894b2931a", "content": "", "creation_timestamp": "2025-01-07T10:37:14.946743Z"}, {"uuid": "d64d64ed-c746-4c06-82ca-0cd74332cc04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13215", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113832446157121312", "content": "", "creation_timestamp": "2025-01-15T12:48:04.850364Z"}, {"uuid": "01f91ce3-baef-4573-8923-153ded77f471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13194", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795365706505025", "content": "", "creation_timestamp": "2025-01-08T23:38:02.097406Z"}, {"uuid": "ba722e2f-db6d-4ad9-90dd-03d79a9cc6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13274", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800066917395216", "content": "", "creation_timestamp": "2025-01-09T19:33:36.877783Z"}, {"uuid": "10f61eda-1130-44b3-ad68-d9327a9fe439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13187", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfapmiwglj2e", "content": "", "creation_timestamp": "2025-01-08T17:43:07.644007Z"}, {"uuid": "6ec7fc6a-50ff-47a6-938b-724d1e5fea13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13195", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795365742691993", "content": "", "creation_timestamp": "2025-01-08T23:38:02.545702Z"}, {"uuid": "d69fd18a-5b83-422a-80ad-de2e4d940a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13275", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800066932309941", "content": "", "creation_timestamp": "2025-01-09T19:33:37.322285Z"}, {"uuid": "d0401d1a-4c20-4748-b549-9ef34fe334b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13070", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113747934429813549", "content": "", "creation_timestamp": "2024-12-31T14:35:38.370832Z"}, {"uuid": "6910ad36-799d-424a-9140-8e974c8cda32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13072", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113748061784746161", "content": "", "creation_timestamp": "2024-12-31T15:08:01.650822Z"}, {"uuid": "8a934374-2336-437d-bfb2-e1aea132ecd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13070", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemdnc6usk22", "content": "", "creation_timestamp": "2024-12-31T15:15:41.590779Z"}, {"uuid": "9503f872-aa50-4b8c-9baa-151950509309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13072", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemdnedfhx2i", "content": "", "creation_timestamp": "2024-12-31T15:15:44.178682Z"}, {"uuid": "6adb772c-42dd-4d57-bda9-eab62876f564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13074", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdkrkxs25", "content": "", "creation_timestamp": "2024-12-31T17:15:24.616005Z"}, {"uuid": "6220bc62-1a59-4693-8fca-01ad1093bcd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13075", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113748649216338838", "content": "", "creation_timestamp": "2024-12-31T17:37:25.071433Z"}, {"uuid": "2e6a2bb9-1848-49c3-bce6-1965c583b1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13076", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113748743620589448", "content": "", "creation_timestamp": "2024-12-31T18:01:25.509247Z"}, {"uuid": "c660e6d8-41e1-4c24-ad0b-9feb621b50a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13075", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemnp5lzyh25", "content": "", "creation_timestamp": "2024-12-31T18:15:34.141688Z"}, {"uuid": "7cc5d5bf-67f9-4442-ada5-17e55fe951f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13076", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemnpa5hxm22", "content": "", "creation_timestamp": "2024-12-31T18:15:37.318725Z"}, {"uuid": "4fa6a0f4-b286-466c-acdb-5ce42ee824af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13077", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113748869835847560", "content": "", "creation_timestamp": "2024-12-31T18:33:31.378937Z"}, {"uuid": "e1940054-ea1a-46d8-9758-04cc7193438a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13078", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749010277750766", "content": "", "creation_timestamp": "2024-12-31T19:09:14.356267Z"}, {"uuid": "23b584fa-4128-40ff-ac91-1947b21a7a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13077", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemr2bml5r25", "content": "", "creation_timestamp": "2024-12-31T19:15:28.931674Z"}, {"uuid": "8577ea70-2177-4590-89a4-88af85a6304f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13078", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemr2duie422", "content": "", "creation_timestamp": "2024-12-31T19:15:31.494090Z"}, {"uuid": "f8df2195-7d55-4ea0-b21a-f7eadef107f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13079", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749118548440059", "content": "", "creation_timestamp": "2024-12-31T19:36:46.386731Z"}, {"uuid": "1cfcf2ab-d703-411f-83b0-bfb2142b0356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13080", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749246952251798", "content": "", "creation_timestamp": "2024-12-31T20:09:25.768434Z"}, {"uuid": "42406112-fc79-4fb6-b387-2efbb7380492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13079", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemug2qbr225", "content": "", "creation_timestamp": "2024-12-31T20:15:45.879611Z"}, {"uuid": "cd533b2a-24ee-4ba7-8d72-d1545088a67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13080", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemug5gtwi2m", "content": "", "creation_timestamp": "2024-12-31T20:15:49.342722Z"}, {"uuid": "6b3514fb-65ec-4e96-b6fb-5680a0dd0c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13081", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749346543038805", "content": "", "creation_timestamp": "2024-12-31T20:34:45.546197Z"}, {"uuid": "7df8b469-3854-41aa-936a-4a9863387c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13082", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749472077824493", "content": "", "creation_timestamp": "2024-12-31T21:06:40.948604Z"}, {"uuid": "5fc22a9e-7178-4557-8c2f-03ca852aed8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13081", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemxqpwaeh2i", "content": "", "creation_timestamp": "2024-12-31T21:15:24.729216Z"}, {"uuid": "d26371d0-081d-47d7-bcd3-93c2f3edcc5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13082", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemxqs5qh525", "content": "", "creation_timestamp": "2024-12-31T21:15:27.100369Z"}, {"uuid": "042d4c7c-b3b3-42dd-9422-a1a3374c7d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13083", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749597482966429", "content": "", "creation_timestamp": "2024-12-31T21:38:34.549918Z"}, {"uuid": "bb4f74d3-aafe-45cd-873e-4409df6d2cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13084", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749691589703038", "content": "", "creation_timestamp": "2024-12-31T22:02:30.448150Z"}, {"uuid": "75a042e4-318f-4647-aae4-cdc0834130c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13083", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3len33ztw2z2m", "content": "", "creation_timestamp": "2024-12-31T22:15:25.268723Z"}, {"uuid": "f130a7ae-fe00-44a5-8173-cfcb1069042c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13084", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3len344s7rp25", "content": "", "creation_timestamp": "2024-12-31T22:15:28.647647Z"}, {"uuid": "dcb43645-b665-47b5-84c0-a20d15e40e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13085", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113749829734501624", "content": "", "creation_timestamp": "2024-12-31T22:37:38.390712Z"}, {"uuid": "ec1bc08d-3bbb-41b8-bd49-4c2e0aaff5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13085", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3len6hf2m662i", "content": "", "creation_timestamp": "2024-12-31T23:15:27.233620Z"}, {"uuid": "82f8614b-346d-448a-a972-d2fb80fd81bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13276", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800066948393639", "content": "", "creation_timestamp": "2025-01-09T19:33:37.386289Z"}, {"uuid": "c568c6ba-98ff-46d2-9e1e-6271b8115b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13277", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800066962592374", "content": "", "creation_timestamp": "2025-01-09T19:33:37.527510Z"}, {"uuid": "61ec6059-7441-4466-b5e8-84f8f3ff6c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbecqinxs2g", "content": "", "creation_timestamp": "2025-01-08T23:53:28.716136Z"}, {"uuid": "570269fe-b660-428d-a76a-661c02612ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbecrc7jd2h", "content": "", "creation_timestamp": "2025-01-08T23:53:31.271862Z"}, {"uuid": "0c63491f-5878-4a7e-806c-3a922b51f209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13092", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113757835892691661", "content": "", "creation_timestamp": "2025-01-02T08:33:42.599901Z"}, {"uuid": "446598ac-3d2e-401c-b801-c959f0114e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13093", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113757976156855064", "content": "", "creation_timestamp": "2025-01-02T09:09:22.950523Z"}, {"uuid": "66ff1b13-c172-4cd5-9eab-824056dfac13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13092", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqqhomdea2m", "content": "", "creation_timestamp": "2025-01-02T09:15:43.676476Z"}, {"uuid": "c4f939b7-ed01-4a1c-832b-458253147941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13093", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqqhqzhtf2k", "content": "", "creation_timestamp": "2025-01-02T09:15:46.290421Z"}, {"uuid": "f6900a34-62ae-448d-9dbe-4dd37c87a2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113758017148068621", "content": "", "creation_timestamp": "2025-01-02T09:19:48.385422Z"}, {"uuid": "105d995c-2613-41e8-8f4a-aad1879b74a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113758032036152453", "content": "", "creation_timestamp": "2025-01-02T09:23:35.496790Z"}, {"uuid": "250096f6-7089-4403-a14b-cc9c6bcc3bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13092", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqrokmsn52u", "content": "", "creation_timestamp": "2025-01-02T09:37:28.213629Z"}, {"uuid": "9571c072-0c9d-4a7a-b190-3ba20eeb2376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13093", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqrokw4p42i", "content": "", "creation_timestamp": "2025-01-02T09:37:28.802909Z"}, {"uuid": "c09569ad-8e71-4d81-9eab-c536e3aa974a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13103", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113758211078784435", "content": "", "creation_timestamp": "2025-01-02T10:09:07.555825Z"}, {"uuid": "fb7a4c7a-fa38-4b97-9a5b-12d058a8bb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13102", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqtsr2ygw2k", "content": "", "creation_timestamp": "2025-01-02T10:15:36.887003Z"}, {"uuid": "0582ffa3-2a6a-43cd-aa38-00fee2b1d4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13103", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqtstiqlb22", "content": "", "creation_timestamp": "2025-01-02T10:15:39.633373Z"}, {"uuid": "95b57dd2-d9bb-41ab-91f3-bc2b4ddd051c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13104", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113758331090881597", "content": "", "creation_timestamp": "2025-01-02T10:39:38.816145Z"}, {"uuid": "6e436ef8-1b04-43c7-a1fa-8f0f5c3d0bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqvcv67yp2y", "content": "", "creation_timestamp": "2025-01-02T10:42:32.379861Z"}, {"uuid": "aa1d66e5-9af1-42e4-a39e-9174bb156d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13104", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqx5kgo6422", "content": "", "creation_timestamp": "2025-01-02T11:15:20.252293Z"}, {"uuid": "51498735-7b96-43c5-aacc-0050d9990c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13105", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqx5mpdte22", "content": "", "creation_timestamp": "2025-01-02T11:15:22.458950Z"}, {"uuid": "82aa371c-090d-4e17-8cc7-3d6b7244cbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13106", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113758545638948376", "content": "", "creation_timestamp": "2025-01-02T11:34:12.484221Z"}, {"uuid": "081099ae-44c5-422c-957c-98ebcd028636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqyoc725o2g", "content": "", "creation_timestamp": "2025-01-02T11:42:35.653151Z"}, {"uuid": "74622042-eacf-43bf-b397-fb3406ec80c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqyocj43b2q", "content": "", "creation_timestamp": "2025-01-02T11:42:36.208427Z"}, {"uuid": "9dd42a98-bfe1-4303-b25e-da7caf28bc9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbecr6r632h", "content": "", "creation_timestamp": "2025-01-08T23:53:30.724979Z"}, {"uuid": "d31086e1-8965-4748-9d99-7b77a9bb9510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk73o242b", "content": "", "creation_timestamp": "2025-01-09T19:38:45.904100Z"}, {"uuid": "c6e8d29d-4a30-4445-b294-50b9c8bb7ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7shna2h", "content": "", "creation_timestamp": "2025-01-09T19:38:48.556431Z"}, {"uuid": "234180e5-2424-408f-bd5b-32798ac6a90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13196", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795460167901479", "content": "", "creation_timestamp": "2025-01-09T00:02:03.409244Z"}, {"uuid": "99c33d5a-4816-4938-91a2-4e9c436912a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7esxa2e", "content": "", "creation_timestamp": "2025-01-09T19:38:46.559464Z"}, {"uuid": "33c62fd9-44f3-452f-8dd3-5e6f1536c610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13197", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795460182569557", "content": "", "creation_timestamp": "2025-01-09T00:02:04.260483Z"}, {"uuid": "3d5e99d7-b38b-4d45-b935-232efc527001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7i5yw2q", "content": "", "creation_timestamp": "2025-01-09T19:38:47.028237Z"}, {"uuid": "af03c4cc-a466-412b-a204-3447f665fde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkak2ea2e", "content": "", "creation_timestamp": "2025-01-09T19:38:52.150616Z"}, {"uuid": "b1bb0c27-b878-4f93-9856-ecebb5c6d60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkanfuo2e", "content": "", "creation_timestamp": "2025-01-09T19:38:52.620213Z"}, {"uuid": "5a8aa96d-7a9a-4db6-89ac-52d8e9a234fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13196", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbfljz7dg2k", "content": "", "creation_timestamp": "2025-01-09T00:16:17.424315Z"}, {"uuid": "7427d5de-972d-45c0-acaa-540e6c63cd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7lmpj2y", "content": "", "creation_timestamp": "2025-01-09T19:38:47.553796Z"}, {"uuid": "b3a2cd29-91c8-431f-a0cf-1ef2604abd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7ovco2e", "content": "", "creation_timestamp": "2025-01-09T19:38:48.069303Z"}, {"uuid": "4fc30c82-9704-4ee8-a183-4649c0a56c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7vq5j2i", "content": "", "creation_timestamp": "2025-01-09T19:38:49.048556Z"}, {"uuid": "3ea3df61-b5bf-4b35-a1b0-4499bbec0dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgka7plt2g", "content": "", "creation_timestamp": "2025-01-09T19:38:50.578004Z"}, {"uuid": "f7258061-8275-47de-a16e-e37361d19aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkade7h2k", "content": "", "creation_timestamp": "2025-01-09T19:38:51.104289Z"}, {"uuid": "fe58e531-6562-4d00-8d8c-6a06c4146bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkauqvi2w", "content": "", "creation_timestamp": "2025-01-09T19:38:53.691660Z"}, {"uuid": "67ff08a4-c3ed-4e29-a4ea-7996c0943f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13106", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nuw3le2m", "content": "", "creation_timestamp": "2025-01-02T12:18:09.239345Z"}, {"uuid": "d90b2a0c-7a64-46d1-85d9-11ddbd50b056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13107", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nxg7jl25", "content": "", "creation_timestamp": "2025-01-02T12:18:11.777492Z"}, {"uuid": "5ce76118-780e-41cf-a978-5521c3af1ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13194", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbflf2f262a", "content": "", "creation_timestamp": "2025-01-09T00:16:12.250108Z"}, {"uuid": "be446001-73bd-4b9f-b687-6917544f0118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7yzmj2i", "content": "", "creation_timestamp": "2025-01-09T19:38:49.540153Z"}, {"uuid": "27ee5664-3b97-4d93-87f9-755c0107b2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkagqm72k", "content": "", "creation_timestamp": "2025-01-09T19:38:51.641009Z"}, {"uuid": "6f08f2b0-be7f-4e75-ad19-d6b8d0d19c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13195", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbflhghuo2k", "content": "", "creation_timestamp": "2025-01-09T00:16:14.949867Z"}, {"uuid": "5f8e986b-2a1a-47b7-9c19-5efe3a7acf24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgka4cjw2q", "content": "", "creation_timestamp": "2025-01-09T19:38:50.046893Z"}, {"uuid": "ade7e7fe-7592-4f24-a4b7-c8b102b66cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13215", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtxbh3hs2r", "content": "", "creation_timestamp": "2025-01-15T13:15:59.475129Z"}, {"uuid": "f816ffa6-3d67-4952-9e97-f640a8705ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13197", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbflm4vw42d", "content": "", "creation_timestamp": "2025-01-09T00:16:19.695516Z"}, {"uuid": "c47e41af-8521-4e51-b074-076b07b90aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkardhx2k", "content": "", "creation_timestamp": "2025-01-09T19:38:53.157316Z"}, {"uuid": "141f6dfb-9573-4c6b-8603-7348e99404c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkaya7y2w", "content": "", "creation_timestamp": "2025-01-09T19:38:54.141880Z"}, {"uuid": "df6f850d-7954-4eac-9a3e-c76eff3df7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13199", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795580705105523", "content": "", "creation_timestamp": "2025-01-09T00:32:43.854216Z"}, {"uuid": "311faa2c-64ca-4f56-b18c-3e71e0073984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13198", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795580688818781", "content": "", "creation_timestamp": "2025-01-09T00:32:44.024391Z"}, {"uuid": "2ee22703-1156-4f4d-aaa3-c646e634e1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13278", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800125966170821", "content": "", "creation_timestamp": "2025-01-09T19:48:37.850429Z"}, {"uuid": "ebd20e9e-6803-41d5-8643-0b0c86ebb92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13348", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfofbyu7gh2f", "content": "", "creation_timestamp": "2025-01-14T04:15:34.618807Z"}, {"uuid": "f7517847-12f9-4ac7-90ea-854cc108b7a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13279", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800125980605839", "content": "", "creation_timestamp": "2025-01-09T19:48:38.137781Z"}, {"uuid": "944cd15a-6eda-48be-9923-49d785bd519c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13041", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc4zvpojh27", "content": "", "creation_timestamp": "2025-01-09T07:15:55.928230Z"}, {"uuid": "74642b13-b2cb-49e6-b875-e7d71f76657c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbho4zb3o2e", "content": "", "creation_timestamp": "2025-01-09T00:53:32.161387Z"}, {"uuid": "921b7b45-cadc-4e67-88c1-6a304c71d7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13286", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800228510992707", "content": "", "creation_timestamp": "2025-01-09T20:14:42.628275Z"}, {"uuid": "65be57e3-2c83-4957-a764-4f2c2f00e4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbho5osxc2b", "content": "", "creation_timestamp": "2025-01-09T00:53:32.924301Z"}, {"uuid": "5cc7dde5-22d1-4bd6-863f-1b819d273f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13285", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800228496231503", "content": "", "creation_timestamp": "2025-01-09T20:14:42.781949Z"}, {"uuid": "6a1dc08d-a902-4936-887b-f47d7822525f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbho5s4b725", "content": "", "creation_timestamp": "2025-01-09T00:53:33.424915Z"}, {"uuid": "bd67fbac-0789-4f4a-8466-c9d4c2e42394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbho5vbd52k", "content": "", "creation_timestamp": "2025-01-09T00:53:33.940000Z"}, {"uuid": "68891d59-995a-4cbd-9677-c495fdb75ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800228527156900", "content": "", "creation_timestamp": "2025-01-09T20:14:43.444259Z"}, {"uuid": "a406ba8d-cbcf-4cfd-853c-27e911756bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13264", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimyb5j227", "content": "", "creation_timestamp": "2025-01-09T20:16:06.828218Z"}, {"uuid": "2fc36cce-948a-433b-8fb9-ef0b5bef410d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13108", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler5ucvind2a", "content": "", "creation_timestamp": "2025-01-02T13:15:26.990523Z"}, {"uuid": "ef33b7fa-59df-4930-bd1d-7f7c3ae623f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13109", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler5ufdlyx2m", "content": "", "creation_timestamp": "2025-01-02T13:15:29.139748Z"}, {"uuid": "17f96800-644e-46a3-bf00-f4bf2719f4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13260", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimmwvfb2x", "content": "", "creation_timestamp": "2025-01-09T20:15:55.000806Z"}, {"uuid": "08f768ea-55ab-4c16-a14c-08ce97f683c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13110", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerb7uehee2k", "content": "", "creation_timestamp": "2025-01-02T14:15:35.112155Z"}, {"uuid": "b3a679d3-e539-4039-a56d-686fcacc54ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13111", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerb7wtrq62e", "content": "", "creation_timestamp": "2025-01-02T14:15:37.744786Z"}, {"uuid": "5f63995b-3051-4b0f-b78f-1ec65b9d9907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lercqkrnib2i", "content": "", "creation_timestamp": "2025-01-02T14:42:50.083922Z"}, {"uuid": "dad771cc-e4d1-4931-9ee0-3022e0efec47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lercqlg5rt2r", "content": "", "creation_timestamp": "2025-01-02T14:42:53.702002Z"}, {"uuid": "b630ce7b-1257-4362-aac5-1ab2424f8bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13110", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lercqlwnci2h", "content": "", "creation_timestamp": "2025-01-02T14:42:57.098322Z"}, {"uuid": "b7d4466f-b2f5-4055-bc30-1149503d5eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13261", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimqrxrg2a", "content": "", "creation_timestamp": "2025-01-09T20:15:58.846044Z"}, {"uuid": "5f16d260-e285-457b-b430-f0a65c52eddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13107", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759564347350044", "content": "", "creation_timestamp": "2025-01-02T15:53:17.065162Z"}, {"uuid": "668ccd98-7e93-40f2-ab96-70faf2cad702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lespfct4fc27", "content": "", "creation_timestamp": "2025-01-03T04:01:50.083486Z"}, {"uuid": "e46dd521-3dee-4bfa-95e4-090df2c42998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3less57l3n22w", "content": "", "creation_timestamp": "2025-01-03T04:51:01.260617Z"}, {"uuid": "c85baedb-080e-4b4c-8166-8b5d36ee0a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-13062", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3leswxtg7dk2j", "content": "", "creation_timestamp": "2025-01-03T06:17:27.918100Z"}, {"uuid": "9f6528d9-d4b5-474f-b81e-3617d1e337af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3letf3uq72y2q", "content": "", "creation_timestamp": "2025-01-03T10:30:15.902668Z"}, {"uuid": "c0968348-0372-4895-85f3-d139b3dfab3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3letozqo5u42j", "content": "", "creation_timestamp": "2025-01-03T13:28:02.190744Z"}, {"uuid": "a5a9245d-a3ad-4c59-b025-86c2964e26a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13129", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113766580847775451", "content": "", "creation_timestamp": "2025-01-03T21:37:40.144647Z"}, {"uuid": "d7d89bde-ea28-40d7-be1e-c508764926aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13130", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113773053753439191", "content": "", "creation_timestamp": "2025-01-05T01:03:48.736343Z"}, {"uuid": "09dc67eb-dce6-4de5-a337-181344d8ed50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13130", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lexgzrxokf25", "content": "", "creation_timestamp": "2025-01-05T01:15:32.208301Z"}, {"uuid": "d8157909-4073-4399-9466-3ca9211a7766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13131", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113773522572719102", "content": "", "creation_timestamp": "2025-01-05T03:03:02.571932Z"}, {"uuid": "3764db84-7e38-4f21-a933-985a172e6ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lexpkxueqi2b", "content": "", "creation_timestamp": "2025-01-05T03:48:44.560578Z"}, {"uuid": "706e5566-8fc0-49c2-849e-e400b95d6e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13132", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113773900515803514", "content": "", "creation_timestamp": "2025-01-05T04:39:09.460526Z"}, {"uuid": "ca5279bf-73b0-4a6b-b538-a70ff8ce92f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13133", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113773999758967309", "content": "", "creation_timestamp": "2025-01-05T05:04:24.412257Z"}, {"uuid": "42b2d586-b997-4384-92a9-aed0b6c238ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13134", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113774711733188942", "content": "", "creation_timestamp": "2025-01-05T08:05:27.561575Z"}, {"uuid": "fa226fe3-1fa4-4857-82b4-d2d16c2d02e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13134", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ley6ir3rdc2k", "content": "", "creation_timestamp": "2025-01-05T08:15:30.623832Z"}, {"uuid": "7c56d9f5-fe9e-4c14-902d-8ddc5b200767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13135", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113774829307776648", "content": "", "creation_timestamp": "2025-01-05T08:35:21.615225Z"}, {"uuid": "1bcf56a3-62ca-4391-811a-d398705fb61f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ley7q7tzu52k", "content": "", "creation_timestamp": "2025-01-05T08:37:34.667353Z"}, {"uuid": "14299e60-030e-4c01-888d-3c5e4b666064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13136", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113774960384335568", "content": "", "creation_timestamp": "2025-01-05T09:08:41.663698Z"}, {"uuid": "b6a21c84-777b-4d52-a9bf-8ea63c74bd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13135", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leybttrkex2m", "content": "", "creation_timestamp": "2025-01-05T09:15:23.720563Z"}, {"uuid": "261849cc-4d64-4446-af04-4ed92041395d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13136", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leybtwwmqx2m", "content": "", "creation_timestamp": "2025-01-05T09:15:27.041908Z"}, {"uuid": "8a8460d1-3e14-4eaf-8ff8-deb07a0c3249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13135", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leydekaloe2e", "content": "", "creation_timestamp": "2025-01-05T09:42:37.845776Z"}, {"uuid": "ccfa137f-79bf-4b4f-b0fa-76813e672c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leydekqlfe2e", "content": "", "creation_timestamp": "2025-01-05T09:42:38.471146Z"}, {"uuid": "6cfd39e2-7a1e-4f70-9c1f-37ccb1a392c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13137", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113775181358738152", "content": "", "creation_timestamp": "2025-01-05T10:04:53.454738Z"}, {"uuid": "5235cd97-6534-49a8-b0d6-30ce93de811e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13137", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leyf7gmmhd2o", "content": "", "creation_timestamp": "2025-01-05T10:15:33.732755Z"}, {"uuid": "0a649e39-e6b2-4c29-8c5e-39f4857d7df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13138", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113775293668984827", "content": "", "creation_timestamp": "2025-01-05T10:33:27.091826Z"}, {"uuid": "80c8e442-00b2-4441-9f99-5e4a205f569e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leygyx3vgi2k", "content": "", "creation_timestamp": "2025-01-05T10:47:43.672949Z"}, {"uuid": "01e10d00-703a-42b8-ba71-3f1043bc44b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13139", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113775419724463486", "content": "", "creation_timestamp": "2025-01-05T11:05:31.028095Z"}, {"uuid": "c2485f34-7035-4368-b0ae-9329baa8d246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13138", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leyikrsmra2k", "content": "", "creation_timestamp": "2025-01-05T11:15:35.827912Z"}, {"uuid": "709644d7-e573-4cce-8540-03314478c351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13139", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leyikufl2q2k", "content": "", "creation_timestamp": "2025-01-05T11:15:38.455379Z"}, {"uuid": "cdbe287a-2b6c-474e-9c99-fb8433db78c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113775527773279774", "content": "", "creation_timestamp": "2025-01-05T11:32:59.262960Z"}, {"uuid": "9d8ffb9d-24f5-47bd-851a-9be315b6ed6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13138", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leykedrxns2e", "content": "", "creation_timestamp": "2025-01-05T11:47:47.290496Z"}, {"uuid": "edce2644-5a5a-48e3-848a-6b2557acb757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leykee6c5y2e", "content": "", "creation_timestamp": "2025-01-05T11:47:47.933451Z"}, {"uuid": "2587479b-da55-4830-bbea-4a9fb95c913d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leylvnqz4f2a", "content": "", "creation_timestamp": "2025-01-05T12:15:21.928091Z"}, {"uuid": "3662a56e-0e95-4ea7-9912-192375c35a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leynpq4ohf2w", "content": "", "creation_timestamp": "2025-01-05T12:47:50.555495Z"}, {"uuid": "30bbcf6b-baa2-45b6-8ce0-f475176a7aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113776257997595115", "content": "", "creation_timestamp": "2025-01-05T14:38:41.679259Z"}, {"uuid": "2530a8cf-93ed-41d2-9a28-eab1d15906f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leyvxorzav2o", "content": "", "creation_timestamp": "2025-01-05T15:15:27.659553Z"}, {"uuid": "e04a782d-bb7b-4d70-8d50-05e9849d6473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leyydu2r2q2r", "content": "", "creation_timestamp": "2025-01-05T15:58:03.551757Z"}, {"uuid": "af397b2a-35fb-4a75-a153-a6ea0e2fb1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778267937874515", "content": "", "creation_timestamp": "2025-01-05T23:09:50.848670Z"}, {"uuid": "af994ec0-4f5e-4d3e-87e6-66d0d5204688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezqrzdydp2m", "content": "", "creation_timestamp": "2025-01-05T23:15:28.362546Z"}, {"uuid": "42886997-92cd-45ae-9d91-25492d52040e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778357658231168", "content": "", "creation_timestamp": "2025-01-05T23:32:39.875272Z"}, {"uuid": "feb58298-cdf9-4ce7-8a99-1df8b375ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezsuajuc52r", "content": "", "creation_timestamp": "2025-01-05T23:52:30.347021Z"}, {"uuid": "d1bc41cd-3352-4d05-b7a1-63942dec08ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778519374692503", "content": "", "creation_timestamp": "2025-01-06T00:13:49.251198Z"}, {"uuid": "b99a87ed-0940-412e-9859-4b4f51ce5c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezu5edbeu2i", "content": "", "creation_timestamp": "2025-01-06T00:15:30.114073Z"}, {"uuid": "223d7aac-8271-47fe-9ab7-bfd495954d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezu5gqkck25", "content": "", "creation_timestamp": "2025-01-06T00:15:32.518566Z"}, {"uuid": "fd5dd533-ee13-4fbb-9771-34369334f8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778614006646037", "content": "", "creation_timestamp": "2025-01-06T00:37:51.466701Z"}, {"uuid": "29cf2444-d642-4581-a453-0bf9809e6173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezwilq2fs2e", "content": "", "creation_timestamp": "2025-01-06T00:57:34.308363Z"}, {"uuid": "329af61b-5994-40a9-a8d5-3ef9087bfa64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezwilzoz62y", "content": "", "creation_timestamp": "2025-01-06T00:57:34.946154Z"}, {"uuid": "9a147ade-0a90-444c-9cf2-8ce2f9e208f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezxihyv4t25", "content": "", "creation_timestamp": "2025-01-06T01:15:24.332548Z"}, {"uuid": "3fa65f8d-938a-4f52-838a-04e8d5aa7ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezyq5t3eg2h", "content": "", "creation_timestamp": "2025-01-06T01:37:35.749415Z"}, {"uuid": "cc88f66a-63e1-4b56-8334-248599060459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13084", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113781959526215734", "content": "", "creation_timestamp": "2025-01-06T14:48:40.203826Z"}, {"uuid": "fa411088-fc45-42f9-a83a-37c1d3ecbcff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13085", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113781959589365669", "content": "", "creation_timestamp": "2025-01-06T14:48:41.099082Z"}, {"uuid": "801b4f54-0a3b-4afd-ac44-3ef7d17c1373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3f6yodxw2e", "content": "", "creation_timestamp": "2025-01-06T14:53:18.869478Z"}, {"uuid": "954b3d22-592a-4c26-a90c-b019d07d53af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13085", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3f6yro3y2y", "content": "", "creation_timestamp": "2025-01-06T14:53:19.407861Z"}, {"uuid": "077299a8-4767-4272-8e9f-2b696cff443d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3gcrd2562e", "content": "", "creation_timestamp": "2025-01-06T15:13:18.537910Z"}, {"uuid": "95a20c07-e0ee-458e-bee3-7688b4227650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3gcrm44p2h", "content": "", "creation_timestamp": "2025-01-06T15:13:19.226469Z"}, {"uuid": "988d371c-9f34-4fe3-884b-a4cc8c2966fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13078", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113782195356031355", "content": "", "creation_timestamp": "2025-01-06T15:48:39.135357Z"}, {"uuid": "7efe6420-b59c-429a-a775-a1e14485e848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13079", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113782195423303538", "content": "", "creation_timestamp": "2025-01-06T15:48:42.448728Z"}, {"uuid": "d9f6bd11-81a0-4b54-ad0f-3a0afc48a1fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13262", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimt5bzj2x", "content": "", "creation_timestamp": "2025-01-09T20:16:01.264128Z"}, {"uuid": "a04be2f8-02db-45d6-9919-2c9b654ce343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13263", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimvng6c2e", "content": "", "creation_timestamp": "2025-01-09T20:16:03.858422Z"}, {"uuid": "13448b0b-ced9-4c3a-827c-81c6a918b770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lftwfxd45224", "content": "", "creation_timestamp": "2025-01-16T09:05:19.205764Z"}, {"uuid": "9a2ea27e-b7a6-4a1f-9eae-5942d2889079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lftwfxd45224", "content": "", "creation_timestamp": "2025-01-16T09:05:19.254018Z"}, {"uuid": "460885d7-0c08-4fc5-b1ec-019a64c30fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lftwfxd45224", "content": "", "creation_timestamp": "2025-01-16T09:05:19.299271Z"}, {"uuid": "b9d336e5-ebf4-4530-8e31-46b593e5036d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13265", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdin2vibb2f", "content": "", "creation_timestamp": "2025-01-09T20:16:09.339114Z"}, {"uuid": "5d2d9b61-f0bd-4fab-b908-2200cec47600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lftwjio2kc2n", "content": "", "creation_timestamp": "2025-01-16T09:07:19.089647Z"}, {"uuid": "ab5a8deb-9368-47b2-bd58-b34eff3a66ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lftwjio2kc2n", "content": "", "creation_timestamp": "2025-01-16T09:07:19.131587Z"}, {"uuid": "e8cbbb12-d0e3-4f84-b3e7-234ede13677d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lftwjio2kc2n", "content": "", "creation_timestamp": "2025-01-16T09:07:19.173510Z"}, {"uuid": "6082f185-630e-4c38-be70-4d1725ca4e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13266", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdin5daor2x", "content": "", "creation_timestamp": "2025-01-09T20:16:11.961677Z"}, {"uuid": "afebb16a-7b95-4c2d-a3ca-c94548052559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13287", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiotbcqv2k", "content": "", "creation_timestamp": "2025-01-09T20:17:08.464502Z"}, {"uuid": "09c14721-4401-414d-a570-59c5a521593f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13267", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdin7nijj2f", "content": "", "creation_timestamp": "2025-01-09T20:16:14.325097Z"}, {"uuid": "fb8d7789-2836-4d4f-9981-472359b04290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13268", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinc6jr227", "content": "", "creation_timestamp": "2025-01-09T20:16:17.035388Z"}, {"uuid": "6fdae266-6472-4c0d-b08e-a9ac35787452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13279", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdio5ej6o2a", "content": "", "creation_timestamp": "2025-01-09T20:16:45.539045Z"}, {"uuid": "0ec35597-5d09-4fc5-9cbb-3746e595f07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13269", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinevjge2m", "content": "", "creation_timestamp": "2025-01-09T20:16:19.880432Z"}, {"uuid": "c8d389f3-bd1b-4336-8beb-008203674ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13270", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinhg7el22", "content": "", "creation_timestamp": "2025-01-09T20:16:22.549584Z"}, {"uuid": "8216f7c2-d4ce-46fe-91eb-d2efd109c451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13271", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinjnayg2a", "content": "", "creation_timestamp": "2025-01-09T20:16:24.821388Z"}, {"uuid": "9051ecdf-9c47-4c75-90f9-b30e5918d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13281", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiocxkb32f", "content": "", "creation_timestamp": "2025-01-09T20:16:51.332798Z"}, {"uuid": "7ec9cefe-3b9e-48d4-bc13-0276ecb3341e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13272", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinlvndz2f", "content": "", "creation_timestamp": "2025-01-09T20:16:27.230799Z"}, {"uuid": "9d397397-ed0e-4253-98eb-1ebc746af027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13284", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiokhsx22e", "content": "", "creation_timestamp": "2025-01-09T20:16:59.352867Z"}, {"uuid": "ea29a496-2d3d-4ecf-bbe5-684b5ee7d5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13273", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdino562v2i", "content": "", "creation_timestamp": "2025-01-09T20:16:29.513277Z"}, {"uuid": "feb35c06-ddfd-44d5-8537-0fd08101a49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13274", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinqkmxw2a", "content": "", "creation_timestamp": "2025-01-09T20:16:32.101625Z"}, {"uuid": "d18ed2b1-8484-4dc1-859c-ed1fba4a0f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13275", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdint232r2x", "content": "", "creation_timestamp": "2025-01-09T20:16:34.731921Z"}, {"uuid": "beeb7e84-45a1-476d-9248-72e39e1ce622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13276", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinv6eck2e", "content": "", "creation_timestamp": "2025-01-09T20:16:36.950702Z"}, {"uuid": "d4af3955-070d-48eb-b16e-cbf7ce07d1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13285", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdionhi4k27", "content": "", "creation_timestamp": "2025-01-09T20:17:02.434335Z"}, {"uuid": "f9a765ae-f0fc-413d-aa80-78ab9f5adb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316675395599", "content": "", "creation_timestamp": "2025-01-10T17:48:54.353227Z"}, {"uuid": "11f9d28d-f0ef-49f4-b1a7-d6fe1843293c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13198", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbivzungv2d", "content": "", "creation_timestamp": "2025-01-09T01:15:50.871154Z"}, {"uuid": "e0ff0cc8-83e5-4939-9c6a-ea292e8b9aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13199", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbiw4g34y2e", "content": "", "creation_timestamp": "2025-01-09T01:15:53.513268Z"}, {"uuid": "49bcf4a6-7194-44e2-97f0-dd96ddbde006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13277", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiny3nob25", "content": "", "creation_timestamp": "2025-01-09T20:16:39.947333Z"}, {"uuid": "0a044b2d-9341-4c03-9130-23f74ac37ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13278", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdio35uar25", "content": "", "creation_timestamp": "2025-01-09T20:16:43.342248Z"}, {"uuid": "09bad3ec-0ef5-4f5e-94ea-669d3175bd9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316847032256", "content": "", "creation_timestamp": "2025-01-10T17:48:58.737344Z"}, {"uuid": "11542e35-4309-4a97-b808-3fe591b4ce55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13351", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831720368151379", "content": "", "creation_timestamp": "2025-01-15T09:43:30.237856Z"}, {"uuid": "96f3c697-a8e0-4c72-8282-914678861237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13280", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdio7ojl72l", "content": "", "creation_timestamp": "2025-01-09T20:16:47.938370Z"}, {"uuid": "7e79ab99-ec20-4232-9932-65f1d2477e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316779208716", "content": "", "creation_timestamp": "2025-01-10T17:48:58.922242Z"}, {"uuid": "8d134ad1-172a-4f85-bae2-cca0a71d01da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13355", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837445634562209", "content": "", "creation_timestamp": "2025-01-16T09:59:30.887290Z"}, {"uuid": "01172e28-0d8e-42e8-9a21-c390c210cddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13387", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837445650128637", "content": "", "creation_timestamp": "2025-01-16T09:59:31.207680Z"}, {"uuid": "5b6c1596-fecb-47ea-8a72-ef43208b3127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13282", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiofrkko2a", "content": "", "creation_timestamp": "2025-01-09T20:16:54.345574Z"}, {"uuid": "1d80be08-b63a-4977-883f-fa87a1eca65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13260", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316899670340", "content": "", "creation_timestamp": "2025-01-10T17:48:59.741437Z"}, {"uuid": "f2b2a0e3-bd83-4a3b-b944-1aba465060af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfohebp4qd2k", "content": "", "creation_timestamp": "2025-01-14T04:52:39.918348Z"}, {"uuid": "4306634b-be27-4191-b631-6adf19348352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13283", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiohzyw62a", "content": "", "creation_timestamp": "2025-01-09T20:16:56.970503Z"}, {"uuid": "5fafafe8-9f8f-4dca-b7e3-603e4ec5b0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13264", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316960889012", "content": "", "creation_timestamp": "2025-01-10T17:48:59.930447Z"}, {"uuid": "07e96f70-fbe9-4c99-a5b0-77877f730b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13286", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdior33on2k", "content": "", "creation_timestamp": "2025-01-09T20:17:06.151864Z"}, {"uuid": "1662144e-8c38-4d9a-a09e-d26b5843bda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13278", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317076846873", "content": "", "creation_timestamp": "2025-01-10T17:49:00.956361Z"}, {"uuid": "c3431551-a724-4d91-b3a3-a367698806cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13355", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2e5x5jl2t", "content": "", "creation_timestamp": "2025-01-16T10:15:53.762608Z"}, {"uuid": "fd591e60-8c84-48ef-ae3b-49fce7cad351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13277", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317019369171", "content": "", "creation_timestamp": "2025-01-10T17:49:01.107121Z"}, {"uuid": "b89ecbf7-4a00-4489-bc38-c0042c0bc4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13387", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2ea7h7y2n", "content": "", "creation_timestamp": "2025-01-16T10:15:56.212702Z"}, {"uuid": "34e8c4a7-992f-43c4-8b71-114700acef72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13280", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317190326121", "content": "", "creation_timestamp": "2025-01-10T17:49:02.125841Z"}, {"uuid": "4b67dc1e-28e8-4751-86e9-1e62ead231d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13279", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317130088232", "content": "", "creation_timestamp": "2025-01-10T17:49:02.267723Z"}, {"uuid": "7ab14422-2b56-4ef3-917f-aa2047822bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfvn4knnyk2v", "content": "", "creation_timestamp": "2025-01-17T01:24:20.937846Z"}, {"uuid": "c811d903-6e92-4a8f-81e9-72a167540739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13305", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800305221049241", "content": "", "creation_timestamp": "2025-01-09T20:34:13.217018Z"}, {"uuid": "8779c6e9-59f2-476d-b22f-f8294f2da3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13281", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317256140608", "content": "", "creation_timestamp": "2025-01-10T17:49:02.678431Z"}, {"uuid": "2eaec223-9e62-4a87-b3db-00828f8ff808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13323", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825068415005476", "content": "", "creation_timestamp": "2025-01-14T05:31:49.458555Z"}, {"uuid": "651855c3-7b9b-4d7f-8bc6-1ed7bc292ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfvn4knnyk2v", "content": "", "creation_timestamp": "2025-01-17T01:24:20.854068Z"}, {"uuid": "3a04e02c-97d8-426a-8a33-f8cf4b0d9100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13309", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800305249592802", "content": "", "creation_timestamp": "2025-01-09T20:34:13.450332Z"}, {"uuid": "c715a12c-37aa-4378-b40c-563729118c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13285", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317423339214", "content": "", "creation_timestamp": "2025-01-10T17:49:03.182234Z"}, {"uuid": "41c1f3be-1d7c-40fc-8693-b07e83e5b6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13351", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjve7wxb2h", "content": "", "creation_timestamp": "2025-01-15T10:15:57.695153Z"}, {"uuid": "f0da2cb3-0e46-4beb-b1b4-72eb43e0b6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfvn4knnyk2v", "content": "", "creation_timestamp": "2025-01-17T01:24:20.896437Z"}, {"uuid": "d7f14450-3ddc-485b-a2a8-58499116b9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbk6q3oyt25", "content": "", "creation_timestamp": "2025-01-09T01:38:40.288191Z"}, {"uuid": "47fdfc8e-bf9e-4550-bd62-2af5915060fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbk6qcfe42i", "content": "", "creation_timestamp": "2025-01-09T01:38:41.478784Z"}, {"uuid": "3a06d048-5c9a-4b5c-9708-f7162dc020bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13308", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800305235617163", "content": "", "creation_timestamp": "2025-01-09T20:34:14.112739Z"}, {"uuid": "d405b411-e56c-4e08-987c-0c6e06a1b99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13282", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317310556652", "content": "", "creation_timestamp": "2025-01-10T17:49:03.439374Z"}, {"uuid": "cbea9d32-daef-406a-8189-9e99a7dc791c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13173", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791627046243424", "content": "", "creation_timestamp": "2025-01-08T07:47:14.802570Z"}, {"uuid": "676ffaeb-e67c-4830-9729-430a923997e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13173", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7pvzpx622f", "content": "", "creation_timestamp": "2025-01-08T08:15:47.392027Z"}, {"uuid": "43c21aa4-0e61-40dd-b7ea-1ccbfcd3b517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13185", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791814039822284", "content": "", "creation_timestamp": "2025-01-08T08:34:48.029732Z"}, {"uuid": "43ba6304-8969-4fbb-88ed-d1f45390e0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13173", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqr27r62i", "content": "", "creation_timestamp": "2025-01-08T08:48:41.344175Z"}, {"uuid": "04e5adfd-3e10-4fde-b4af-7fbcbbb5dc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13185", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7tb2yef62l", "content": "", "creation_timestamp": "2025-01-08T09:15:39.108962Z"}, {"uuid": "485cecaf-4e8d-4218-9d21-754a9347dc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13186", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7tb5gkb225", "content": "", "creation_timestamp": "2025-01-08T09:15:41.800739Z"}, {"uuid": "a71a3683-e1f8-4751-9f24-e4e54095c5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13310", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800305263655085", "content": "", "creation_timestamp": "2025-01-09T20:34:14.367378Z"}, {"uuid": "853907b4-c678-4041-bcf0-49d0ccf07466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13284", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805317355559677", "content": "", "creation_timestamp": "2025-01-10T17:49:03.506149Z"}, {"uuid": "4167ea5f-b579-4208-8fc4-0f8160ad6b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13398", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113841828780809511", "content": "", "creation_timestamp": "2025-01-17T04:34:12.472631Z"}, {"uuid": "4dcca815-abb9-4456-bbfc-eab5032bfc60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13401", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113841828796133710", "content": "", "creation_timestamp": "2025-01-17T04:34:12.777129Z"}, {"uuid": "58a859e4-6c59-4127-8d54-2f2e84d55b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13434", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113841828810932968", "content": "", "creation_timestamp": "2025-01-17T04:34:12.968193Z"}, {"uuid": "db9741bc-be6c-4f29-90d8-26ed5e0132e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13398", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvzzsyq2k2j", "content": "", "creation_timestamp": "2025-01-17T05:15:26.313949Z"}, {"uuid": "c2784166-36a0-420a-a738-5f8d0a8ac25f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13401", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvzzvq2qd2h", "content": "", "creation_timestamp": "2025-01-17T05:15:29.070526Z"}, {"uuid": "80270e9d-0a2a-47f4-b0f7-0a722c3bf7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13434", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvzzy7nmd2h", "content": "", "creation_timestamp": "2025-01-17T05:15:31.791156Z"}, {"uuid": "085b5bda-b43c-4261-a449-dfac0addd787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13333", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842072385666285", "content": "", "creation_timestamp": "2025-01-17T05:36:09.457987Z"}, {"uuid": "ca4e8089-8eac-4f2f-a18f-5e6c90d725a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfw3vhm2s32q", "content": "", "creation_timestamp": "2025-01-17T05:48:47.666275Z"}, {"uuid": "4ddc0145-26c4-439d-9247-e4c8aa2e8e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfw3vhzf3f2i", "content": "", "creation_timestamp": "2025-01-17T05:48:48.363561Z"}, {"uuid": "a0b75105-ece4-4d4d-af57-32a918242429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfw3vi6ccn2i", "content": "", "creation_timestamp": "2025-01-17T05:48:48.921837Z"}, {"uuid": "e54bcd06-9509-4fa8-8069-72d3bf5e8cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13333", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfw5fd2df72t", "content": "", "creation_timestamp": "2025-01-17T06:15:33.413733Z"}, {"uuid": "4bb771b5-3ef1-43ea-840d-bb256a7f62b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13333", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfw7jrx2z72g", "content": "", "creation_timestamp": "2025-01-17T06:53:51.250886Z"}, {"uuid": "3e39f7d8-b0cc-43ab-b0b8-21621862697a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13366", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwarfndkp2f", "content": "", "creation_timestamp": "2025-01-17T07:16:00.020103Z"}, {"uuid": "4b33ba19-df98-4f37-badb-d8f97e8b4131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13367", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwarhuj3p2n", "content": "", "creation_timestamp": "2025-01-17T07:16:02.380079Z"}, {"uuid": "3f1a4a71-2295-41d5-8f54-042c1df56875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13386", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwarjxkcl2r", "content": "", "creation_timestamp": "2025-01-17T07:16:04.649420Z"}, {"uuid": "c677d22a-89a8-4d7f-9a11-ea1cd002130c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13366", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842471639555162", "content": "", "creation_timestamp": "2025-01-17T07:17:41.708879Z"}, {"uuid": "dde945b3-d407-4046-a6f2-4c23be872e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13367", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842471654580608", "content": "", "creation_timestamp": "2025-01-17T07:17:41.911475Z"}, {"uuid": "31eaa4e0-f809-47ec-b0b7-1fc0cdf4ca3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13386", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842471687610321", "content": "", "creation_timestamp": "2025-01-17T07:17:42.344332Z"}, {"uuid": "dc1c0527-7c32-45ce-ad00-67e61aa2d626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dcqa22u", "content": "", "creation_timestamp": "2025-01-17T07:38:54.166444Z"}, {"uuid": "5b4ea31e-af91-47ca-9804-7da1a9f0560b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dfur52g", "content": "", "creation_timestamp": "2025-01-17T07:38:54.709089Z"}, {"uuid": "45faef79-2927-49dc-a6d1-2a93352523fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13386", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dts6p2q", "content": "", "creation_timestamp": "2025-01-17T07:38:56.847776Z"}, {"uuid": "5feb8f88-e31d-4a17-9ddb-2ae2f6a14b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13377", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843027326954874", "content": "", "creation_timestamp": "2025-01-17T09:39:00.838118Z"}, {"uuid": "ed38955c-1b5c-41d4-8def-d125aeecc07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13378", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843027342736901", "content": "", "creation_timestamp": "2025-01-17T09:39:01.100288Z"}, {"uuid": "19e75acc-9697-47cd-a7d8-6e6f0b09597e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13377", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwksgwkbk2e", "content": "", "creation_timestamp": "2025-01-17T10:15:32.354607Z"}, {"uuid": "fb01186e-2a9d-4530-b0e9-41ce51b922ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13378", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwksj25tx2j", "content": "", "creation_timestamp": "2025-01-17T10:15:34.585536Z"}, {"uuid": "53a009b0-46ff-4b97-8b2d-7bbf6fb6c706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwmoeww4h2i", "content": "", "creation_timestamp": "2025-01-17T10:49:04.248940Z"}, {"uuid": "a3f6a740-b620-47d5-800c-8383f79c252c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwmof2dpt25", "content": "", "creation_timestamp": "2025-01-17T10:49:04.777976Z"}, {"uuid": "afb08f09-20b2-4d75-8661-d6b41f298366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13503", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113844046206247513", "content": "", "creation_timestamp": "2025-01-17T13:58:07.651228Z"}, {"uuid": "835f63f6-4032-45dd-87db-d3a9c7ee22f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13502", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113844072614495482", "content": "", "creation_timestamp": "2025-01-17T14:04:50.470502Z"}, {"uuid": "02cdea15-badd-4406-afd2-2bff37185ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13502", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwyamim6j2n", "content": "", "creation_timestamp": "2025-01-17T14:16:06.637210Z"}, {"uuid": "b1382330-603e-4018-8e01-c7fc9745b13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13503", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwyapxlge2s", "content": "", "creation_timestamp": "2025-01-17T14:16:10.300159Z"}, {"uuid": "54d3246a-7eb7-4d29-b5fe-5f3c71df9609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfx2ntuaen2e", "content": "", "creation_timestamp": "2025-01-17T14:59:18.141069Z"}, {"uuid": "40949a6d-e3c0-4473-972c-08fbbe6d4e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfx2nuqbkf2e", "content": "", "creation_timestamp": "2025-01-17T14:59:19.288592Z"}, {"uuid": "ec4d57b6-1a75-4bb6-9da9-36dcb29914e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13026", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmdq5yhp2n", "content": "", "creation_timestamp": "2025-01-17T20:15:46.321069Z"}, {"uuid": "c796e271-3856-44b9-8902-36d719a9f019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13536", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lga62nkvrm2q", "content": "", "creation_timestamp": "2025-01-21T05:54:06.997938Z"}, {"uuid": "a4bf6e9e-b1dc-43a6-b656-e22d3a4a44b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13230", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgapzgi53y2t", "content": "", "creation_timestamp": "2025-01-21T11:15:32.743251Z"}, {"uuid": "0afbec8c-5c09-4a71-9092-6939779c721b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13444", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgapziyycg2t", "content": "", "creation_timestamp": "2025-01-21T11:15:35.505100Z"}, {"uuid": "50eb739a-5ab6-4904-8432-5402d6408d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13026", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxfthnx2e", "content": "", "creation_timestamp": "2025-01-17T20:44:42.543881Z"}, {"uuid": "d59ccc4d-72e0-4129-adb4-0740b1ffa6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13454", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113862748999741237", "content": "", "creation_timestamp": "2025-01-20T21:14:29.544412Z"}, {"uuid": "e147eff5-8c74-4d1a-a6bd-b43732167aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13536", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lga3vj6mcf2h", "content": "", "creation_timestamp": "2025-01-21T05:15:26.750045Z"}, {"uuid": "f68cd585-851f-4484-acb4-07785d4a929c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13404", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113865629841252103", "content": "", "creation_timestamp": "2025-01-21T09:27:07.836716Z"}, {"uuid": "37810c98-498b-4529-99ab-73b6987f1495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13404", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgamo62vj32p", "content": "", "creation_timestamp": "2025-01-21T10:15:33.724701Z"}, {"uuid": "274b37b8-a435-4994-9b84-de6927bf8af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13454", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg7b3or2322n", "content": "", "creation_timestamp": "2025-01-20T21:15:43.026671Z"}, {"uuid": "27c2f0bf-ecd5-4d28-b0a1-b9bbb50aa331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13404", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgaokmgwqy2h", "content": "", "creation_timestamp": "2025-01-21T10:49:25.032885Z"}, {"uuid": "f7d01ba0-ccdf-4f3a-81e1-2d112da235dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13230", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866055399154408", "content": "", "creation_timestamp": "2025-01-21T11:15:21.258180Z"}, {"uuid": "31aa0744-c012-4d22-9559-cd89f597e2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgas6vkyvj2i", "content": "", "creation_timestamp": "2025-01-21T11:54:24.089070Z"}, {"uuid": "41d85dc0-3294-478a-b82a-3e810c7eece4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg7e4634q625", "content": "", "creation_timestamp": "2025-01-20T22:09:40.181695Z"}, {"uuid": "c707caf3-71d3-4a1a-8f2d-89afa589a14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13230", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866040035703869", "content": "", "creation_timestamp": "2025-01-21T11:11:26.962657Z"}, {"uuid": "2a7c3e3c-de88-4b79-9e43-5fbfe968397c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13444", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866055413991258", "content": "", "creation_timestamp": "2025-01-21T11:15:21.652014Z"}, {"uuid": "060dc240-f37f-4483-9453-bd87ff486277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13444", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgas6vvmav2h", "content": "", "creation_timestamp": "2025-01-21T11:54:24.710370Z"}, {"uuid": "5435e257-bda5-455c-96ee-7cb4b399513a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13536", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113864448812079089", "content": "", "creation_timestamp": "2025-01-21T04:26:48.127385Z"}, {"uuid": "989b6217-2366-4825-822c-b7cf716c2d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13444", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866040050446234", "content": "", "creation_timestamp": "2025-01-21T11:11:27.098913Z"}, {"uuid": "0c83128d-3496-47e7-80da-b33ef8ffa665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113847749138111489", "content": "", "creation_timestamp": "2025-01-18T05:39:49.902257Z"}, {"uuid": "3ba91c6f-d3fd-48b0-a2ad-a1151284de6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13516", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113847749153311562", "content": "", "creation_timestamp": "2025-01-18T05:39:50.117137Z"}, {"uuid": "2a6092df-1141-464c-bc27-6a6a9217d32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13503", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113847824871766844", "content": "", "creation_timestamp": "2025-01-18T05:59:05.434457Z"}, {"uuid": "3e33ab81-eed8-44a8-ab56-76f08faf11a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13515", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfynuiwkbt2p", "content": "", "creation_timestamp": "2025-01-18T06:15:42.560045Z"}, {"uuid": "ad5fae9b-44d3-49aa-b5df-4f7bd957ef98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13516", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfynulclix2j", "content": "", "creation_timestamp": "2025-01-18T06:15:44.893626Z"}, {"uuid": "a151ee12-0b1d-45b1-aca4-aefcd8317930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyovkronk2w", "content": "", "creation_timestamp": "2025-01-18T06:34:11.502769Z"}, {"uuid": "ab3b7d83-3cfd-4b3e-a9c2-17864dea77df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyovl5lds2i", "content": "", "creation_timestamp": "2025-01-18T06:34:12.119089Z"}, {"uuid": "2a06412c-d4fe-4de6-8f0c-24d2952e0281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13317", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848098371491612", "content": "", "creation_timestamp": "2025-01-18T07:08:39.017617Z"}, {"uuid": "bdae617b-4aa8-46cb-a346-83d0ba8621e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13385", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848098387256152", "content": "", "creation_timestamp": "2025-01-18T07:08:39.259142Z"}, {"uuid": "58610e7a-aed8-497f-b91a-fbf02c688a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13317", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyr7swum52f", "content": "", "creation_timestamp": "2025-01-18T07:15:42.996840Z"}, {"uuid": "c7f24233-42df-4897-9e02-4aaeb3a91925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13385", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyr7zikrh2h", "content": "", "creation_timestamp": "2025-01-18T07:15:49.880948Z"}, {"uuid": "479c2ce7-437d-45d3-9277-6bab10d5c78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13391", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyrabncqt2s", "content": "", "creation_timestamp": "2025-01-18T07:15:59.073189Z"}, {"uuid": "c3329ff4-3fda-4cb1-acc6-6580d7b9e79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13393", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyraqyhek2t", "content": "", "creation_timestamp": "2025-01-18T07:16:14.872054Z"}, {"uuid": "dc4fcffe-bc30-47fd-b834-1baf68d72976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13432", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyrberptb2j", "content": "", "creation_timestamp": "2025-01-18T07:16:35.454503Z"}, {"uuid": "e2bd081e-166e-41f4-b2f9-fd1bb3a4aa90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13433", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyrbhclqh2c", "content": "", "creation_timestamp": "2025-01-18T07:16:37.963578Z"}, {"uuid": "af0dbdfb-a9ec-4dde-b2b9-aa938b8d8ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13517", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyrblnn4s2t", "content": "", "creation_timestamp": "2025-01-18T07:16:42.668475Z"}, {"uuid": "3363c5ec-cb42-4b7a-839c-5fd8a0d08202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13519", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyrbpdfok2t", "content": "", "creation_timestamp": "2025-01-18T07:16:46.551492Z"}, {"uuid": "ac63cd30-644e-4f9d-8251-0fa7cd3938de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13391", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848157389547327", "content": "", "creation_timestamp": "2025-01-18T07:23:39.349284Z"}, {"uuid": "fe70caa5-e4ba-4ce6-b3fd-1db923e9b975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13393", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848157404077718", "content": "", "creation_timestamp": "2025-01-18T07:23:39.489501Z"}, {"uuid": "c5447c47-fca5-40e5-8bd7-c3a72f7e53da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13432", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848157418768033", "content": "", "creation_timestamp": "2025-01-18T07:23:39.881184Z"}, {"uuid": "95b3f050-dcf1-44db-b1fd-04b2b372e2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13433", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848157433697973", "content": "", "creation_timestamp": "2025-01-18T07:23:40.037689Z"}, {"uuid": "9812554d-8d94-47a3-92c0-b7500d5d2c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13517", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848216432770567", "content": "", "creation_timestamp": "2025-01-18T07:38:40.215602Z"}, {"uuid": "84640564-44ba-49d9-a9bd-93a4872852ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13519", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848216447243308", "content": "", "creation_timestamp": "2025-01-18T07:38:40.576059Z"}, {"uuid": "fa8a29ea-014a-4a48-841f-2e8a91ab5cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjvyd4c2w", "content": "", "creation_timestamp": "2025-01-18T07:39:15.752362Z"}, {"uuid": "381030ae-1407-4722-bc85-6cb779126fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwgkx32k", "content": "", "creation_timestamp": "2025-01-18T07:39:16.857533Z"}, {"uuid": "21dbb920-c3ea-4353-b199-971edb6739db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwo2em2q", "content": "", "creation_timestamp": "2025-01-18T07:39:17.943739Z"}, {"uuid": "428ee259-1d8b-4511-ac0e-65b27773db68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjws2ga2e", "content": "", "creation_timestamp": "2025-01-18T07:39:18.470487Z"}, {"uuid": "e8156371-1140-41a1-b3c3-23f5c43bfa52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwyvzm2q", "content": "", "creation_timestamp": "2025-01-18T07:39:19.535555Z"}, {"uuid": "6259e462-6636-4430-aeee-012883c601c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjx4dc52i", "content": "", "creation_timestamp": "2025-01-18T07:39:20.040698Z"}, {"uuid": "38fed222-6dd8-4a9c-bad6-085dda50b380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13385", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjxacw325", "content": "", "creation_timestamp": "2025-01-18T07:39:20.581961Z"}, {"uuid": "34f650e1-5897-4f26-9b3c-944321d9e1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjxh3pl25", "content": "", "creation_timestamp": "2025-01-18T07:39:21.608603Z"}, {"uuid": "aa3804ae-1e3b-4230-a040-e7fd710e52ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13392", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyul7vc462f", "content": "", "creation_timestamp": "2025-01-18T08:15:47.352944Z"}, {"uuid": "1ca0874f-5482-47e4-87e5-651bd1dd666e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13184", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848420088684532", "content": "", "creation_timestamp": "2025-01-18T08:30:27.938865Z"}, {"uuid": "88483e5c-e624-4b90-a67f-c0876394b994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848420106026783", "content": "", "creation_timestamp": "2025-01-18T08:30:28.077231Z"}, {"uuid": "cfb3896b-b046-4315-b5bc-cba1c64baf16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13392", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyw6a3ug42k", "content": "", "creation_timestamp": "2025-01-18T08:44:18.604830Z"}, {"uuid": "5a06cea0-9132-4ddd-a68d-351122080d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13184", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyxvtolfd2s", "content": "", "creation_timestamp": "2025-01-18T09:15:25.079787Z"}, {"uuid": "ef7f32ea-10e9-41d5-94e2-04cea607a276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyzap5igp2e", "content": "", "creation_timestamp": "2025-01-18T09:39:22.627063Z"}, {"uuid": "a90416bd-dedb-4e80-960d-e609389c8f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyzapjh4l2i", "content": "", "creation_timestamp": "2025-01-18T09:39:23.280835Z"}, {"uuid": "ba8b10b7-9611-42fe-b14d-a7f6552b1be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyzapsvy72e", "content": "", "creation_timestamp": "2025-01-18T09:39:24.411409Z"}, {"uuid": "b3e49a46-2d47-434f-8c4f-6554bb333a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113848726407319440", "content": "", "creation_timestamp": "2025-01-18T09:48:25.698189Z"}, {"uuid": "abc632d1-f31a-4ded-bf7d-677b2b889e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13158", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-031/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "9122f651-9f22-4e9e-b5d0-5f911bf1903f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13172", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-032/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "114dbb32-6955-4619-bb49-327b364bb2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lg4snhtgdz2i", "content": "", "creation_timestamp": "2025-01-19T21:51:54.162864Z"}, {"uuid": "2bd8ace2-a0e0-4d41-a742-901f2104d788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13524", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113858298618080202", "content": "", "creation_timestamp": "2025-01-20T02:22:42.226804Z"}, {"uuid": "c629bb19-1e7c-44b7-a31d-841c791c795a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13524", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eq5iqjb2b", "content": "", "creation_timestamp": "2025-01-20T03:15:31.226651Z"}, {"uuid": "497b20d6-e1e9-411a-9298-5335a42951b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg5gwbdzvl2k", "content": "", "creation_timestamp": "2025-01-20T03:54:44.114544Z"}, {"uuid": "bce4cc36-fcb9-4909-9608-77ba4a9184d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13179", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-044/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "a7a667b7-66c3-4b02-a4c5-50c3bca83cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13180", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-043/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "54420ed3-c7c4-4efa-885f-07a348f7c149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13181", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-042/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "357b6707-b1f3-4d86-82e3-d1c90bcc4d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13162", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-041/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "35f1519f-3b4c-4861-8be6-07802a7463bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13163", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-040/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "3b4c21b6-84ed-4526-a117-8a6c402aeb9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13164", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-039/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "87dfe7a3-9011-4e26-b0ae-726312d89b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13165", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-038/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "c242f6da-6dcf-4656-ad45-dae541316f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13166", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-037/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "af92374c-0930-44e4-82ad-e22b3e31bbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13167", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-036/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "d610ed75-f18b-44e0-a79e-dad90f794dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13168", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-035/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "8f45655d-7d2e-4ec9-aa4e-1e0357b54e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13169", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-034/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "e8d374f4-d609-40a0-918f-85832b604b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13170", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-033/", "content": "", "creation_timestamp": "2025-01-19T05:00:00.000000Z"}, {"uuid": "2fee0954-c4ce-486f-b95e-0219d3fd0911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13524", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lg6fool64c2v", "content": "", "creation_timestamp": "2025-01-20T13:05:17.983179Z"}, {"uuid": "38d4a1b0-a3ba-4aef-ad00-a75b1f8d6a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113860948101305997", "content": "", "creation_timestamp": "2025-01-20T13:36:30.023050Z"}, {"uuid": "2a71017a-1eb8-4fb0-a11d-d6c0fadcff91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6jmwz6eq2t", "content": "", "creation_timestamp": "2025-01-20T14:15:52.133400Z"}, {"uuid": "b7c78dfc-e282-487f-9eab-777dd3a68a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg6liqdxy62k", "content": "", "creation_timestamp": "2025-01-20T14:49:19.554534Z"}, {"uuid": "26870cfa-97ce-4080-ba28-a4e867924897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lg6mazkb7g2x", "content": "", "creation_timestamp": "2025-01-20T15:02:53.167454Z"}, {"uuid": "8c2589c0-758c-4225-8ac9-88e3e67b41c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6iapl27", "content": "", "creation_timestamp": "2025-01-20T21:02:10.599021Z"}, {"uuid": "a5f23927-5e71-40c7-915e-f97cf6e436da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13652", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917907595823665", "content": "", "creation_timestamp": "2025-01-30T15:02:03.096365Z"}, {"uuid": "98255d48-5e8e-4d04-83d5-fbae7d00db4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13484", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgt2rpizkh2c", "content": "", "creation_timestamp": "2025-01-28T18:16:00.615799Z"}, {"uuid": "5413a216-1866-4248-b284-64c3a4932a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13661", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917907610852966", "content": "", "creation_timestamp": "2025-01-30T15:02:03.611780Z"}, {"uuid": "78044b4c-cc5d-4ae1-aa8b-308dd75ecb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13216", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921294156429587", "content": "", "creation_timestamp": "2025-01-31T05:23:17.878695Z"}, {"uuid": "1bba9198-ed6e-4849-a927-75e04e53c4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13415", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921294170969239", "content": "", "creation_timestamp": "2025-01-31T05:23:18.200970Z"}, {"uuid": "74130ac2-dc6b-43f9-9502-123672603811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13424", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921294185019531", "content": "", "creation_timestamp": "2025-01-31T05:23:18.393322Z"}, {"uuid": "85642f0a-0817-4aa2-87df-aef3d673bfe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzbfuvoul2q", "content": "", "creation_timestamp": "2025-01-31T05:30:38.336248Z"}, {"uuid": "195e04e9-6bd9-4c1a-a681-65e06b5dad9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13343", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3s4j3qxa2q", "content": "", "creation_timestamp": "2025-02-01T05:34:57.228686Z"}, {"uuid": "c27f6ba6-44ef-4a6e-ad0f-c8eb47006950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13504", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921353183294059", "content": "", "creation_timestamp": "2025-01-31T05:38:18.554801Z"}, {"uuid": "16ba8b94-0c20-42b3-8409-d6842af587a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13717", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921353197918767", "content": "", "creation_timestamp": "2025-01-31T05:38:19.065125Z"}, {"uuid": "b2751ee7-560b-4702-9796-10dfd61b06be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13096", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3uft57mu2f", "content": "", "creation_timestamp": "2025-02-01T06:15:56.709196Z"}, {"uuid": "4b43b728-c516-411b-b384-f4f8b2e0a012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13841", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113961327195794631", "content": "", "creation_timestamp": "2025-02-07T07:04:13.534506Z"}, {"uuid": "3063cf35-33e6-41e7-b297-b784e9d06942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13368", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887931264398586", "content": "", "creation_timestamp": "2025-01-25T07:58:40.543054Z"}, {"uuid": "11b24dde-0cbe-4dcf-87cc-bbc89c37ccd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13370", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887931279618237", "content": "", "creation_timestamp": "2025-01-25T07:58:40.711440Z"}, {"uuid": "e4e12faa-a7b1-42c8-8131-abe157e0e0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13441", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887931313995607", "content": "", "creation_timestamp": "2025-01-25T07:58:41.076040Z"}, {"uuid": "131e2d2a-c71d-4857-8391-20d6d6cb3f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13097", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufvgjue2r", "content": "", "creation_timestamp": "2025-02-01T06:15:59.061859Z"}, {"uuid": "ac2587de-cecb-43f8-9662-1066cb73eadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13458", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887990317501043", "content": "", "creation_timestamp": "2025-01-25T08:13:41.535150Z"}, {"uuid": "55316ef9-b95c-4431-a0f5-d9ca4642ce2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13700", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917966659185202", "content": "", "creation_timestamp": "2025-01-30T15:17:04.254579Z"}, {"uuid": "2e0fa75c-97d9-4c5d-bb65-e9c2f725b19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13098", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufy3azn2w", "content": "", "creation_timestamp": "2025-02-01T06:16:02.312873Z"}, {"uuid": "53f86548-8a02-4516-8897-8a3a6b0b9cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13467", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887990332393071", "content": "", "creation_timestamp": "2025-01-25T08:13:41.947660Z"}, {"uuid": "dd98a775-585f-4c35-8fbd-655557b67ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13099", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ug26yzj2i", "content": "", "creation_timestamp": "2025-02-01T06:16:04.111722Z"}, {"uuid": "e3dc2676-3d4f-4474-8b7c-d39469851fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13548", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887990348463003", "content": "", "creation_timestamp": "2025-01-25T08:13:42.061833Z"}, {"uuid": "b004f789-241d-43c1-8afc-2986be1f3578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13664", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917966614869163", "content": "", "creation_timestamp": "2025-01-30T15:17:03.503344Z"}, {"uuid": "6814d280-d7e6-487c-b3f5-bb1ccfdcd022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13550", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887990362859810", "content": "", "creation_timestamp": "2025-01-25T08:13:42.361441Z"}, {"uuid": "d9b62b10-327d-4cc3-b7ed-6f2257373b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13670", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917966629686230", "content": "", "creation_timestamp": "2025-01-30T15:17:03.871834Z"}, {"uuid": "11278866-1486-4877-b4b3-a3071ad4274c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13551", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113888049364965035", "content": "", "creation_timestamp": "2025-01-25T08:28:42.548678Z"}, {"uuid": "cf8873c6-2db7-4889-831e-068d41162200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13671", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917966644946049", "content": "", "creation_timestamp": "2025-01-30T15:17:04.105788Z"}, {"uuid": "c9a40306-a381-449e-a803-9147f232c6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113888049398583537", "content": "", "creation_timestamp": "2025-01-25T08:28:43.054389Z"}, {"uuid": "a99b2953-ffbd-4496-876c-40dbca19bf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13599", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113888049412494074", "content": "", "creation_timestamp": "2025-01-25T08:28:43.285923Z"}, {"uuid": "bcc46348-94bd-4dea-8d72-ffb5eef1842e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13706", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5k5liq2i", "content": "", "creation_timestamp": "2025-01-30T15:24:52.409660Z"}, {"uuid": "5c8511b3-fce4-475e-b7b9-342714017d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13343", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113927290879202374", "content": "", "creation_timestamp": "2025-02-01T06:48:20.806095Z"}, {"uuid": "8766fbcb-227e-41de-a939-36ab6902b7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13449", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113888054096536678", "content": "", "creation_timestamp": "2025-01-25T08:29:54.748171Z"}, {"uuid": "b9a78f2c-0f95-4d92-a1bb-501e89892056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13453", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5ksbqg2h", "content": "", "creation_timestamp": "2025-01-30T15:24:54.016519Z"}, {"uuid": "61f62ee0-c0ce-4923-9463-0d8da811ee64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13450", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113888054113670556", "content": "", "creation_timestamp": "2025-01-25T08:29:55.188292Z"}, {"uuid": "6f5a294a-4f0f-45fa-b57a-87f03cee40c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgutqma2co2h", "content": "", "creation_timestamp": "2025-01-29T11:15:26.757122Z"}, {"uuid": "7e6cc521-cacd-4fed-bc06-0a605420fe63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13561", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113911371435509053", "content": "", "creation_timestamp": "2025-01-29T11:19:49.037566Z"}, {"uuid": "616e9698-f197-45a6-a1b2-585a496136a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13341", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3xq5potm2t", "content": "", "creation_timestamp": "2025-02-01T07:15:24.482770Z"}, {"uuid": "e1b4d1fa-f6af-4513-8635-d6d6664c742a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13499", "type": "seen", "source": "https://bsky.app/profile/abrahack.bsky.social/post/3lgbxs2a7f22s", "content": "", "creation_timestamp": "2025-01-21T23:07:21.375587Z"}, {"uuid": "582e1e15-0390-48e2-b2bd-691f3fd33520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "seen", "source": "https://bsky.app/profile/abrahack.bsky.social/post/3lgbxsnqgxs2s", "content": "", "creation_timestamp": "2025-01-21T23:07:42.266083Z"}, {"uuid": "3205811c-a2c8-423b-8cdd-7b071c50495a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13514", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944437753593214", "content": "", "creation_timestamp": "2025-02-04T07:29:01.004413Z"}, {"uuid": "3244a591-4736-4434-a511-c5e37768b8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13562", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113888753148789898", "content": "", "creation_timestamp": "2025-01-25T11:27:41.358934Z"}, {"uuid": "74bc0a2c-5710-4975-84fc-75e609f37dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z46ovme2e", "content": "", "creation_timestamp": "2025-02-01T07:40:02.417594Z"}, {"uuid": "9c71427c-68cb-439f-abc7-2ea855378edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13091", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113869253453487309", "content": "", "creation_timestamp": "2025-01-22T00:48:40.000136Z"}, {"uuid": "cfe9e36b-0a4d-45b8-956b-85deaa15e5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgc5ssvbqo2y", "content": "", "creation_timestamp": "2025-01-22T00:55:03.571811Z"}, {"uuid": "456241d1-14dd-48c7-9e68-89f88ff8c006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgc5ssyonh2i", "content": "", "creation_timestamp": "2025-01-22T00:55:04.094320Z"}, {"uuid": "ff0e869e-e009-43fd-a4ef-c4af66716ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13426", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcfpce4tn2n", "content": "", "creation_timestamp": "2025-01-22T03:16:15.138496Z"}, {"uuid": "82dad74e-37c6-4496-b309-aa0b34c9cb53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgchuyawnd2q", "content": "", "creation_timestamp": "2025-01-22T03:55:13.256908Z"}, {"uuid": "b9eb0fec-1fa6-494c-bffb-a3296ddcc203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13584", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgciz5zqiy2n", "content": "", "creation_timestamp": "2025-01-22T04:15:27.470305Z"}, {"uuid": "dcc8509a-674b-49a8-abc3-4773c4116b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13590", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcizal6u52x", "content": "", "creation_timestamp": "2025-01-22T04:15:30.376341Z"}, {"uuid": "b51c9f88-4c3f-4066-8e33-63638dbbda5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgck2rd2lm2y", "content": "", "creation_timestamp": "2025-01-22T04:34:15.000430Z"}, {"uuid": "42ab29a1-9dfc-4266-bd3c-d5365cd1ba00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgck2rms2l2w", "content": "", "creation_timestamp": "2025-01-22T04:34:15.692116Z"}, {"uuid": "97d8491b-5735-46bf-a301-56a03f6c75b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13406", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgct3tc6a62c", "content": "", "creation_timestamp": "2025-01-22T07:15:54.130214Z"}, {"uuid": "b23719b3-03e9-4ea0-8fcc-a898483424eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxpwuow2i", "content": "", "creation_timestamp": "2025-01-22T07:49:23.939196Z"}, {"uuid": "b03941fa-6ced-493a-895d-81f4c50ce8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13319", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcwgvmivg2j", "content": "", "creation_timestamp": "2025-01-22T08:15:46.916235Z"}, {"uuid": "6c67a70f-b2f5-4bb4-bcf3-3d0112db4044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13360", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcwh3gmx62j", "content": "", "creation_timestamp": "2025-01-22T08:15:53.278877Z"}, {"uuid": "794ae485-01fa-41a9-ac7d-d8df98e3165f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13361", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcwhdfn4z2p", "content": "", "creation_timestamp": "2025-01-22T08:16:01.365631Z"}, {"uuid": "fac9dd0b-0eba-4871-8dfc-2f8e02e45378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13360", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcylzwzah2w", "content": "", "creation_timestamp": "2025-01-22T08:54:27.043737Z"}, {"uuid": "9211a36c-89f8-4a71-b9af-d58e04f13457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13361", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcym25n4s25", "content": "", "creation_timestamp": "2025-01-22T08:54:28.121499Z"}, {"uuid": "236f2438-eaed-43db-8e1a-f6d53ec5d9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13319", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcym2au2l2k", "content": "", "creation_timestamp": "2025-01-22T08:54:28.683931Z"}, {"uuid": "df869e90-2b77-4b88-baff-5d950fb030e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13511", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113876959734326674", "content": "", "creation_timestamp": "2025-01-23T09:28:28.312402Z"}, {"uuid": "ff066a23-7d2a-406b-967a-3b0b0a0d1b56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13651", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z46sf772q", "content": "", "creation_timestamp": "2025-02-01T07:40:02.981229Z"}, {"uuid": "561335f5-a664-4722-8a8d-7aba65c2a1b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhg5pp6s5i2q", "content": "", "creation_timestamp": "2025-02-05T08:29:09.344713Z"}, {"uuid": "8a3f3828-d14d-4af9-afa7-2359cc8e5c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13593", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113876959749085712", "content": "", "creation_timestamp": "2025-01-23T09:28:28.911186Z"}, {"uuid": "608b4251-b2bc-4c5f-8143-6e88cfbb3f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13705", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918025661122768", "content": "", "creation_timestamp": "2025-01-30T15:32:04.438794Z"}, {"uuid": "2955da73-1198-4c0b-9695-e3918ac98d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13707", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918025675634080", "content": "", "creation_timestamp": "2025-01-30T15:32:04.862445Z"}, {"uuid": "14910799-b274-4d35-8456-126fc858366a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13715", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918025690544421", "content": "", "creation_timestamp": "2025-01-30T15:32:05.697697Z"}, {"uuid": "357a2add-5f1f-4188-acd5-f317e90f10fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13720", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918025705481072", "content": "", "creation_timestamp": "2025-01-30T15:32:05.958747Z"}, {"uuid": "7dfdb5bc-6be3-4684-9444-ee447d443e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13547", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4774eb2w", "content": "", "creation_timestamp": "2025-02-01T07:40:05.418603Z"}, {"uuid": "d0c24200-63ce-46e2-92cb-53e017ecdd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhiop5lcql2k", "content": "", "creation_timestamp": "2025-02-06T08:38:24.073364Z"}, {"uuid": "7bcb9c33-40e4-48e5-8a14-567f6e045835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13841", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhl2ksrq7i2q", "content": "", "creation_timestamp": "2025-02-07T07:16:03.136990Z"}, {"uuid": "bfd4f0d8-7720-4656-8264-12a13a580628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13742", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918084702506177", "content": "", "creation_timestamp": "2025-01-30T15:47:05.302267Z"}, {"uuid": "abf508e6-fa41-495f-88a4-cdc90470057e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13098", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4ayykz2r", "content": "", "creation_timestamp": "2025-02-01T07:40:06.408995Z"}, {"uuid": "616b6d36-fe0b-433f-8371-96aac38f692a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13097", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4bpjk22k", "content": "", "creation_timestamp": "2025-02-01T07:40:09.946542Z"}, {"uuid": "3f0f3aa2-a665-4e6e-8227-15ddcc25b2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13099", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4blv6z2y", "content": "", "creation_timestamp": "2025-02-01T07:40:09.287774Z"}, {"uuid": "a0faff3d-1f70-4f0a-ba76-4c01bd23b9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13511", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfnlxy4ex2w", "content": "", "creation_timestamp": "2025-01-23T10:15:32.598816Z"}, {"uuid": "e5ee9739-414a-4451-963a-830e5f131a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4bxiqs2b", "content": "", "creation_timestamp": "2025-02-01T07:40:10.500188Z"}, {"uuid": "32e0f2e8-d03e-428c-b0e4-866473308f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13593", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfnm2437a2t", "content": "", "creation_timestamp": "2025-01-23T10:15:34.879399Z"}, {"uuid": "485f5d22-506b-4714-a746-7cd84a1ef52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13561", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgux4sa3is2p", "content": "", "creation_timestamp": "2025-01-29T12:15:56.827370Z"}, {"uuid": "96f74192-2740-415f-ab30-0e3814299d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13100", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921455076014399", "content": "", "creation_timestamp": "2025-01-31T06:04:13.220749Z"}, {"uuid": "c78808eb-10cf-46dc-b09e-ca2646f0d103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13511", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfoobk4mr2i", "content": "", "creation_timestamp": "2025-01-23T10:34:43.423749Z"}, {"uuid": "67975855-404c-41cc-b331-9c86304543df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfoobu7nq2k", "content": "", "creation_timestamp": "2025-01-23T10:34:44.016203Z"}, {"uuid": "3fbdc0ca-d873-48e9-ac65-c43a52a02cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13226", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxqlkc62f", "content": "", "creation_timestamp": "2025-01-31T06:16:24.920370Z"}, {"uuid": "050ff770-1491-451e-9930-bc6d32a7ee88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13646", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327429686885", "content": "", "creation_timestamp": "2025-01-30T16:50:54.977912Z"}, {"uuid": "6ec4464e-1783-42e7-b5bf-746fd52f95bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13514", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmj7t67m2r", "content": "", "creation_timestamp": "2025-02-04T08:15:58.763531Z"}, {"uuid": "34243c32-806b-4ba4-88b3-5f2eeb00edd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13416", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958519350665410", "content": "", "creation_timestamp": "2025-02-06T19:10:09.090767Z"}, {"uuid": "af582d9c-a86a-4005-86c7-c073f4496495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13100", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwtbdbd2b", "content": "", "creation_timestamp": "2025-01-31T06:15:54.345372Z"}, {"uuid": "f3658511-e2be-4e8a-953f-90785a2f6e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13415", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxsttyp2f", "content": "", "creation_timestamp": "2025-01-31T06:16:27.301789Z"}, {"uuid": "17d8aa80-be92-432c-b056-bce30f15c9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13052", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3apqip2b", "content": "", "creation_timestamp": "2025-01-27T06:15:57.609073Z"}, {"uuid": "6d7f8009-4d67-4660-8e7a-ed7fde2d7280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13101", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwvnz3w2c", "content": "", "creation_timestamp": "2025-01-31T06:15:56.676344Z"}, {"uuid": "85fe9559-6c81-4c06-b178-5269ba0f633d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13221", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxdpl4d2b", "content": "", "creation_timestamp": "2025-01-31T06:16:11.963231Z"}, {"uuid": "cfac69e8-9071-44da-b29e-53531fdab1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13223", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxivbqc2p", "content": "", "creation_timestamp": "2025-01-31T06:16:16.806331Z"}, {"uuid": "8c58090c-1855-419e-bf4d-0da9d6cbaae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13416", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjscgz7oa2x", "content": "", "creation_timestamp": "2025-02-06T19:15:32.550803Z"}, {"uuid": "117cbe4b-c6ef-44f2-a203-aac707f92642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13055", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3dca6c2f", "content": "", "creation_timestamp": "2025-01-27T06:16:00.468135Z"}, {"uuid": "e1e4fa57-7949-4c8a-832b-0f00a71cad41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13742", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327705322579", "content": "", "creation_timestamp": "2025-01-30T16:50:56.955549Z"}, {"uuid": "bcbdc655-5199-41ca-8791-51b4d8006c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwy327l2b", "content": "", "creation_timestamp": "2025-01-31T06:15:59.550611Z"}, {"uuid": "92648578-8ffa-4f3d-87f8-1978b81ef4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13424", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxuwxzm2t", "content": "", "creation_timestamp": "2025-01-31T06:16:29.337433Z"}, {"uuid": "5d76b2ea-9968-481c-88c8-d48f796a3db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13717", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxzhpc72f", "content": "", "creation_timestamp": "2025-01-31T06:16:34.172832Z"}, {"uuid": "1f08cc5c-f5a2-4cc3-acf6-85850d23542a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13372", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433t6ha62e", "content": "", "creation_timestamp": "2025-02-01T08:15:37.548440Z"}, {"uuid": "dff21f03-c106-4399-b018-d90df1120d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13056", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3gpxvc2f", "content": "", "creation_timestamp": "2025-01-27T06:16:04.096408Z"}, {"uuid": "2715aa02-9cdf-484b-a6ad-3dda02ebf844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13707", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327535935624", "content": "", "creation_timestamp": "2025-01-30T16:50:57.147814Z"}, {"uuid": "b463ec51-4190-4b11-bffe-29a80457a4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13216", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdx2lmwe2n", "content": "", "creation_timestamp": "2025-01-31T06:16:01.739710Z"}, {"uuid": "cc8cea27-6e2a-4bcb-99d4-cf3648e0bdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13371", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433q7xnr2j", "content": "", "creation_timestamp": "2025-02-01T08:15:34.794099Z"}, {"uuid": "c57b0adf-5a28-4ab8-a163-a3d1b7def3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13425", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433vgbub2c", "content": "", "creation_timestamp": "2025-02-01T08:15:39.660851Z"}, {"uuid": "efdf76e0-5d3e-4067-a70a-d7f3fa833f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13057", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3jgyif2n", "content": "", "creation_timestamp": "2025-01-27T06:16:07.066026Z"}, {"uuid": "f11f3f4c-b949-4dbc-badd-ad73962e0432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13720", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327619055081", "content": "", "creation_timestamp": "2025-01-30T16:50:57.338022Z"}, {"uuid": "3a312261-7b57-4d22-b0b4-507353f711df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13218", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdx4qn7k2p", "content": "", "creation_timestamp": "2025-01-31T06:16:04.246228Z"}, {"uuid": "36b644ef-5341-4070-86c4-877a1ab58d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13428", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433xo7g52n", "content": "", "creation_timestamp": "2025-02-01T08:15:42.450591Z"}, {"uuid": "a00eb286-81f8-4f58-814a-7a7f5c2a988a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13234", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113877374722127246", "content": "", "creation_timestamp": "2025-01-23T11:14:00.502227Z"}, {"uuid": "9c179445-e180-42dc-b80c-f748df550ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13094", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3m6cxy2j", "content": "", "creation_timestamp": "2025-01-27T06:16:09.580768Z"}, {"uuid": "a65e23e3-6824-4a63-a461-0175e0ed280a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13219", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdx7bm5d2b", "content": "", "creation_timestamp": "2025-01-31T06:16:07.141826Z"}, {"uuid": "01d3cf99-59dc-4a7a-8a5f-ce2b65144990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13429", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433zvyow2e", "content": "", "creation_timestamp": "2025-02-01T08:15:44.527650Z"}, {"uuid": "17dc209c-4ce4-4a07-9e58-56c0d01ab470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13095", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3opoio2w", "content": "", "creation_timestamp": "2025-01-27T06:16:12.546123Z"}, {"uuid": "276c2a01-04f2-4cae-8e28-1c788b0ae10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxbgjqh2c", "content": "", "creation_timestamp": "2025-01-31T06:16:08.931041Z"}, {"uuid": "615da158-c52d-41f2-9d14-777d0b00b0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13659", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113881665846872445", "content": "", "creation_timestamp": "2025-01-24T05:25:17.830057Z"}, {"uuid": "2a3129e5-defe-496c-b195-7448cf6b1ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13116", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3rr36b2h", "content": "", "creation_timestamp": "2025-01-27T06:16:15.500396Z"}, {"uuid": "0a078797-0b12-407f-9a61-e539f4453a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxgao7m2t", "content": "", "creation_timestamp": "2025-01-31T06:16:13.952499Z"}, {"uuid": "dde4989c-3162-410d-8e7d-2ae734d6ba44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13504", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxx6nbt2r", "content": "", "creation_timestamp": "2025-01-31T06:16:31.757229Z"}, {"uuid": "0d173eec-77db-4fb4-bd76-d752b5bb902b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13117", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3uiqv62i", "content": "", "creation_timestamp": "2025-01-27T06:16:18.312116Z"}, {"uuid": "50eec3fd-157c-4f08-9726-445ec7f6e32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13224", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxl23yl2b", "content": "", "creation_timestamp": "2025-01-31T06:16:19.012582Z"}, {"uuid": "e866dc74-dbbc-4a17-8490-ff6c7443788a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13234", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfqxkklc62j", "content": "", "creation_timestamp": "2025-01-23T11:15:42.557203Z"}, {"uuid": "5ac47496-d16d-46c7-ae3a-2e46e832fbdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxogikx2w", "content": "", "creation_timestamp": "2025-01-31T06:16:22.630696Z"}, {"uuid": "7d9b08d1-9c88-4924-9e60-622bd1b29f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13101", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921514078558690", "content": "", "creation_timestamp": "2025-01-31T06:19:13.405339Z"}, {"uuid": "880a94b8-b933-4ab7-9da4-24c2fdbc966b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921514093808163", "content": "", "creation_timestamp": "2025-01-31T06:19:13.718450Z"}, {"uuid": "a293080b-9420-4915-9924-a72e32c6ad54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13218", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921514107719292", "content": "", "creation_timestamp": "2025-01-31T06:19:14.022497Z"}, {"uuid": "97d6a48b-c00a-4180-a344-294ab4905bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13219", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921514122173654", "content": "", "creation_timestamp": "2025-01-31T06:19:14.266139Z"}, {"uuid": "1c4428bc-63ae-4653-bc59-974481755272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13614", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlmugyx222", "content": "", "creation_timestamp": "2025-02-06T17:16:05.617147Z"}, {"uuid": "e683a60d-9ba5-49d8-8a1b-b65c8c947303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13052", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898874772413393", "content": "", "creation_timestamp": "2025-01-27T06:21:45.199194Z"}, {"uuid": "68b3f55d-c921-4702-a1b2-75e4f17d339e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921573123574612", "content": "", "creation_timestamp": "2025-01-31T06:34:18.471704Z"}, {"uuid": "831f78d5-072c-4772-ae7d-a9b8e6b359f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13055", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898874786931336", "content": "", "creation_timestamp": "2025-01-27T06:21:45.805436Z"}, {"uuid": "1a6f6c16-7404-433c-8a24-d77004d63a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921573154474081", "content": "", "creation_timestamp": "2025-01-31T06:34:18.617226Z"}, {"uuid": "67118841-b195-486f-8a84-7fd7963fbc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13056", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898874801491464", "content": "", "creation_timestamp": "2025-01-27T06:21:46.031089Z"}, {"uuid": "208ed8ab-a54f-47ee-860a-e40ff32e1a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyubyedz2i", "content": "", "creation_timestamp": "2025-01-30T17:24:57.841371Z"}, {"uuid": "627debbe-2b33-4ce4-b43f-ee9805890e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13223", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921573168581785", "content": "", "creation_timestamp": "2025-01-31T06:34:18.720434Z"}, {"uuid": "7e1c6784-f3f9-4dbe-a961-e7de0c0d78d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13057", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898933804480541", "content": "", "creation_timestamp": "2025-01-27T06:36:46.082541Z"}, {"uuid": "a354669a-bdec-4f2a-9fe7-5ebfd14dac17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyucmcf52k", "content": "", "creation_timestamp": "2025-01-30T17:25:00.331567Z"}, {"uuid": "a20a04d9-6283-444c-aa84-a2c54f5e2a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13221", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921573139218033", "content": "", "creation_timestamp": "2025-01-31T06:34:18.798839Z"}, {"uuid": "e4358112-13ea-465d-b5aa-da8ea2f7bad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13094", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898933819141319", "content": "", "creation_timestamp": "2025-01-27T06:36:46.179295Z"}, {"uuid": "5c7f77b7-e592-4242-b1d0-938f1996d68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyuceynj2i", "content": "", "creation_timestamp": "2025-01-30T17:24:59.103645Z"}, {"uuid": "6f1b632d-98a1-4b64-9baf-d9c68f963b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfscmlv5h2e", "content": "", "creation_timestamp": "2025-01-23T11:39:47.763889Z"}, {"uuid": "3f9ecb7f-f32b-4a0c-8fac-7dc096f5abdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13095", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898933833326773", "content": "", "creation_timestamp": "2025-01-27T06:36:46.310096Z"}, {"uuid": "32e2d68a-c2e3-4796-9a74-f941735f9bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13715", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyucipb62r", "content": "", "creation_timestamp": "2025-01-30T17:24:59.774159Z"}, {"uuid": "8fe9f243-fb9e-4876-9484-237072bac4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyucpk722e", "content": "", "creation_timestamp": "2025-01-30T17:25:00.914743Z"}, {"uuid": "856bac91-86e2-41d3-a105-93b2a546174f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyucssp42q", "content": "", "creation_timestamp": "2025-01-30T17:25:01.545167Z"}, {"uuid": "9e988ff8-fb38-4db2-b2e3-426dbd329aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13671", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyud5d7n2b", "content": "", "creation_timestamp": "2025-01-30T17:25:02.926427Z"}, {"uuid": "ea4989a5-ada3-4ab8-a93c-d32ed0b1fbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13224", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921632172056405", "content": "", "creation_timestamp": "2025-01-31T06:49:15.376128Z"}, {"uuid": "ac0f142b-6cd9-4e2b-8506-7ff71f64c0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13226", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921632200573899", "content": "", "creation_timestamp": "2025-01-31T06:49:16.131003Z"}, {"uuid": "43180a74-6d10-47b8-8797-8efabec3d38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13116", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898933847071028", "content": "", "creation_timestamp": "2025-01-27T06:36:46.487084Z"}, {"uuid": "a5fc952d-72cb-4c65-ad28-58f5d0979851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13705", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyucwbg72u", "content": "", "creation_timestamp": "2025-01-30T17:25:02.178520Z"}, {"uuid": "7a4d6d7f-a63a-4206-a8a6-9685cbb49bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921632187040762", "content": "", "creation_timestamp": "2025-01-31T06:49:15.786681Z"}, {"uuid": "e9bc451a-4b61-4945-bf29-bc1cf5863bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxyudbn5v2g", "content": "", "creation_timestamp": "2025-01-30T17:25:03.504381Z"}, {"uuid": "9a13601e-c69a-45ee-8908-68126c980668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13623", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzhbuymmm2i", "content": "", "creation_timestamp": "2025-01-31T07:15:46.630926Z"}, {"uuid": "67c6c842-c022-4e39-ac5b-10f47e0ed511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2xa5oc2g", "content": "", "creation_timestamp": "2025-01-31T07:29:47.524826Z"}, {"uuid": "5a139444-47b0-4965-b2ed-3788f90948f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxhyhdx2w", "content": "", "creation_timestamp": "2025-01-27T06:49:38.360155Z"}, {"uuid": "7f438815-c8c0-4941-84fc-581dc0ca7601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13057", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxibnlg2g", "content": "", "creation_timestamp": "2025-01-27T06:49:39.045412Z"}, {"uuid": "865c5d8e-343d-447a-8986-ac29830057bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2xow7i2k", "content": "", "creation_timestamp": "2025-01-31T07:29:48.799422Z"}, {"uuid": "a18f2530-1601-407f-9c1d-ca5b2b518cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13403", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944684067505073", "content": "", "creation_timestamp": "2025-02-04T08:31:39.488370Z"}, {"uuid": "ec9bcddb-e9f2-470b-9e45-3d641759159f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13095", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxifkzn2e", "content": "", "creation_timestamp": "2025-01-27T06:49:40.129945Z"}, {"uuid": "3ce97292-9b65-48ab-9c6e-d144008324e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2xsifr2e", "content": "", "creation_timestamp": "2025-01-31T07:29:49.333952Z"}, {"uuid": "c40183fd-c060-4afd-a7cd-26ca5e892143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxiixsr2h", "content": "", "creation_timestamp": "2025-01-27T06:49:40.683141Z"}, {"uuid": "6cb27774-134d-44d1-b01e-defac764ca28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2xvqi72y", "content": "", "creation_timestamp": "2025-01-31T07:29:49.872527Z"}, {"uuid": "60d6c621-f920-4aa3-a6b9-f99bb7bab604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13236", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudotpdd2j", "content": "", "creation_timestamp": "2025-01-23T12:16:10.737541Z"}, {"uuid": "22399edf-2a67-49e5-a18d-51ea8894e01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13094", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxipqhp2w", "content": "", "creation_timestamp": "2025-01-27T06:49:41.780710Z"}, {"uuid": "17459170-f6aa-47e9-a678-64037636b9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2xyzhs2g", "content": "", "creation_timestamp": "2025-01-31T07:29:50.440234Z"}, {"uuid": "9b348946-2179-498d-8f07-2c786caa7eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13340", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudrfadw2r", "content": "", "creation_timestamp": "2025-01-23T12:16:13.445877Z"}, {"uuid": "3dddba81-d2b3-4e91-93ec-3f0a50d58b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2y4dn42k", "content": "", "creation_timestamp": "2025-01-31T07:29:50.963349Z"}, {"uuid": "61b5ca8a-50be-4e7b-9d3d-4a1491b5291c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4p2xcd2h", "content": "", "creation_timestamp": "2025-01-31T07:30:47.596608Z"}, {"uuid": "3e2c58c1-7a01-4208-a35f-b37c31968c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13389", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudur2v42b", "content": "", "creation_timestamp": "2025-01-23T12:16:16.979946Z"}, {"uuid": "7a827938-c9ab-4fa8-97ae-9ebf97decb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxj3ye62g", "content": "", "creation_timestamp": "2025-01-27T06:49:43.481382Z"}, {"uuid": "b99037e5-2423-4836-8f4b-1904dcd788b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13530", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921792266108738", "content": "", "creation_timestamp": "2025-01-31T07:29:58.427245Z"}, {"uuid": "3758ab30-cdae-47f6-9741-ab54975dfa33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13422", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudxh5t62f", "content": "", "creation_timestamp": "2025-01-23T12:16:19.877020Z"}, {"uuid": "9f69bc86-6e6d-4020-b05e-ed78b7eefd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13052", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxja4kz2b", "content": "", "creation_timestamp": "2025-01-27T06:49:44.066395Z"}, {"uuid": "d4af2c16-16b7-46db-b7f3-9c16f4fd59b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4ogugk2w", "content": "", "creation_timestamp": "2025-01-31T07:30:45.189447Z"}, {"uuid": "70268b62-9b9b-4008-8534-0cc67e4849f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4pfw4o2q", "content": "", "creation_timestamp": "2025-01-31T07:30:49.190050Z"}, {"uuid": "bf590fb9-2ebe-4397-9f63-2d1a91444012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4oqna22g", "content": "", "creation_timestamp": "2025-01-31T07:30:45.824131Z"}, {"uuid": "22a10c36-cc5c-4cf6-ae43-0cd5338d5e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4pjcyg2k", "content": "", "creation_timestamp": "2025-01-31T07:30:49.714907Z"}, {"uuid": "03790c67-01fe-4617-82d7-93dbda0c1e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4oubw72y", "content": "", "creation_timestamp": "2025-01-31T07:30:46.335439Z"}, {"uuid": "3d8094cc-2041-45b8-92e5-029634ace72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13403", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdpubbmom27", "content": "", "creation_timestamp": "2025-02-04T09:15:50.543173Z"}, {"uuid": "f793cb67-4527-4cfc-bbeb-471fa040c04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13561", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvb4cqznu25", "content": "", "creation_timestamp": "2025-01-29T15:14:37.909827Z"}, {"uuid": "791aac8b-4953-4fd2-8259-b1add166ac6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13117", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjnup72q", "content": "", "creation_timestamp": "2025-01-27T06:49:46.320244Z"}, {"uuid": "c4a774b4-ac5f-41f0-9066-2036c05e13c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13216", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4p6dwo2q", "content": "", "creation_timestamp": "2025-01-31T07:30:48.076619Z"}, {"uuid": "ada60d85-cff5-4e87-8ee3-ce6a3998850f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13356", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944905514267967", "content": "", "creation_timestamp": "2025-02-04T09:27:58.441356Z"}, {"uuid": "faa36b1b-a923-4e16-b592-32ff6e779721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4pcbao2e", "content": "", "creation_timestamp": "2025-01-31T07:30:48.664303Z"}, {"uuid": "264d0fee-ce3b-4666-95e8-f3e96e897dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13510", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944905529847273", "content": "", "creation_timestamp": "2025-02-04T09:27:58.800101Z"}, {"uuid": "e08f7932-37f1-4af6-815c-0183a2e2318a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13117", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898992850347130", "content": "", "creation_timestamp": "2025-01-27T06:51:46.764269Z"}, {"uuid": "7b290cf5-0875-4604-8f2a-84c0d7f5cf0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4ppv7t2h", "content": "", "creation_timestamp": "2025-01-31T07:30:50.767287Z"}, {"uuid": "1f603876-b25d-4501-8b6c-c9b8fc6f4621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13415", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4pti2n25", "content": "", "creation_timestamp": "2025-01-31T07:30:51.318802Z"}, {"uuid": "6c35b19d-87c4-444e-bec7-ad8c8ce091fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13529", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944905544642459", "content": "", "creation_timestamp": "2025-02-04T09:27:59.233014Z"}, {"uuid": "16fda032-5b5f-4055-bd43-851061a61748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnyb2f42e", "content": "", "creation_timestamp": "2025-01-23T12:39:50.514843Z"}, {"uuid": "311f69be-8f0b-4ae8-849a-444646fa6277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13484", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113907945349376508", "content": "", "creation_timestamp": "2025-01-28T20:49:39.646297Z"}, {"uuid": "70421549-5204-44c4-b5ab-44ae4e73f2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi4pyciu2r", "content": "", "creation_timestamp": "2025-01-31T07:30:51.904024Z"}, {"uuid": "caf80d73-0d41-4120-93d4-0edce1ed01b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13733", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944905559814960", "content": "", "creation_timestamp": "2025-02-04T09:27:59.498428Z"}, {"uuid": "4fb5a29b-3e6a-40c6-b32e-c53402d64ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13422", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnyhldv2q", "content": "", "creation_timestamp": "2025-01-23T12:39:51.633614Z"}, {"uuid": "f699fe5b-3c39-4df2-a2c9-fb4ddb1fa178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnyoizn2q", "content": "", "creation_timestamp": "2025-01-23T12:39:52.280926Z"}, {"uuid": "42a95f16-d72a-440d-bc03-f16bce5d3a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904625814112822", "content": "", "creation_timestamp": "2025-01-28T06:44:19.354722Z"}, {"uuid": "d3116859-3332-4176-a4be-de3270cf6363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgldibgooi2y", "content": "", "creation_timestamp": "2025-01-25T16:30:29.571070Z"}, {"uuid": "3f64c841-d4af-426e-8d8b-ee0649cfd91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13509", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904625829697666", "content": "", "creation_timestamp": "2025-01-28T06:44:19.641652Z"}, {"uuid": "3eb2c236-201d-4e2b-b53a-2809be9a81e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13236", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnyuvxn2y", "content": "", "creation_timestamp": "2025-01-23T12:39:53.371309Z"}, {"uuid": "35e6df94-cf5c-4011-a9f9-37e9eace5be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4bgszl2i", "content": "", "creation_timestamp": "2025-02-04T10:14:00.255131Z"}, {"uuid": "97fec027-ae38-45f0-8686-18517571bf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13530", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzkmrevkh2e", "content": "", "creation_timestamp": "2025-01-31T08:15:32.939411Z"}, {"uuid": "6a5c849d-8b72-4b00-983b-79653fb9ae87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13329", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4br4ta2y", "content": "", "creation_timestamp": "2025-02-04T10:14:00.925967Z"}, {"uuid": "a4c95f33-3141-46ec-9cc0-3a5cb428e3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13332", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4bulkm2e", "content": "", "creation_timestamp": "2025-02-04T10:14:01.442898Z"}, {"uuid": "ba56fec9-e3bd-4ec1-8071-d4692f9e58eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13607", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4bxzo72q", "content": "", "creation_timestamp": "2025-02-04T10:14:02.014667Z"}, {"uuid": "04092513-41ca-46cb-8766-a1e0a1ec3323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13417", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958559472154007", "content": "", "creation_timestamp": "2025-02-06T19:20:21.279120Z"}, {"uuid": "bc3ee2f4-9512-410b-bd44-61eff5a96f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13157", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgznysr65x2h", "content": "", "creation_timestamp": "2025-01-31T09:15:58.579183Z"}, {"uuid": "73be235a-a632-4980-8ae6-08a7e8c8cb1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13327", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4canzc2u", "content": "", "creation_timestamp": "2025-02-04T10:14:03.104083Z"}, {"uuid": "84c1a451-5d4d-41db-9c73-8a59c9d8bf5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13545", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113882406502502942", "content": "", "creation_timestamp": "2025-01-24T08:33:39.282182Z"}, {"uuid": "93ec405a-f1d8-457a-b343-f6c52fce9946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13566", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgznyvc6xk2f", "content": "", "creation_timestamp": "2025-01-31T09:16:00.760784Z"}, {"uuid": "a5c9dcd9-1637-4e20-805c-507a4f4e2a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhl7zeivbx23", "content": "", "creation_timestamp": "2025-02-07T08:53:40.184805Z"}, {"uuid": "9d97496f-c3b4-496f-bce5-75568b9ac23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13583", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113882618824457376", "content": "", "creation_timestamp": "2025-01-24T09:27:39.230913Z"}, {"uuid": "d41e3215-d943-4ebd-8c26-56041050e15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13325", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4ci5gl2i", "content": "", "creation_timestamp": "2025-02-04T10:14:04.186962Z"}, {"uuid": "f2ddceca-c2cd-42e3-90bc-07d3582bce19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13545", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113882700844246084", "content": "", "creation_timestamp": "2025-01-24T09:48:31.306663Z"}, {"uuid": "4e83f409-ecbf-4b31-bf6e-f6b77917d998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4clko725", "content": "", "creation_timestamp": "2025-02-04T10:14:04.740396Z"}, {"uuid": "699811f8-db0d-4021-a647-1b0bcff90c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13115", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4d5aad2i", "content": "", "creation_timestamp": "2025-02-04T10:14:07.488785Z"}, {"uuid": "a67dce2e-fb7d-4daa-962b-66d728756aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4cozua2y", "content": "", "creation_timestamp": "2025-02-04T10:14:05.310399Z"}, {"uuid": "6cf90b67-dfce-4657-9d3a-532d2e7ade2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13114", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4csgma2e", "content": "", "creation_timestamp": "2025-02-04T10:14:05.855575Z"}, {"uuid": "443b611d-9fd1-48ef-8f0b-b23a0bbb366a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13328", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4czocz2k", "content": "", "creation_timestamp": "2025-02-04T10:14:06.939464Z"}, {"uuid": "cabe5f7d-17e2-4773-bbed-dd230a249280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrvuc5lru2f", "content": "", "creation_timestamp": "2025-01-28T07:15:19.297427Z"}, {"uuid": "618abd70-fe36-4120-8f5f-028072d2cfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13356", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt6uw2o72h", "content": "", "creation_timestamp": "2025-02-04T10:15:28.080445Z"}, {"uuid": "cea69ec6-7f3f-46e1-969d-2a263d627e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13509", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrvuzn32q2n", "content": "", "creation_timestamp": "2025-01-28T07:15:43.593748Z"}, {"uuid": "75b8ec6d-8310-453c-b0f9-02db7387b691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13457", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915968954823693", "content": "", "creation_timestamp": "2025-01-30T06:49:02.658420Z"}, {"uuid": "6cc1d642-49c2-412a-a116-5d3403c752ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13510", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt6xxmf62c", "content": "", "creation_timestamp": "2025-02-04T10:15:31.116919Z"}, {"uuid": "cdb01686-4712-4cc5-b0f7-9afb9eca8cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13733", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt757o4b2i", "content": "", "creation_timestamp": "2025-02-04T10:15:36.407814Z"}, {"uuid": "2e9b2d47-8b94-4748-9e6d-87e85d5543f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13521", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904796362962773", "content": "", "creation_timestamp": "2025-01-28T07:27:41.526411Z"}, {"uuid": "7be66aa1-78ee-4efe-8423-53ec95ae18b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13642", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915968971057037", "content": "", "creation_timestamp": "2025-01-30T06:49:02.731501Z"}, {"uuid": "f2038445-6f8f-4650-aed5-fb955823fc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13529", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt72vfko2t", "content": "", "creation_timestamp": "2025-02-04T10:15:34.016006Z"}, {"uuid": "a07c7f87-34d1-4f29-9b1c-578e00140000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13347", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhavd4oufv2f", "content": "", "creation_timestamp": "2025-02-03T06:15:38.868229Z"}, {"uuid": "1bd9b952-65ed-4de8-8891-cfddbc7622e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgg2fkyuvc2p", "content": "", "creation_timestamp": "2025-01-23T14:04:37.617181Z"}, {"uuid": "0821818d-c04b-4a8e-8830-34600ef9f428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13804", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114258301081662294", "content": "", "creation_timestamp": "2025-03-31T17:48:35.661724Z"}, {"uuid": "9baa8f30-772c-46e6-95c0-32a79667d9ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13804", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114258301081662294", "content": "", "creation_timestamp": "2025-03-31T17:48:35.665382Z"}, {"uuid": "60d65642-d2ec-4b1e-a6c9-4d5cb2a63961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4gsncoaz2r", "content": "", "creation_timestamp": "2025-02-01T11:45:14.468011Z"}, {"uuid": "17ee79cc-16ad-47b7-9f51-8d2a410b330d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhl7zexbc527", "content": "", "creation_timestamp": "2025-02-07T08:53:41.265246Z"}, {"uuid": "309b3f0d-a6f2-44d5-9f9f-ebbddd62e63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhl7zf2xnq22", "content": "", "creation_timestamp": "2025-02-07T08:53:41.751025Z"}, {"uuid": "ca54d719-6da1-4f6f-bb72-0d485ecef7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13521", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrzatxbew2c", "content": "", "creation_timestamp": "2025-01-28T08:16:01.588538Z"}, {"uuid": "26abd47b-f5a2-4b86-8bd1-9f3aa1ee192d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13723", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113947890930352527", "content": "", "creation_timestamp": "2025-02-04T22:07:13.045211Z"}, {"uuid": "5c2bf768-8d01-4bc9-80e6-7c7e955bf8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4gsnkdrg2k", "content": "", "creation_timestamp": "2025-02-01T11:45:15.612882Z"}, {"uuid": "edf1f982-c12b-4457-890b-425fc20f21f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13527", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905037299606707", "content": "", "creation_timestamp": "2025-01-28T08:28:57.854235Z"}, {"uuid": "39473cfb-27f9-406d-bb40-9fbce07147df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4gsnnvnb2y", "content": "", "creation_timestamp": "2025-02-01T11:45:16.177069Z"}, {"uuid": "466b5b16-9f15-4ef0-a085-f5cf256dbb0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13722", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113947890915225546", "content": "", "creation_timestamp": "2025-02-04T22:07:13.125324Z"}, {"uuid": "dc5c74fe-52d5-45bf-89e7-1164c08314fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113905113590513418", "content": "", "creation_timestamp": "2025-01-28T08:48:25.674136Z"}, {"uuid": "34a40d6a-9aa3-4d17-8384-61993a2be671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13472", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzrdohrw62b", "content": "", "creation_timestamp": "2025-01-31T10:15:44.241900Z"}, {"uuid": "81622abd-d93c-47df-a55d-febf7de10224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4gsnrpv22k", "content": "", "creation_timestamp": "2025-02-01T11:45:16.737956Z"}, {"uuid": "e8a453a7-47b4-429d-ab41-9cbff92fc2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13722", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hjuolo2f", "content": "", "creation_timestamp": "2025-02-04T22:16:08.112035Z"}, {"uuid": "533a9407-5fcd-44b7-a962-a4ebb4a4b581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4gsnvbsg2u", "content": "", "creation_timestamp": "2025-02-01T11:45:17.290156Z"}, {"uuid": "10a68443-3ba9-4138-946c-dfcc90466330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13723", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hmblbc2c", "content": "", "creation_timestamp": "2025-02-04T22:16:10.884815Z"}, {"uuid": "832cf133-e931-45ba-bed3-765e2d064c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13612", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4lu5sblk2c", "content": "", "creation_timestamp": "2025-02-01T13:15:34.026108Z"}, {"uuid": "1e92c098-0020-4a16-9b90-67e449819e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13775", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4luad33y2t", "content": "", "creation_timestamp": "2025-02-01T13:15:36.259545Z"}, {"uuid": "1b4da668-ea3d-4fd1-baa4-d8b6c24f11b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13527", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs4kyz7v32n", "content": "", "creation_timestamp": "2025-01-28T09:15:23.289417Z"}, {"uuid": "0170e484-9d29-407d-9a1b-c92d9a02c3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13662", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuoz3wan2w", "content": "", "creation_timestamp": "2025-01-31T11:15:45.430626Z"}, {"uuid": "86bfc99d-e9ac-40b0-b5b3-5a6f65f25e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4tsascvf2q", "content": "", "creation_timestamp": "2025-02-01T15:37:39.637114Z"}, {"uuid": "2dc5ea5c-2bfb-4f9e-b50c-5fef3e2a7992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13642", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwwslr7kg2n", "content": "", "creation_timestamp": "2025-01-30T07:15:33.939550Z"}, {"uuid": "d086d66c-bc90-41ae-96b8-3ab0fc87118b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13775", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4tsb5g6b2g", "content": "", "creation_timestamp": "2025-02-01T15:37:40.301478Z"}, {"uuid": "5407f102-1660-4929-acd9-199c863dd8bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13403", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhe23zklbj2w", "content": "", "creation_timestamp": "2025-02-04T12:19:13.957509Z"}, {"uuid": "cb33ef12-0d12-4c15-830e-4a249dfac501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13698", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884039263614050", "content": "", "creation_timestamp": "2025-01-24T15:28:53.063241Z"}, {"uuid": "599b8632-5916-400d-94bf-9c3cc09e8e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13417", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvoqow7q2s", "content": "", "creation_timestamp": "2025-02-06T20:16:06.312532Z"}, {"uuid": "4c467f41-1cae-415e-bc7b-fe2cd45b39e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13699", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113945629161806241", "content": "", "creation_timestamp": "2025-02-04T12:32:00.549211Z"}, {"uuid": "df67d353-dc05-42e5-baa1-4b809027d764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13457", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwwsj5phs2e", "content": "", "creation_timestamp": "2025-01-30T07:15:31.330979Z"}, {"uuid": "fead9ecb-d79c-4258-8b48-3e6312a888b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13699", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhe5aovjwk2e", "content": "", "creation_timestamp": "2025-02-04T13:15:26.223629Z"}, {"uuid": "d738e547-2dbe-4a24-a710-d9ffe92b9366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13470", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113916114728274376", "content": "", "creation_timestamp": "2025-01-30T07:26:06.009466Z"}, {"uuid": "f7f1471b-83d2-4f67-9764-5ae784817cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg4s7r625", "content": "", "creation_timestamp": "2025-01-28T13:05:18.359306Z"}, {"uuid": "495cef7b-7939-4414-8835-f9965156b4ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg4zibg2k", "content": "", "creation_timestamp": "2025-01-28T13:05:19.526239Z"}, {"uuid": "a75a4b35-017e-4440-9e88-0ea948fdbb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13470", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgx26d563n2r", "content": "", "creation_timestamp": "2025-01-30T08:15:57.292943Z"}, {"uuid": "e363e947-e173-4776-9ab8-7456e1f999bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113916339058988790", "content": "", "creation_timestamp": "2025-01-30T08:23:09.027604Z"}, {"uuid": "93ebe30a-007e-4213-8b44-8f251cd8a7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13758", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113916339089732944", "content": "", "creation_timestamp": "2025-01-30T08:23:09.479502Z"}, {"uuid": "0c6427ae-2f2d-4533-b180-24ffb476e502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5eisa2i", "content": "", "creation_timestamp": "2025-01-28T13:05:21.198227Z"}, {"uuid": "8115db1e-d377-4f65-8616-ee87facb3c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13732", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113916339074273108", "content": "", "creation_timestamp": "2025-01-30T08:23:09.263174Z"}, {"uuid": "521d92d4-e5a6-4ec8-a91b-86b2896fa47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13694", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgx5ipqogz2c", "content": "", "creation_timestamp": "2025-01-30T09:15:33.143211Z"}, {"uuid": "c9316bea-3ab9-4730-9147-a79a526805c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13732", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgx5is3uit2t", "content": "", "creation_timestamp": "2025-01-30T09:15:38.540784Z"}, {"uuid": "58b70f7c-b0dd-4bcd-9b7e-dcb0812e9ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5ytht2w", "content": "", "creation_timestamp": "2025-01-28T13:05:24.747171Z"}, {"uuid": "30d15ff2-bd6d-4d1a-a417-03fbda3ff150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13758", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgx5iurnuc2f", "content": "", "creation_timestamp": "2025-01-30T09:15:44.742070Z"}, {"uuid": "5ce7a689-72b1-4ef8-8b4c-7772f72b11fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13720", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lh27ntfylv2m", "content": "", "creation_timestamp": "2025-01-31T14:31:57.806955Z"}, {"uuid": "6fe3f5ac-7e31-4416-9927-0e031b7e0cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13742", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lh27nuqe4c2q", "content": "", "creation_timestamp": "2025-01-31T14:31:59.614252Z"}, {"uuid": "de92523d-7a95-448f-a6a2-99904d0437c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13527", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg6gnhu2r", "content": "", "creation_timestamp": "2025-01-28T13:05:27.014375Z"}, {"uuid": "3586834e-58dc-4a02-9b51-72c5544537e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13722", "type": "seen", "source": "https://bsky.app/profile/jimbecher.bsky.social/post/3lhfgmvvazc23", "content": "", "creation_timestamp": "2025-02-05T01:35:59.915984Z"}, {"uuid": "e934fd89-150a-43f7-ba25-c0acf2e26897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13723", "type": "seen", "source": "https://bsky.app/profile/jimbecher.bsky.social/post/3lhfgnjo7vk23", "content": "", "creation_timestamp": "2025-02-05T01:36:20.279120Z"}, {"uuid": "3f60524b-6ad2-4808-9701-d87775075b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lheaqviv452u", "content": "", "creation_timestamp": "2025-02-04T14:18:11.188608Z"}, {"uuid": "17115d66-7d78-43f6-a145-d8954587b1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lheaqvyi652v", "content": "", "creation_timestamp": "2025-02-04T14:18:12.467845Z"}, {"uuid": "563c016d-549d-4815-a5cc-a99a18c66443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lheaqw4puu2r", "content": "", "creation_timestamp": "2025-02-04T14:18:13.011053Z"}, {"uuid": "57745a4f-c154-4a0d-957f-431256c08b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lheaqwbk672f", "content": "", "creation_timestamp": "2025-02-04T14:18:13.646170Z"}, {"uuid": "d6ab3eeb-cb9f-4f2a-991e-34715c4b5ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhfjcgyzro2v", "content": "", "creation_timestamp": "2025-02-05T02:23:51.272498Z"}, {"uuid": "d3a02136-75c0-42aa-ae3d-a9f89166532c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13453", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917016519417074", "content": "", "creation_timestamp": "2025-01-30T11:15:27.103877Z"}, {"uuid": "4305bbd9-c975-47ef-8685-44ed62ab4213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13733", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lheaqwlqdn2u", "content": "", "creation_timestamp": "2025-02-04T14:18:15.709736Z"}, {"uuid": "3ad2c5a1-d472-4c9d-a049-eb4a8745e8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13706", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917016533701154", "content": "", "creation_timestamp": "2025-01-30T11:15:27.208582Z"}, {"uuid": "85e0a9cc-8774-4526-adeb-5213eea8798d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13453", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeabt7yy2n", "content": "", "creation_timestamp": "2025-01-30T11:15:51.916591Z"}, {"uuid": "9b023d88-21bc-43ff-a013-b8cfaf0b0f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13706", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeaeslcw2w", "content": "", "creation_timestamp": "2025-01-30T11:15:55.023430Z"}, {"uuid": "32c7fdae-6f4a-4147-b458-39cbadc82a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhfjchpcrc2q", "content": "", "creation_timestamp": "2025-02-05T02:23:55.032557Z"}, {"uuid": "2e0350ee-09ff-436a-9ced-c75641e65ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13614", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957861599808876", "content": "", "creation_timestamp": "2025-02-06T16:22:52.894989Z"}, {"uuid": "ced95a49-0ba0-4ce7-82c9-87d7811f0743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13352", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113961122645272686", "content": "", "creation_timestamp": "2025-02-07T06:12:12.351628Z"}, {"uuid": "bb0ca135-6cd7-43bd-9611-50e7799608c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13492", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113961122659898498", "content": "", "creation_timestamp": "2025-02-07T06:12:12.748323Z"}, {"uuid": "bbf32453-c46e-42c1-a578-78c5a1007c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13487", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113955642020617342", "content": "", "creation_timestamp": "2025-02-06T06:58:24.704993Z"}, {"uuid": "bcecb159-6d9d-4667-9a94-6ee7d2244d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13352", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkxavpowy26", "content": "", "creation_timestamp": "2025-02-07T06:16:48.882350Z"}, {"uuid": "0db3ec56-3983-475a-8a90-6b15f61d774d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13115", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944121166063683", "content": "", "creation_timestamp": "2025-02-04T06:08:30.912907Z"}, {"uuid": "01a46361-7ec0-4c7c-b05a-47f9ef4135cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoaon7e22v", "content": "", "creation_timestamp": "2025-01-28T14:31:48.507088Z"}, {"uuid": "62baa6f0-0d12-4da8-9e08-a39bc5afe571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13325", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944121180981768", "content": "", "creation_timestamp": "2025-02-04T06:08:31.232465Z"}, {"uuid": "91cc2809-5eb3-4a8d-b421-a64d601d5568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13114", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944121148585749", "content": "", "creation_timestamp": "2025-02-04T06:08:31.343782Z"}, {"uuid": "e48cd1a8-61d6-4dc2-b0e9-e125ea02b42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13505", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113894422663486289", "content": "", "creation_timestamp": "2025-01-26T11:29:32.342506Z"}, {"uuid": "6621d30b-5c1a-4a9b-91a8-8a74582adb30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944121195446860", "content": "", "creation_timestamp": "2025-02-04T06:08:31.441841Z"}, {"uuid": "d3bf62a6-fee5-4183-ab53-ae8d6c8317db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13114", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944139618963568", "content": "", "creation_timestamp": "2025-02-04T06:13:11.843394Z"}, {"uuid": "0614b984-1772-4189-a3be-9a8feff2ebc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13115", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944139633952082", "content": "", "creation_timestamp": "2025-02-04T06:13:12.162011Z"}, {"uuid": "19167348-6fa1-478a-9678-0a7bf2d2b4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944139662774431", "content": "", "creation_timestamp": "2025-02-04T06:13:12.568085Z"}, {"uuid": "83fa25f3-2cd4-4c11-91f4-635223b1eeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13332", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdft6fq6e2f", "content": "", "creation_timestamp": "2025-02-04T06:16:16.671831Z"}, {"uuid": "13fb12b2-40af-4243-be5a-77038268659b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13380", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917345289941698", "content": "", "creation_timestamp": "2025-01-30T12:39:02.892326Z"}, {"uuid": "84a0213b-364a-48b6-b0dc-5210657b92f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13325", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944139648291437", "content": "", "creation_timestamp": "2025-02-04T06:13:12.257001Z"}, {"uuid": "36a05c65-66cb-4cdf-abf8-56567fd52b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13505", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnfq3kvpc2n", "content": "", "creation_timestamp": "2025-01-26T12:15:58.512406Z"}, {"uuid": "cd25c7e0-6dff-4dda-875c-5cbbb7d070fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13466", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917345308287387", "content": "", "creation_timestamp": "2025-01-30T12:39:03.183163Z"}, {"uuid": "4987de13-8f8c-4618-ac6c-698887fcbe3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13114", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfsh3orj2b", "content": "", "creation_timestamp": "2025-02-04T06:15:52.193428Z"}, {"uuid": "a3da73a9-50c5-4521-8fe8-d8bf12f5cbe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13115", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfskc6t22i", "content": "", "creation_timestamp": "2025-02-04T06:15:55.424258Z"}, {"uuid": "35283c3f-7fad-46b1-92a5-87c087780173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdft3mpy62e", "content": "", "creation_timestamp": "2025-02-04T06:16:13.504647Z"}, {"uuid": "548fc46e-24e1-49b0-a274-547f1fac5dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13325", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfsncsnw2e", "content": "", "creation_timestamp": "2025-02-04T06:15:58.686253Z"}, {"uuid": "d2730667-1804-4178-b670-9329946c7031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfspqys42c", "content": "", "creation_timestamp": "2025-02-04T06:16:01.184663Z"}, {"uuid": "508373fe-e420-41b1-87fc-451903059b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13829", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113949630339559126", "content": "", "creation_timestamp": "2025-02-05T05:29:33.761812Z"}, {"uuid": "b6d833e7-6450-45c8-b681-c4b1c9c4cf7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13327", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfss57t32t", "content": "", "creation_timestamp": "2025-02-04T06:16:03.850109Z"}, {"uuid": "68978502-a06b-4501-8296-0c9e41e3beba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13380", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxkwdgylb2b", "content": "", "creation_timestamp": "2025-01-30T13:15:34.277487Z"}, {"uuid": "5be03a2a-5f0a-4c79-9a4e-255f0defb20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13328", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfsuh2442n", "content": "", "creation_timestamp": "2025-02-04T06:16:06.220016Z"}, {"uuid": "d255483a-51f8-4f4a-9374-634d94b006c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13829", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfwbklrar2h", "content": "", "creation_timestamp": "2025-02-05T06:15:58.867105Z"}, {"uuid": "ff590eb6-5dc6-4be1-b781-dc47bba9f8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13492", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkxaxwgpu2v", "content": "", "creation_timestamp": "2025-02-07T06:16:51.239070Z"}, {"uuid": "5207dfd5-1d2e-4634-843b-d944bcdf269e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13466", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxkwfrj3h2f", "content": "", "creation_timestamp": "2025-01-30T13:15:37.141513Z"}, {"uuid": "af8620e9-c87e-4c56-9264-95e9f748964a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13329", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfswomx42f", "content": "", "creation_timestamp": "2025-02-04T06:16:08.412230Z"}, {"uuid": "14b35929-0b40-4f29-b5a9-e7ca06ea94b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13696", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113910446652398317", "content": "", "creation_timestamp": "2025-01-29T07:24:38.042719Z"}, {"uuid": "f06019f7-a610-4d9f-8d89-0542b17a5e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13330", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfsz3t322i", "content": "", "creation_timestamp": "2025-02-04T06:16:10.988706Z"}, {"uuid": "62c613a6-cbf1-4ec9-838e-bda30e0c4efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13505", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgno3rx5kr2k", "content": "", "creation_timestamp": "2025-01-26T14:45:43.576785Z"}, {"uuid": "d040dc9f-25f3-4708-8ac6-da8ed3a71c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lgsth4j5nz2k", "content": "", "creation_timestamp": "2025-01-28T16:04:48.927345Z"}, {"uuid": "6b092320-b6b0-48b3-a998-5b232f08e45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13696", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgujowwooz2h", "content": "", "creation_timestamp": "2025-01-29T08:15:33.453244Z"}, {"uuid": "8a345db3-cc21-4eb1-b034-a4a10163d00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13327", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944198685147566", "content": "", "creation_timestamp": "2025-02-04T06:28:13.216915Z"}, {"uuid": "2b8f0a48-5822-4299-957f-3e700a234515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13396", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920614648826713", "content": "", "creation_timestamp": "2025-01-31T02:30:29.300675Z"}, {"uuid": "bf9d8122-6743-490d-b0ce-c1d405debd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13328", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944198699864390", "content": "", "creation_timestamp": "2025-02-04T06:28:13.410559Z"}, {"uuid": "0fe9b2c9-c66b-4832-accd-25da44ba1f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13397", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920614665135760", "content": "", "creation_timestamp": "2025-01-31T02:30:29.668707Z"}, {"uuid": "3c83f8c0-7e5a-4f1b-89ec-dc4a82791a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13767", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920614693980113", "content": "", "creation_timestamp": "2025-01-31T02:30:29.949827Z"}, {"uuid": "73f6563e-d7d3-4761-8688-fbd939aa7b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13329", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944198714841997", "content": "", "creation_timestamp": "2025-02-04T06:28:13.779308Z"}, {"uuid": "4d294f8d-1245-45f1-aa74-dcb7bfe6fa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13399", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920614679818356", "content": "", "creation_timestamp": "2025-01-31T02:30:29.726217Z"}, {"uuid": "7a5600ee-5d2c-4955-b175-041a91cd74a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13330", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944198729165110", "content": "", "creation_timestamp": "2025-02-04T06:28:18.651595Z"}, {"uuid": "8076cdd8-6e74-4544-99be-00dc4a450f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13396", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyztzdehq2r", "content": "", "creation_timestamp": "2025-01-31T03:15:22.656990Z"}, {"uuid": "b2bccd01-571f-4488-bc5a-f92414e09ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13397", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyzu4jrie27", "content": "", "creation_timestamp": "2025-01-31T03:15:25.943183Z"}, {"uuid": "a17a39fe-cd0a-40d5-aff2-cf2819d720e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13399", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyzu6ui3f2t", "content": "", "creation_timestamp": "2025-01-31T03:15:28.175522Z"}, {"uuid": "45aee08b-2d62-4052-8ae4-50553c07c392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13487", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhik3bo6ic2t", "content": "", "creation_timestamp": "2025-02-06T07:15:42.157419Z"}, {"uuid": "6e48b328-5292-4e7e-bf28-5bb13ee670c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13767", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyzubdifn2t", "content": "", "creation_timestamp": "2025-01-31T03:15:30.798779Z"}, {"uuid": "16938357-3fe5-4415-b971-032c5e2033ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13331", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944257725945915", "content": "", "creation_timestamp": "2025-02-04T06:43:14.086299Z"}, {"uuid": "33f37f86-4907-4e70-a775-032e3ef41960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13332", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944257740323451", "content": "", "creation_timestamp": "2025-02-04T06:43:14.847990Z"}, {"uuid": "34e897f3-bdec-440a-9f26-111c79c87df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13817", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyzueaj662f", "content": "", "creation_timestamp": "2025-01-31T03:15:34.017469Z"}, {"uuid": "e80d55d4-df9a-4d02-b7c9-22edc16b762f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13715", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxof6d2t42h", "content": "", "creation_timestamp": "2025-01-30T14:17:33.391303Z"}, {"uuid": "8ac88c7f-5eed-49f7-ae9b-f0a5e7116a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13549", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoecg53l2w", "content": "", "creation_timestamp": "2025-01-30T14:17:04.125367Z"}, {"uuid": "129811cc-3604-4f92-8240-ddf6854cda3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13607", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdj63yufe2i", "content": "", "creation_timestamp": "2025-02-04T07:16:04.274830Z"}, {"uuid": "06bf1214-b940-4f09-a00c-59b5a12b2c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13463", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920848389854184", "content": "", "creation_timestamp": "2025-01-31T03:29:55.994984Z"}, {"uuid": "6057847f-ed92-4011-975a-d84c1053ffdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13460", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoe5qq6x2e", "content": "", "creation_timestamp": "2025-01-30T14:16:59.158345Z"}, {"uuid": "3c49077e-416c-4bdc-8f05-80315c897326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13596", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoeeqgut2c", "content": "", "creation_timestamp": "2025-01-30T14:17:06.616136Z"}, {"uuid": "6cc9efd2-1d47-4845-8a16-757126b03a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13664", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoep2scm2r", "content": "", "creation_timestamp": "2025-01-30T14:17:17.755649Z"}, {"uuid": "28bad12d-a460-4fb7-b6a9-61b06b8be2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13720", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxofak4jv27", "content": "", "creation_timestamp": "2025-01-30T14:17:35.689972Z"}, {"uuid": "7bbb0249-dc29-44d5-844c-4201bf3a4af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13349", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodzgtjf27", "content": "", "creation_timestamp": "2025-01-30T14:16:54.721841Z"}, {"uuid": "42633d1a-7279-419f-a9f9-b935deb56b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13400", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoe3j2f42h", "content": "", "creation_timestamp": "2025-01-30T14:16:57.141799Z"}, {"uuid": "661acf49-d909-4781-98fb-79433ed45ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13447", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdaikotf62j", "content": "", "creation_timestamp": "2025-01-22T11:15:40.271770Z"}, {"uuid": "b089e396-92d3-497c-9e51-4901a8ae0c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13495", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdainic6k2t", "content": "", "creation_timestamp": "2025-01-22T11:15:42.755551Z"}, {"uuid": "83fbf9fe-68b1-4452-a894-b9ead1d6a0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdaiqmrjn2j", "content": "", "creation_timestamp": "2025-01-22T11:15:46.154687Z"}, {"uuid": "9243a6af-1af9-4ca4-8493-a31e796873be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13499", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdaiteuyb2b", "content": "", "creation_timestamp": "2025-01-22T11:15:49.063928Z"}, {"uuid": "982bc11d-375d-413a-9947-8fc2618ed1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13707", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxof42fnt2t", "content": "", "creation_timestamp": "2025-01-30T14:17:30.978880Z"}, {"uuid": "32192168-d36d-4edd-b918-51dafe143b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13512", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoea3ldt2w", "content": "", "creation_timestamp": "2025-01-30T14:17:01.665444Z"}, {"uuid": "71a865b6-d3fa-4f7c-bf84-312ae3b82acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13646", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoehbx2i2t", "content": "", "creation_timestamp": "2025-01-30T14:17:09.249079Z"}, {"uuid": "44e393a5-3b25-4909-8e12-73f2b12ce3b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13652", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoejpfut2f", "content": "", "creation_timestamp": "2025-01-30T14:17:11.836204Z"}, {"uuid": "859abfcc-c818-475f-955b-aff1ac1ca200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13671", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoetp4zb2t", "content": "", "creation_timestamp": "2025-01-30T14:17:22.263190Z"}, {"uuid": "e3f857f7-5f30-402d-9cea-d6c3f9923bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13661", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoeluhr52j", "content": "", "creation_timestamp": "2025-01-30T14:17:14.140458Z"}, {"uuid": "c189498c-3772-4d96-a826-fbec95e3034d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13670", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoerf3xq2c", "content": "", "creation_timestamp": "2025-01-30T14:17:19.936627Z"}, {"uuid": "dff796f4-d414-4eef-bc94-18d4610ceef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13700", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoexlcnj2t", "content": "", "creation_timestamp": "2025-01-30T14:17:26.762260Z"}, {"uuid": "06d8d9c6-1b35-45f0-bc17-72514dffe868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13705", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoezpdiq2c", "content": "", "creation_timestamp": "2025-01-30T14:17:28.581183Z"}, {"uuid": "8268dfda-870b-4956-9fb1-1dad2e7c56af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13463", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgz5acwit32f", "content": "", "creation_timestamp": "2025-01-31T04:15:56.839681Z"}, {"uuid": "fd78114e-55bc-4f00-815d-29315a232a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13343", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3npcce7u2h", "content": "", "creation_timestamp": "2025-02-01T04:15:58.425345Z"}, {"uuid": "e81d69ff-2077-4bff-ae9d-5be9616e3fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13651", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3nph5r7z2p", "content": "", "creation_timestamp": "2025-02-01T04:16:03.623450Z"}, {"uuid": "12de913b-a705-40c5-b6db-bfa611e8a917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13349", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917789494106875", "content": "", "creation_timestamp": "2025-01-30T14:32:02.823655Z"}, {"uuid": "fc12c3fc-f86e-430f-8c35-d9c67cbc2df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13709", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113886870046975534", "content": "", "creation_timestamp": "2025-01-25T03:28:47.535100Z"}, {"uuid": "2edc61e4-04b4-4f3d-a985-a155978f7fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13547", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3npevnhs27", "content": "", "creation_timestamp": "2025-02-01T04:16:01.135032Z"}, {"uuid": "d2c21601-5085-41e5-a6f2-756d25bf7067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdc4aooz42k", "content": "", "creation_timestamp": "2025-01-22T11:44:34.361398Z"}, {"uuid": "df5adf3f-c2bb-4aa5-9f3f-d46e3a528ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13495", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdc4ay36p2u", "content": "", "creation_timestamp": "2025-01-22T11:44:34.923129Z"}, {"uuid": "f9fe0def-c0f1-4a7c-859f-fe0124fe4c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13447", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdc4b3kax2e", "content": "", "creation_timestamp": "2025-01-22T11:44:35.403419Z"}, {"uuid": "bd04aebd-b5fb-4629-b464-a98068a6e321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13499", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdc4b6pum2g", "content": "", "creation_timestamp": "2025-01-22T11:44:35.920459Z"}, {"uuid": "8bd3827b-a9cf-4527-938d-82566031fd80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13400", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917848495901740", "content": "", "creation_timestamp": "2025-01-30T14:47:01.122276Z"}, {"uuid": "a5843f9a-10ba-4eea-8ca8-40845de584f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13460", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917848510514042", "content": "", "creation_timestamp": "2025-01-30T14:47:01.506648Z"}, {"uuid": "77b5fafc-1ea9-407a-bb52-b43a4fd84783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13512", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917848525203835", "content": "", "creation_timestamp": "2025-01-30T14:47:01.718273Z"}, {"uuid": "3c0d3d3b-19e9-4e70-b840-460ef0f535e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13767", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113921157242991223", "content": "", "creation_timestamp": "2025-01-31T04:48:29.725497Z"}, {"uuid": "d7ad138e-d259-4f79-865b-195aae899d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13721", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887351219803626", "content": "", "creation_timestamp": "2025-01-25T05:31:09.809816Z"}, {"uuid": "d31cdc9b-31b8-4053-a11a-0f45d39a426d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13549", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917848568461766", "content": "", "creation_timestamp": "2025-01-30T14:47:02.181925Z"}, {"uuid": "bcc28abb-1360-428f-93a8-33acb0570bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13091", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgdprywr6m23", "content": "", "creation_timestamp": "2025-01-22T15:49:25.119330Z"}, {"uuid": "245a6284-548d-4687-a7ec-c0279bfe79fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13596", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917907566731523", "content": "", "creation_timestamp": "2025-01-30T15:02:02.589797Z"}, {"uuid": "816f9201-da9e-4a9d-b72a-32e9604f7fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13484", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907275874599319", "content": "", "creation_timestamp": "2025-01-28T17:58:16.228789Z"}, {"uuid": "14e53e77-bb5d-477c-b5cc-bc541d5a5fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13646", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917907581375526", "content": "", "creation_timestamp": "2025-01-30T15:02:02.831810Z"}, {"uuid": "6220a83e-8c01-44f1-96a5-515a42be0f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13850", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113968257327109943", "content": "", "creation_timestamp": "2025-02-08T12:26:39.205363Z"}, {"uuid": "b16dd79c-993b-4480-b319-39f820487901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13850", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lho74czs4a22", "content": "", "creation_timestamp": "2025-02-08T13:15:24.599745Z"}, {"uuid": "8b9c05f0-ea47-4e58-8be7-9b5b3ea7ba6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhoayphci62p", "content": "", "creation_timestamp": "2025-02-08T13:49:10.893440Z"}, {"uuid": "139a2daa-7b96-4f22-9a9c-b4b61d122f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13440", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113972028460516363", "content": "", "creation_timestamp": "2025-02-09T04:25:41.872982Z"}, {"uuid": "8ba886be-b85a-48df-a1c1-09a77559df36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13440", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhpurv6ykz22", "content": "", "creation_timestamp": "2025-02-09T05:15:57.077406Z"}, {"uuid": "5b795444-0840-4ad0-b4c4-cc12f55f1478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13440", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113972810450751089", "content": "", "creation_timestamp": "2025-02-09T07:44:33.928569Z"}, {"uuid": "bd4daa25-c3a7-4345-a98d-d34a923143b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhq5dubjda2m", "content": "", "creation_timestamp": "2025-02-09T07:49:09.381662Z"}, {"uuid": "d8b2db65-8cc0-45a6-bbfa-de8e03556960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3533543", "content": "", "creation_timestamp": "2025-03-10T20:37:16.530432Z"}, {"uuid": "937fd813-05a7-45fd-b95d-aae421269c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3533544", "content": "", "creation_timestamp": "2025-03-10T20:37:17.410314Z"}, {"uuid": "3b9d941f-2642-4960-af08-85723b10da14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3533545", "content": "", "creation_timestamp": "2025-03-10T20:37:18.350178Z"}, {"uuid": "37d4d59c-ea5d-4fe8-81a5-3d459db13b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr44zsl22", "content": "", "creation_timestamp": "2025-03-07T12:04:54.049150Z"}, {"uuid": "694f5733-48bd-49e8-ae4f-77983b5cbf84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13904", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4s67t2q", "content": "", "creation_timestamp": "2025-03-07T12:04:56.632922Z"}, {"uuid": "c3516286-a433-4407-bcc0-bdba93db6e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpoa2d4et26", "content": "", "creation_timestamp": "2025-03-19T07:34:10.784453Z"}, {"uuid": "06d3bae0-19ac-4004-ac6e-f8bb038c399a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6htq45r2s", "content": "", "creation_timestamp": "2025-03-07T14:04:59.310875Z"}, {"uuid": "09643295-c71f-4c9b-bd9b-ce823da99cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6hu4km22y", "content": "", "creation_timestamp": "2025-03-07T14:05:00.008044Z"}, {"uuid": "e24a5db9-b830-49ab-8748-4de9f18b0d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpol2gbfw24", "content": "", "creation_timestamp": "2025-03-19T07:40:19.774256Z"}, {"uuid": "ef5bf0fc-6f44-46f1-8b5a-c5b135c0d1aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6huovxc2j", "content": "", "creation_timestamp": "2025-03-07T14:05:02.246581Z"}, {"uuid": "d27979ea-eab1-4c9b-ad15-abcc6705695f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13010", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981085096993190", "content": "", "creation_timestamp": "2025-02-10T18:48:55.033396Z"}, {"uuid": "6edea62a-2466-4e89-aaac-cb27c4d57110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13011", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981085112799530", "content": "", "creation_timestamp": "2025-02-10T18:48:55.278207Z"}, {"uuid": "d9156025-882f-4eb0-8bf3-06c30e715d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981105511208498", "content": "", "creation_timestamp": "2025-02-10T18:54:08.623049Z"}, {"uuid": "8d97484b-33e7-4d51-a690-b663433e9f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981122733283417", "content": "", "creation_timestamp": "2025-02-10T18:58:29.499629Z"}, {"uuid": "d7fa6ed5-0fa5-4d0c-9d78-9273938fd12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13010", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu6rc2ai2z", "content": "", "creation_timestamp": "2025-02-10T19:15:54.095914Z"}, {"uuid": "a2c76a8b-5c4e-4552-93e7-64e8e42d7816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13011", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu6trl4i2v", "content": "", "creation_timestamp": "2025-02-10T19:15:56.150124Z"}, {"uuid": "1f72c043-197f-4365-82ed-8111c33d1c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu6x43ls2h", "content": "", "creation_timestamp": "2025-02-10T19:16:00.065718Z"}, {"uuid": "6baaf996-a605-4a56-ba42-9d3e52437935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13011", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113981557120057657", "content": "", "creation_timestamp": "2025-02-10T20:49:06.051430Z"}, {"uuid": "585a9f0c-bb20-419d-ba64-cde7230ef667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13010", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhu5whjxsg2q", "content": "", "creation_timestamp": "2025-02-10T22:10:13.616481Z"}, {"uuid": "74302f25-554a-4a87-8d6c-03664171b83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhu5wi3jzh2a", "content": "", "creation_timestamp": "2025-02-10T22:10:16.706107Z"}, {"uuid": "34b81a36-8f0c-4469-a121-fa1df30a8561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13412", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lkprzjya2g2r", "content": "", "creation_timestamp": "2025-03-19T08:42:07.009051Z"}, {"uuid": "a6a0f621-a156-417f-a02e-3d101807a241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lix6fvo42i2b", "content": "", "creation_timestamp": "2025-02-24T20:22:01.515295Z"}, {"uuid": "496542b1-770e-4e7d-beb1-ea66ffaaed90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljaea3eqtl27", "content": "", "creation_timestamp": "2025-02-28T12:00:06.707868Z"}, {"uuid": "8cad10fd-10d7-4c6c-b6b5-a086eabb86ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114188229100222629", "content": "", "creation_timestamp": "2025-03-19T08:48:21.938363Z"}, {"uuid": "600f8db3-8a69-4378-a8b0-6c75a11287d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk4uiidp622i", "content": "", "creation_timestamp": "2025-03-11T20:05:45.496005Z"}, {"uuid": "86826e9a-9806-4613-9852-10c3522635d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk4uiidp622i", "content": "", "creation_timestamp": "2025-03-11T20:05:45.578198Z"}, {"uuid": "444b971a-fc89-4f9d-bed1-12ca330e2feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk4uiidp622i", "content": "", "creation_timestamp": "2025-03-11T20:05:45.647312Z"}, {"uuid": "5ad55eeb-6c54-4200-8da7-30d7b5a35e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-13871", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114150351492237731", "content": "", "creation_timestamp": "2025-03-12T16:15:35.364109Z"}, {"uuid": "c1f3dae9-b6a4-49a5-874d-dbf9aff6b122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-13872", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114150351492237731", "content": "", "creation_timestamp": "2025-03-12T16:15:35.432163Z"}, {"uuid": "69761b41-b1fa-441d-86a8-1bf1950814f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lkptneuv352k", "content": "", "creation_timestamp": "2025-03-19T09:11:06.447099Z"}, {"uuid": "5ac9b06e-000b-4758-96d9-afb2424e92a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13871", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lk6y3zhizs2r", "content": "", "creation_timestamp": "2025-03-12T16:15:37.800014Z"}, {"uuid": "47f3f668-4200-402d-9289-e6eec5f29beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lk6y3zhizs2r", "content": "", "creation_timestamp": "2025-03-12T16:15:37.875367Z"}, {"uuid": "02255217-9abc-49fe-aafe-c41e94c4ad52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13124", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll4kmohckb26", "content": "", "creation_timestamp": "2025-03-24T10:34:15.549196Z"}, {"uuid": "b2b33409-09e1-4ece-b166-a63e57b3b6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13011", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhumdbplje26", "content": "", "creation_timestamp": "2025-02-11T02:27:55.000645Z"}, {"uuid": "eb7b9407-388f-45ef-8a85-19687677fda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13790", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpvbnadmm24", "content": "", "creation_timestamp": "2025-03-19T09:40:19.941724Z"}, {"uuid": "ad4669df-60f6-46a1-a13c-94c295282822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13442", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkrbxrrt7f2z", "content": "", "creation_timestamp": "2025-03-19T23:00:10.309354Z"}, {"uuid": "71247e14-9e69-4723-8deb-8bb38856c876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lixa4236ft2u", "content": "", "creation_timestamp": "2025-02-24T20:52:18.961508Z"}, {"uuid": "a818f9fb-cc3c-4eef-b060-4c1e6f4fcbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkrbxrbasq2j", "content": "", "creation_timestamp": "2025-03-19T23:00:08.734061Z"}, {"uuid": "47ade8a1-0d12-4276-9207-a98efc705b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13790", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkrbxrjxjp2q", "content": "", "creation_timestamp": "2025-03-19T23:00:09.552854Z"}, {"uuid": "7ef8798a-1570-4f59-8b5d-f223576ce680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lixancqmsv2f", "content": "", "creation_timestamp": "2025-02-24T21:01:58.009944Z"}, {"uuid": "2023c037-303a-4f4a-aaed-266962537a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lixanct3ra2k", "content": "", "creation_timestamp": "2025-02-24T21:01:58.484921Z"}, {"uuid": "74566441-fdc3-4893-99dd-e62e790efc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lixancvqhv2l", "content": "", "creation_timestamp": "2025-02-24T21:01:59.196920Z"}, {"uuid": "73a0f4e4-20ea-46f6-8e90-b73acdce7465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13543", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113983764802916706", "content": "", "creation_timestamp": "2025-02-11T06:10:24.220315Z"}, {"uuid": "6d3784db-de03-456c-b01a-792d8fdc7538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13544", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113983764817347521", "content": "", "creation_timestamp": "2025-02-11T06:10:24.526049Z"}, {"uuid": "2003e728-976b-4c80-a80e-ae51f3643c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13570", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113983764830958800", "content": "", "creation_timestamp": "2025-02-11T06:10:24.698831Z"}, {"uuid": "0318d7fc-a222-4c0e-9d4a-35c646caf7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13543", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuz2gllud2h", "content": "", "creation_timestamp": "2025-02-11T06:15:36.519454Z"}, {"uuid": "0ea918a9-b283-49d4-acf8-2d657670bdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13544", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuz2j4gi222", "content": "", "creation_timestamp": "2025-02-11T06:15:39.488861Z"}, {"uuid": "8a255621-e138-4419-8b5c-173e2a9c9fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13570", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuz2lnozs23", "content": "", "creation_timestamp": "2025-02-11T06:15:41.853890Z"}, {"uuid": "f48d2581-5823-43e8-b6b4-cae967fb9220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13643", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113984096796796467", "content": "", "creation_timestamp": "2025-02-11T07:34:49.967297Z"}, {"uuid": "36799d58-596c-4123-9b7e-85d866b268c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13643", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhv7reljtx23", "content": "", "creation_timestamp": "2025-02-11T08:15:49.859175Z"}, {"uuid": "b036a930-18da-492f-838f-5a24c493169b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13544", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhv7yeeocb2p", "content": "", "creation_timestamp": "2025-02-11T08:19:43.473878Z"}, {"uuid": "dc0808c1-d787-44df-973b-54aca98106fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhv7yff5322m", "content": "", "creation_timestamp": "2025-02-11T08:19:47.494521Z"}, {"uuid": "67c4f7ad-b17b-45aa-bf9e-6761ba8416c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13570", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhv7yfm53c2e", "content": "", "creation_timestamp": "2025-02-11T08:19:48.560365Z"}, {"uuid": "68a0af11-93b7-4e87-9068-ae2b4856aa29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13643", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113984386006622303", "content": "", "creation_timestamp": "2025-02-11T08:48:23.410972Z"}, {"uuid": "7f45702a-55e0-4757-939b-542f4fa7c6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13643", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhviwprm5r2c", "content": "", "creation_timestamp": "2025-02-11T10:59:52.096426Z"}, {"uuid": "2fd74509-871c-40f4-9dd3-b75b127fc396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13506", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjsrhhua22", "content": "", "creation_timestamp": "2025-02-11T11:15:33.511240Z"}, {"uuid": "69230580-5efd-4b01-a5a5-0be45a1a93e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13011", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhvuv7spf722", "content": "", "creation_timestamp": "2025-02-11T14:33:46.534647Z"}, {"uuid": "e2afccec-f414-44eb-8c8d-5aa70814be61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13830", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113985946518586560", "content": "", "creation_timestamp": "2025-02-11T15:25:14.592499Z"}, {"uuid": "eb54c034-8fcc-4deb-9987-c8836a4933a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13813", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mjhqwy2x", "content": "", "creation_timestamp": "2025-02-11T16:16:17.039311Z"}, {"uuid": "1787b91e-d26e-4c05-80a3-9d5d83d0061c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13830", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mltlp62x", "content": "", "creation_timestamp": "2025-02-11T16:16:19.459485Z"}, {"uuid": "b3c30236-2710-4ef7-96bd-588ddce4d9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13842", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mofonk2a", "content": "", "creation_timestamp": "2025-02-11T16:16:22.524048Z"}, {"uuid": "0af50dfe-509d-495f-985b-ffed02b46557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13843", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mqwcqj2z", "content": "", "creation_timestamp": "2025-02-11T16:16:24.898306Z"}, {"uuid": "91bdf0f9-79d0-445e-b7df-cfe13023a610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13147", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzuux5m2b", "content": "", "creation_timestamp": "2025-03-06T12:00:34.244550Z"}, {"uuid": "765789eb-4c25-4632-96fa-d88e8d0901c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk4wpiagyk2x", "content": "", "creation_timestamp": "2025-03-11T20:45:32.908575Z"}, {"uuid": "4747e659-c032-4d93-98c5-b72f4f32a837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk4wpiagyk2x", "content": "", "creation_timestamp": "2025-03-11T20:45:32.978963Z"}, {"uuid": "0abbd10e-6ddb-4f5b-8b8a-476416ff6082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1355", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5mifm7ss22", "content": "", "creation_timestamp": "2025-03-24T20:40:19.223475Z"}, {"uuid": "464ad6fa-4f9d-470a-96d3-0eebbcc506a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13830", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/113986844143593949", "content": "", "creation_timestamp": "2025-02-11T19:13:31.592981Z"}, {"uuid": "8c7a9a53-0190-490c-a500-3e7abdb988a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13842", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/113986844143593949", "content": "", "creation_timestamp": "2025-02-11T19:13:31.652443Z"}, {"uuid": "bbc7b472-e9e1-4e7c-9b66-0f91396f1a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13843", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/113986844143593949", "content": "", "creation_timestamp": "2025-02-11T19:13:31.711446Z"}, {"uuid": "405a4cd0-078b-4a80-b35d-869930133a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13813", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/113986844143593949", "content": "", "creation_timestamp": "2025-02-11T19:13:31.770885Z"}, {"uuid": "24b9ff3a-5006-4289-b274-58e6feb00b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lhwnp4zdxc2n", "content": "", "creation_timestamp": "2025-02-11T21:57:48.664597Z"}, {"uuid": "ecd41dad-53c3-427e-bf08-f43c5d6a63c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13787", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgztmmyz2g", "content": "", "creation_timestamp": "2025-03-06T12:00:30.351309Z"}, {"uuid": "49c8bbc8-0e3d-4cf5-91ef-4667173f6e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk4xnhhd5g25", "content": "", "creation_timestamp": "2025-03-11T21:02:09.267555Z"}, {"uuid": "d96eb594-4224-4edc-b38e-645f80d036e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk4xnhjw5o25", "content": "", "creation_timestamp": "2025-03-11T21:02:09.773825Z"}, {"uuid": "430622c6-46aa-4365-9868-db15e195b724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13539", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113988772714447267", "content": "", "creation_timestamp": "2025-02-12T03:23:58.930945Z"}, {"uuid": "4d29f929-fb73-4769-9c64-801f334dba34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13541", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113988772730198797", "content": "", "creation_timestamp": "2025-02-12T03:23:59.215010Z"}, {"uuid": "aa905d08-e54a-453c-b3c4-46727e592d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13554", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113988772745294473", "content": "", "creation_timestamp": "2025-02-12T03:23:59.473816Z"}, {"uuid": "3a2b2ae2-6658-422e-bb20-ff5ee2084266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13701", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113988772760145805", "content": "", "creation_timestamp": "2025-02-12T03:23:59.669508Z"}, {"uuid": "bc048718-5dfe-4994-ab83-8aa432c13fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13749", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113988831762369780", "content": "", "creation_timestamp": "2025-02-12T03:39:00.015089Z"}, {"uuid": "1d330f8d-2837-4dd3-82a3-cbfc31a37d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13539", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcuw7fq32d", "content": "", "creation_timestamp": "2025-02-12T04:16:48.791682Z"}, {"uuid": "631d190f-5082-4dd1-bc86-670ef561112d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13541", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcuyzelv2i", "content": "", "creation_timestamp": "2025-02-12T04:16:51.465189Z"}, {"uuid": "efc7203c-4690-45df-8d02-f84624d598f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13554", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcv3inor2g", "content": "", "creation_timestamp": "2025-02-12T04:16:54.164702Z"}, {"uuid": "4c268fef-7e75-4c88-8b94-abcf572ba8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13701", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcv62qm72x", "content": "", "creation_timestamp": "2025-02-12T04:16:56.842678Z"}, {"uuid": "ac95d57b-2ce2-44fd-a868-99e8ff55ca34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13749", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcvajagd2a", "content": "", "creation_timestamp": "2025-02-12T04:16:59.606845Z"}, {"uuid": "60e83bfb-b292-44c8-ab4f-8e5e38ac2415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989033114600468", "content": "", "creation_timestamp": "2025-02-12T04:30:12.773933Z"}, {"uuid": "19828fb6-88ca-41fc-8f18-501d5635b6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13653", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989033129729285", "content": "", "creation_timestamp": "2025-02-12T04:30:12.846296Z"}, {"uuid": "c5166a85-083c-4d38-a671-94aaee2511a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13654", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989092128308032", "content": "", "creation_timestamp": "2025-02-12T04:45:12.769043Z"}, {"uuid": "cfbb1405-db4f-4a0d-af0b-ad4ead00db79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13656", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989092162277117", "content": "", "creation_timestamp": "2025-02-12T04:45:13.270097Z"}, {"uuid": "ba52cd2b-d724-4f24-85ad-4a353b742d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13658", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989092177355299", "content": "", "creation_timestamp": "2025-02-12T04:45:13.409339Z"}, {"uuid": "27912925-396a-4830-b480-635b0f331cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13665", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989092191397844", "content": "", "creation_timestamp": "2025-02-12T04:45:13.902460Z"}, {"uuid": "aa37fb15-4c2d-4f67-8b3b-daf5d56d60bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13769", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989151190097089", "content": "", "creation_timestamp": "2025-02-12T05:00:13.948990Z"}, {"uuid": "0d7fb063-7d97-4cb3-ba80-4fe725b2d5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13800", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989151204757259", "content": "", "creation_timestamp": "2025-02-12T05:00:14.331573Z"}, {"uuid": "e7bacae5-3004-4738-a920-7886116c592a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6bzjxd2z", "content": "", "creation_timestamp": "2025-02-12T05:15:44.127795Z"}, {"uuid": "350546b5-804f-4edd-bfb3-8ac62d84164f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13653", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6f33yg2a", "content": "", "creation_timestamp": "2025-02-12T05:15:47.382334Z"}, {"uuid": "6b3fe96f-0fd9-44b2-a952-7b5f86cf59e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13654", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6hputm2x", "content": "", "creation_timestamp": "2025-02-12T05:15:50.179837Z"}, {"uuid": "c7357735-c557-476c-8405-6831d713f015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13656", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6kdgv42a", "content": "", "creation_timestamp": "2025-02-12T05:15:52.901471Z"}, {"uuid": "fb2666d4-15bc-4bd4-be6e-309d47f20e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13658", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6mqpeg2a", "content": "", "creation_timestamp": "2025-02-12T05:15:55.374519Z"}, {"uuid": "12b578e2-ed8a-45aa-9455-12146440b334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13665", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6p33fw2s", "content": "", "creation_timestamp": "2025-02-12T05:15:57.815009Z"}, {"uuid": "a916e186-4c99-4485-9f9f-f32bea9eaae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13769", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6rbcd52i", "content": "", "creation_timestamp": "2025-02-12T05:16:00.086946Z"}, {"uuid": "ba8c7552-101c-4410-b6ca-06d202c6c88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13800", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6tnayf2i", "content": "", "creation_timestamp": "2025-02-12T05:16:02.795401Z"}, {"uuid": "8473b07c-2b4c-4e62-b668-abc16085e8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13374", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989286165533122", "content": "", "creation_timestamp": "2025-02-12T05:34:33.591709Z"}, {"uuid": "7b55f8f5-a795-46b3-859d-3d6816f38e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13601", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989286195176456", "content": "", "creation_timestamp": "2025-02-12T05:34:34.046610Z"}, {"uuid": "40aba8a2-db11-4128-942d-ade8fd67b6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989286209392203", "content": "", "creation_timestamp": "2025-02-12T05:34:34.545346Z"}, {"uuid": "b921f4e3-c0e0-498c-846b-51527d520a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13600", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989286180996232", "content": "", "creation_timestamp": "2025-02-12T05:34:53.954241Z"}, {"uuid": "91aa6bcf-d7c1-4df8-a9b0-2b3c6d0801a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk4xnhmhfo2s", "content": "", "creation_timestamp": "2025-03-11T21:02:10.262297Z"}, {"uuid": "231fc8ef-085c-4eb3-88db-3227b6470ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp34vim27", "content": "", "creation_timestamp": "2025-03-04T10:59:21.425574Z"}, {"uuid": "ddb86fba-b57d-4b0b-b37c-2fe3e8a606b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lixyh46mq222", "content": "", "creation_timestamp": "2025-02-25T04:08:06.321234Z"}, {"uuid": "98709dec-0f9d-435c-8ad8-f4c903770c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13824", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkepn5pbnn2q", "content": "", "creation_timestamp": "2025-03-14T23:00:07.855096Z"}, {"uuid": "69f646d2-d75d-4827-932e-6f503a7bc73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13771", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkepn5xpwi2d", "content": "", "creation_timestamp": "2025-03-14T23:00:08.652498Z"}, {"uuid": "50e31c21-e3be-4851-8ad2-8120e8cdf951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13446", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114150716747771514", "content": "", "creation_timestamp": "2025-03-12T17:48:29.104107Z"}, {"uuid": "539ec3a8-a839-484e-8182-ccc866f1da0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13905", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj5f4bdkpe26", "content": "", "creation_timestamp": "2025-02-27T07:37:52.844203Z"}, {"uuid": "cc7481f7-de86-462d-bbb1-e6fbaed52f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljpmlbjocu2e", "content": "", "creation_timestamp": "2025-03-06T13:39:28.351658Z"}, {"uuid": "bb9ceecf-c735-4f9d-bd9a-fe721769364a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj5f4ccrmc27", "content": "", "creation_timestamp": "2025-02-27T07:37:54.723282Z"}, {"uuid": "0e7e7ffe-58e9-4a77-8bd7-8815382efeaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13601", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxjksxwqg2i", "content": "", "creation_timestamp": "2025-02-12T06:16:25.984917Z"}, {"uuid": "4e43481f-f8db-48fd-bdef-4f9e3b17a2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13374", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxjknunc52a", "content": "", "creation_timestamp": "2025-02-12T06:16:21.255807Z"}, {"uuid": "a66b701c-57ea-44dd-8919-f6d97db841d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13600", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxjkqi74n2a", "content": "", "creation_timestamp": "2025-02-12T06:16:23.193766Z"}, {"uuid": "203c476b-25ca-4093-bacf-b1729b96c6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxjkvjlzg2z", "content": "", "creation_timestamp": "2025-02-12T06:16:28.442722Z"}, {"uuid": "6d68f36e-931a-4c91-85eb-07dd929cc3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113989577512863138", "content": "", "creation_timestamp": "2025-02-12T06:48:39.190078Z"}, {"uuid": "82fb70ee-fa74-4588-9af1-3d0bdd9ad8ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13653", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113989577540866285", "content": "", "creation_timestamp": "2025-02-12T06:48:39.610688Z"}, {"uuid": "6882ee62-1078-471c-ab6d-95283fa5a963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13656", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113989577603123553", "content": "", "creation_timestamp": "2025-02-12T06:48:40.992182Z"}, {"uuid": "739b47a7-5e99-4c33-b50f-6440025116a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13654", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113989577570560335", "content": "", "creation_timestamp": "2025-02-12T06:48:41.335892Z"}, {"uuid": "591244c4-4d3a-4c29-bf9a-042817310284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13800", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113989577689602048", "content": "", "creation_timestamp": "2025-02-12T06:48:42.639470Z"}, {"uuid": "73907d6f-a888-461c-bd06-40f69b63079c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113989577795308079", "content": "", "creation_timestamp": "2025-02-12T06:48:43.520364Z"}, {"uuid": "ad1bd137-9589-4f8c-b539-c5d14b0e6fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxmbm6nm72v", "content": "", "creation_timestamp": "2025-02-12T07:04:58.064145Z"}, {"uuid": "5dab382f-0ef4-43ba-8a46-a97f9e283aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13654", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxmbmirs22n", "content": "", "creation_timestamp": "2025-02-12T07:04:58.688457Z"}, {"uuid": "33491742-df98-4df6-93c2-67e1c0ee3cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxmbmm65c24", "content": "", "creation_timestamp": "2025-02-12T07:04:59.215869Z"}, {"uuid": "c0b6fa79-dbc3-43a1-8794-5996bee6ffaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxmbmpkrw2v", "content": "", "creation_timestamp": "2025-02-12T07:04:59.742172Z"}, {"uuid": "afd7ddda-afbe-4018-8fb6-df92931c29d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxmbmtcz326", "content": "", "creation_timestamp": "2025-02-12T07:05:00.277843Z"}, {"uuid": "5a44c375-8dfd-4f37-8c6a-4d70ffdccce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxmbmwn2k2i", "content": "", "creation_timestamp": "2025-02-12T07:05:00.842512Z"}, {"uuid": "6a0a4d8c-1385-4425-8ba6-08e263f2143f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13794", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989781120946332", "content": "", "creation_timestamp": "2025-02-12T07:40:26.136861Z"}, {"uuid": "cf697582-58d4-44b0-acd5-479950d52640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13821", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989781136121545", "content": "", "creation_timestamp": "2025-02-12T07:40:26.285063Z"}, {"uuid": "235d52d3-afd7-4545-9543-49b90f9cf53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13794", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxq7rcevr2a", "content": "", "creation_timestamp": "2025-02-12T08:15:31.368976Z"}, {"uuid": "c1623510-ef6b-4dad-bb63-84db39bcd2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13821", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxq7tskc22z", "content": "", "creation_timestamp": "2025-02-12T08:15:34.212870Z"}, {"uuid": "58f4ab72-cbaa-4c15-bdcc-dfe36d62e382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13814", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989978672484259", "content": "", "creation_timestamp": "2025-02-12T08:30:40.390166Z"}, {"uuid": "7d68217d-0dd3-4a20-a102-34709d1630ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13814", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxtlm5yhm2h", "content": "", "creation_timestamp": "2025-02-12T09:15:49.554549Z"}, {"uuid": "beb78073-7486-49fa-b5b0-70def1387cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990205039131652", "content": "", "creation_timestamp": "2025-02-12T09:28:15.439426Z"}, {"uuid": "f4aa0972-4b65-41d2-8ca6-0b9b220bd634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13435", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990205053620079", "content": "", "creation_timestamp": "2025-02-12T09:28:15.536404Z"}, {"uuid": "4176011e-7951-4eeb-b8b8-1dab59b10b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13456", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990264091516755", "content": "", "creation_timestamp": "2025-02-12T09:43:18.407154Z"}, {"uuid": "587fb1e3-84ff-4a76-9047-42e9639a15af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13459", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990264106485566", "content": "", "creation_timestamp": "2025-02-12T09:43:18.601008Z"}, {"uuid": "2f0cccc9-1f6a-49d1-bbde-12eb40da59f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13437", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990264058169600", "content": "", "creation_timestamp": "2025-02-12T09:43:18.857597Z"}, {"uuid": "a56bb8e5-04e0-4fd1-9cf8-e5f0c706cf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13473", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990264140087358", "content": "", "creation_timestamp": "2025-02-12T09:43:18.944681Z"}, {"uuid": "d3ade03b-2908-4641-a573-b83d97ce351d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13475", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990323144317416", "content": "", "creation_timestamp": "2025-02-12T09:58:16.533709Z"}, {"uuid": "51b52cee-1de4-4e8a-972a-4a389d2971da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13490", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990323158713982", "content": "", "creation_timestamp": "2025-02-12T09:58:16.750397Z"}, {"uuid": "6513380e-38de-4376-a153-1aa9fed64779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13528", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990323173619602", "content": "", "creation_timestamp": "2025-02-12T09:58:17.036200Z"}, {"uuid": "0bd3626c-e6d3-409e-8069-86969d9b96bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13531", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990323187797239", "content": "", "creation_timestamp": "2025-02-12T09:58:17.254154Z"}, {"uuid": "116befea-d18d-42d7-abef-67adfde954d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwws3sme2p", "content": "", "creation_timestamp": "2025-02-12T10:15:46.140204Z"}, {"uuid": "8d0fd5c5-de81-44f8-a437-2290ad3d0903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13435", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwvibcu2p", "content": "", "creation_timestamp": "2025-02-12T10:15:49.702053Z"}, {"uuid": "cb9ba4c2-ee9b-4fe2-a7fd-ffe70b6a8ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13437", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwyf34h2x", "content": "", "creation_timestamp": "2025-02-12T10:15:52.852088Z"}, {"uuid": "4f65f471-99ab-4961-a6f8-3ddb2e3efdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13456", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwx2xoo72x", "content": "", "creation_timestamp": "2025-02-12T10:15:55.487159Z"}, {"uuid": "80da2263-7ef5-493d-a3bc-3b7a8c8d0623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13459", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwx5yyro2s", "content": "", "creation_timestamp": "2025-02-12T10:15:59.056926Z"}, {"uuid": "ba63a910-5352-46cb-921b-c1f8015d3bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13473", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxb6oqn2i", "content": "", "creation_timestamp": "2025-02-12T10:16:01.967889Z"}, {"uuid": "ef6f568a-1baf-4007-b5d1-ff79393160e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13475", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxdskd32a", "content": "", "creation_timestamp": "2025-02-12T10:16:04.791913Z"}, {"uuid": "5f95c952-14c0-4717-beea-6cac0545dd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13490", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxgthvf2g", "content": "", "creation_timestamp": "2025-02-12T10:16:07.957190Z"}, {"uuid": "a63e6aaf-5481-4d08-8e2e-4fc6dc64802c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13528", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxjn45p2x", "content": "", "creation_timestamp": "2025-02-12T10:16:10.871111Z"}, {"uuid": "43a9edb9-b7df-44bf-a868-463725e28f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13531", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxm52p72a", "content": "", "creation_timestamp": "2025-02-12T10:16:13.445160Z"}, {"uuid": "3db9c558-c8fe-4e98-912d-58b4e4575dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113990520291059526", "content": "", "creation_timestamp": "2025-02-12T10:48:24.815636Z"}, {"uuid": "c929dc83-3823-4f21-bdee-d9a138ca5fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxzp7y3rw23", "content": "", "creation_timestamp": "2025-02-12T11:05:13.951454Z"}, {"uuid": "e5bc9ebc-db18-4331-9dab-06917a940808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13477", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990650263536962", "content": "", "creation_timestamp": "2025-02-12T11:21:28.083551Z"}, {"uuid": "60b034a4-1f9d-45f0-b341-6dd55c9128c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13480", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990650279768242", "content": "", "creation_timestamp": "2025-02-12T11:21:28.330127Z"}, {"uuid": "280ecfc5-b9bf-4fa2-8c39-c4c900459cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13532", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990709281718324", "content": "", "creation_timestamp": "2025-02-12T11:36:28.510350Z"}, {"uuid": "049b2e5d-2028-47c4-919a-5acd2be781cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13794", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhy5mhmk4n2u", "content": "", "creation_timestamp": "2025-02-12T12:15:15.872285Z"}, {"uuid": "aaa331f5-b3b6-4ae5-a70b-b1eaaae0d34d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhy5miefvw2y", "content": "", "creation_timestamp": "2025-02-12T12:15:18.303862Z"}, {"uuid": "1bac9d23-f320-4bb3-9f27-393c69fad7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhy5mijaxo2t", "content": "", "creation_timestamp": "2025-02-12T12:15:19.238674Z"}, {"uuid": "78804dc4-e87a-443d-bad1-330fb9987ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13477", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5nqj6pz2a", "content": "", "creation_timestamp": "2025-02-12T12:15:58.680607Z"}, {"uuid": "fa5bb6d8-3197-45fd-9402-e0d6a632a33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13480", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5nszg2e2d", "content": "", "creation_timestamp": "2025-02-12T12:16:01.306812Z"}, {"uuid": "f8424e6c-a857-47b2-81fc-da9d13c6cbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13532", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5nvolko2h", "content": "", "creation_timestamp": "2025-02-12T12:16:04.106786Z"}, {"uuid": "11e7eadc-e4ac-42f3-8843-f1a69166303f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyemc2s3i2v", "content": "", "creation_timestamp": "2025-02-12T14:20:27.365056Z"}, {"uuid": "bf015ec4-b0bb-4cec-aab4-d0ce1f34c5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyemc6kon2w", "content": "", "creation_timestamp": "2025-02-12T14:20:27.992370Z"}, {"uuid": "2ac4a0d8-a2cc-4338-853b-e42e9cd0680b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13531", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyemcjfnz23", "content": "", "creation_timestamp": "2025-02-12T14:20:29.732325Z"}, {"uuid": "3ddc1074-9295-42d6-9811-ad50566a4e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3liy4mahnjc2x", "content": "", "creation_timestamp": "2025-02-25T05:22:27.056587Z"}, {"uuid": "cd7dde6d-8196-4096-b47a-83f5d1762b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13528", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyemcnecv2w", "content": "", "creation_timestamp": "2025-02-12T14:20:30.355568Z"}, {"uuid": "d3a4f94b-0f4d-49d3-9871-d35cab302d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmvyh2o2m2a", "content": "", "creation_timestamp": "2025-03-05T11:49:54.305766Z"}, {"uuid": "df761a6b-10e3-495c-82f6-b23f0ec7c8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-13159", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3liy6dacgc22p", "content": "", "creation_timestamp": "2025-02-25T05:53:11.948335Z"}, {"uuid": "f091a927-9168-4de5-96bc-72fb45c52942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmvyhgb6x2u", "content": "", "creation_timestamp": "2025-03-05T11:49:55.053332Z"}, {"uuid": "0dd4cc2d-7f48-41b0-afe1-2366b59e19d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lkkbbbtrf22o", "content": "", "creation_timestamp": "2025-03-17T03:58:58.437054Z"}, {"uuid": "0b47f796-8509-4ee6-9e28-68eaba6d643b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmvyi2z5b2y", "content": "", "creation_timestamp": "2025-03-05T11:49:57.507538Z"}, {"uuid": "4b19fe59-8968-42d4-aaa3-ee850d5af261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lkkbbbtrf22o", "content": "", "creation_timestamp": "2025-03-17T03:58:58.517747Z"}, {"uuid": "a8c0e5af-c305-409b-9ded-9e79ca5205e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhzlsuipj22t", "content": "", "creation_timestamp": "2025-02-13T02:02:03.642367Z"}, {"uuid": "0c0e3c6d-bb19-4abc-9ad0-906679d47520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhzlsvnmzm2a", "content": "", "creation_timestamp": "2025-02-13T02:02:05.750124Z"}, {"uuid": "321fe247-8756-4e4e-b844-f59415b3319e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhzlsx6vbt2o", "content": "", "creation_timestamp": "2025-02-13T02:02:07.465142Z"}, {"uuid": "48e1c8a8-54fa-43c5-bd73-fa2ced0767f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13644", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzmlrqyl72a", "content": "", "creation_timestamp": "2025-02-13T02:15:58.814651Z"}, {"uuid": "e86274fa-f9ed-42a4-bdb5-d27fa4da224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113994705614223180", "content": "", "creation_timestamp": "2025-02-13T04:32:47.768869Z"}, {"uuid": "15f97fc9-8dae-43de-977f-453d2e0917c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113994705628613572", "content": "", "creation_timestamp": "2025-02-13T04:32:48.112774Z"}, {"uuid": "91a90d94-713f-4812-b3d4-46c7778c4060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113994705643201856", "content": "", "creation_timestamp": "2025-02-13T04:32:48.240436Z"}, {"uuid": "df8b0b32-f2d6-4062-98df-661eca67e6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113994723785203829", "content": "", "creation_timestamp": "2025-02-13T04:37:25.129972Z"}, {"uuid": "28210734-1d2b-463d-b967-2099777ba7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113994723799756129", "content": "", "creation_timestamp": "2025-02-13T04:37:25.330444Z"}, {"uuid": "4e098377-19df-4610-8cda-ecab9142f56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113994723814995240", "content": "", "creation_timestamp": "2025-02-13T04:37:25.512259Z"}, {"uuid": "2f1ccb90-ab8f-423c-93f9-1d92c7f2ef26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzwn7lemv2a", "content": "", "creation_timestamp": "2025-02-13T05:15:44.412729Z"}, {"uuid": "54a4d460-f3c8-4714-8ae5-f657f8de695c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzwnc6epg2x", "content": "", "creation_timestamp": "2025-02-13T05:15:46.892429Z"}, {"uuid": "8a3ba5a9-a271-46e6-b853-d08c72dbbe4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzwnf3iek2g", "content": "", "creation_timestamp": "2025-02-13T05:15:49.949995Z"}, {"uuid": "64f6dfc0-4458-41b0-88be-46b3a7a77f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj5mo2p3cy2p", "content": "", "creation_timestamp": "2025-02-27T09:53:07.290594Z"}, {"uuid": "35b9391f-987a-47dd-bbf9-a2977331dc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyjlgv2j", "content": "", "creation_timestamp": "2025-03-22T07:38:47.118586Z"}, {"uuid": "9bec66c7-2642-47fa-bb19-c69def086ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-11T05:26:42.000000Z"}, {"uuid": "e11bab6c-9ec8-4298-88d8-83f35141f34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13824", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkd4agt2de2u", "content": "", "creation_timestamp": "2025-03-14T07:40:19.264810Z"}, {"uuid": "483d29af-5ba2-4195-b772-b12dd713f90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyn4go2s", "content": "", "creation_timestamp": "2025-03-22T07:38:47.644216Z"}, {"uuid": "84c5341c-535c-403c-9b8b-9b11758dbf24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-11T05:26:42.000000Z"}, {"uuid": "6ef8f6cc-c128-4201-b489-1fb5df6c7220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-11T05:26:42.000000Z"}, {"uuid": "11413f1a-015f-40f6-84b1-406f72909460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13376", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114159682348532537", "content": "", "creation_timestamp": "2025-03-14T07:48:34.968795Z"}, {"uuid": "9e01d60b-2151-4536-9f88-5170aae5d314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyu6322k", "content": "", "creation_timestamp": "2025-03-22T07:38:48.667719Z"}, {"uuid": "583a50e5-fb0f-4725-9c4b-75218825397f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljptkzxwfu2j", "content": "", "creation_timestamp": "2025-03-06T15:44:37.390848Z"}, {"uuid": "b890b717-4cb8-4567-a0e3-7a212341a932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13913", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114159682393652236", "content": "", "creation_timestamp": "2025-03-14T07:48:35.801883Z"}, {"uuid": "7dad5568-8403-4a1d-93d1-547bb0adc10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13119", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995089001366526", "content": "", "creation_timestamp": "2025-02-13T06:10:17.785193Z"}, {"uuid": "427c1824-e136-4b68-8345-58bd2635c2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995089019297359", "content": "", "creation_timestamp": "2025-02-13T06:10:17.972246Z"}, {"uuid": "d47331d5-9c97-4cbc-ae10-c1074a98133f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995089033400922", "content": "", "creation_timestamp": "2025-02-13T06:10:18.469812Z"}, {"uuid": "ed214bb2-57bc-40b5-9540-95d184035e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13119", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzym6evq2c", "content": "", "creation_timestamp": "2025-02-13T06:15:47.705509Z"}, {"uuid": "8f99a3b7-9107-4b55-9293-a6f78b6d3a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzyogyqr2s", "content": "", "creation_timestamp": "2025-02-13T06:15:50.105650Z"}, {"uuid": "aa982897-273e-478b-a268-e637d15318c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzyqn77o2s", "content": "", "creation_timestamp": "2025-02-13T06:15:52.411173Z"}, {"uuid": "473cc430-3c64-460c-a0f5-b25d8b7a6920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzyt6lmq2a", "content": "", "creation_timestamp": "2025-02-13T06:15:55.062187Z"}, {"uuid": "3c78ebef-6dfd-49c2-83a6-7ccb05749088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995148034307983", "content": "", "creation_timestamp": "2025-02-13T06:25:18.384265Z"}, {"uuid": "b4dddf8a-cbfc-4c4c-a4bc-8cacfaa4f388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li22shfnng2y", "content": "", "creation_timestamp": "2025-02-13T06:30:15.729339Z"}, {"uuid": "32edd5a5-1d1f-417c-8b26-048efe0da5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li22shm6gj2y", "content": "", "creation_timestamp": "2025-02-13T06:30:16.821576Z"}, {"uuid": "26c437c9-4ba4-4ed7-bd4a-5bfd2ef743c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li22shpdyw2c", "content": "", "creation_timestamp": "2025-02-13T06:30:17.379895Z"}, {"uuid": "f6528f72-8a0c-43bb-9753-b5d0177b9d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113995241082689236", "content": "", "creation_timestamp": "2025-02-13T06:48:58.432027Z"}, {"uuid": "d65485cc-db1d-4d38-93aa-5827a331b6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995292068646836", "content": "", "creation_timestamp": "2025-02-13T07:01:56.352413Z"}, {"uuid": "5b1ea3af-0f69-437b-b354-48a17eb2be10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995292082976109", "content": "", "creation_timestamp": "2025-02-13T07:01:56.559333Z"}, {"uuid": "558c8cce-abbc-48ff-a428-2ff346982364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li25d3f5fy2a", "content": "", "creation_timestamp": "2025-02-13T07:15:20.483492Z"}, {"uuid": "cf884db0-3f72-4925-9741-6d23ef77b8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li25d646gt2c", "content": "", "creation_timestamp": "2025-02-13T07:15:23.690694Z"}, {"uuid": "3d02a40a-267d-4029-a976-37d4a2ec40ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995641624064014", "content": "", "creation_timestamp": "2025-02-13T08:30:50.178551Z"}, {"uuid": "4c3247b3-cd65-4b7c-a76b-a295968e7a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li2e2anebm2g", "content": "", "creation_timestamp": "2025-02-13T09:15:40.365563Z"}, {"uuid": "d2c57b54-8612-4bb6-9a3e-6b394e3053d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995871760361065", "content": "", "creation_timestamp": "2025-02-13T09:29:21.785740Z"}, {"uuid": "25f0b320-96f7-46a6-8304-809616a68518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995871774983364", "content": "", "creation_timestamp": "2025-02-13T09:29:22.313727Z"}, {"uuid": "c24cf060-5c26-48cd-b672-9313f64a9b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li2hfx5dv62d", "content": "", "creation_timestamp": "2025-02-13T10:15:54.239849Z"}, {"uuid": "fee41fbe-adfd-4156-ba34-dcc419fe31d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/digitaldotsl.bsky.social/post/3li2hstswsk2g", "content": "", "creation_timestamp": "2025-02-13T10:23:07.336826Z"}, {"uuid": "b9e59ff0-1663-43b9-9a4d-8a30234f6b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i67mwzo2a", "content": "", "creation_timestamp": "2025-02-13T10:29:28.676479Z"}, {"uuid": "c8261d5e-dadf-4045-a918-868aaf58164a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7xuuen2v", "content": "", "creation_timestamp": "2025-02-13T10:30:29.724353Z"}, {"uuid": "09783d15-e898-41f0-a67e-f068307d8546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7y3dfn2e", "content": "", "creation_timestamp": "2025-02-13T10:30:30.772058Z"}, {"uuid": "de930700-68b5-49b8-894a-f74c48d2f82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113996684417836846", "content": "", "creation_timestamp": "2025-02-13T12:56:01.871533Z"}, {"uuid": "44ec2dfb-f494-4056-af2d-0fa07346d3cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li2rgvq6iq2a", "content": "", "creation_timestamp": "2025-02-13T13:15:23.653106Z"}, {"uuid": "ad3e12d9-623e-48be-b550-1d8864baae4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2vulnybj2a", "content": "", "creation_timestamp": "2025-02-13T14:34:37.744097Z"}, {"uuid": "de223c43-899f-4456-ba59-5db67add2ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2vum5ltd2c", "content": "", "creation_timestamp": "2025-02-13T14:34:39.675667Z"}, {"uuid": "1009fe40-9127-496e-8039-727dd0cf272f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2vumhfeq26", "content": "", "creation_timestamp": "2025-02-13T14:34:41.364180Z"}, {"uuid": "9d223449-009e-4b8b-9d9c-63a5a03e5920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113997126008630427", "content": "", "creation_timestamp": "2025-02-13T14:48:20.765615Z"}, {"uuid": "d539e114-be9b-4569-b706-4fc69fda4c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2yoyg6yg2a", "content": "", "creation_timestamp": "2025-02-13T15:25:11.640981Z"}, {"uuid": "6794090d-2a4f-4bbc-b9f0-24b485c6457e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2yoys2zr2t", "content": "", "creation_timestamp": "2025-02-13T15:25:12.476562Z"}, {"uuid": "c2718786-6e63-4ed5-82b2-b431f7edd3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13824", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114159682521234713", "content": "", "creation_timestamp": "2025-03-14T07:48:37.584941Z"}, {"uuid": "97640109-c26d-4539-9a3b-4d84a814c097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdkxyjq42w", "content": "", "creation_timestamp": "2025-03-15T04:56:51.262124Z"}, {"uuid": "78b28a2b-5ed6-4c34-b54f-c8af620b271a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13494", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liyivk6eq62k", "content": "", "creation_timestamp": "2025-02-25T09:02:24.008371Z"}, {"uuid": "6e68f451-d143-477b-95f5-128cb4e9cd40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li37pumprh2e", "content": "", "creation_timestamp": "2025-02-13T17:30:58.881406Z"}, {"uuid": "4433e113-b298-4da7-a307-6afcd7883521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lkko762css2c", "content": "", "creation_timestamp": "2025-03-17T07:50:24.409368Z"}, {"uuid": "d7782e68-a8b4-455b-8d8c-caa08402a44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li3vieyht32o", "content": "", "creation_timestamp": "2025-02-14T00:00:30.035925Z"}, {"uuid": "cc36ebb9-04a9-48f0-845a-c1c348791f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljtosh5erf26", "content": "", "creation_timestamp": "2025-03-08T04:29:55.077382Z"}, {"uuid": "06696fa3-f7dd-4508-95bb-cd4955b9da3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13824", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkddarf4g52j", "content": "", "creation_timestamp": "2025-03-14T09:45:46.539376Z"}, {"uuid": "7e18789a-84a1-44d4-b594-a46f5fc1e1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3lxsxpat2m", "content": "", "creation_timestamp": "2025-03-11T08:00:31.735094Z"}, {"uuid": "47f0c6db-3306-4b09-a1e7-a9e35263ba88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3lxtubed2j", "content": "", "creation_timestamp": "2025-03-11T08:00:34.128603Z"}, {"uuid": "e196d648-8cc9-4b2c-a3df-c24db8c278f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lkko762css2c", "content": "", "creation_timestamp": "2025-03-17T07:50:24.323889Z"}, {"uuid": "184812f6-7cd8-4501-81c0-dd938d6d4d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljtosibozv2s", "content": "", "creation_timestamp": "2025-03-08T04:29:57.311863Z"}, {"uuid": "cbc228d4-8c7f-48a4-a759-7080a563b69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljtosilano2e", "content": "", "creation_timestamp": "2025-03-08T04:29:58.542443Z"}, {"uuid": "1d250f50-5b7c-4572-925f-6a02a909261c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13640", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ljtpjakynt2o", "content": "", "creation_timestamp": "2025-03-08T04:42:39.831837Z"}, {"uuid": "89ded18e-6778-4f26-a699-c6947da96a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkmijhmog22f", "content": "", "creation_timestamp": "2025-03-18T01:14:07.588977Z"}, {"uuid": "a1852abc-031e-40e0-9494-76decc27c7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkmijhmog22f", "content": "", "creation_timestamp": "2025-03-18T01:14:07.675954Z"}, {"uuid": "0e706d53-4db8-4a3d-8dcd-c335fa4d350f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3litm557mrh2r", "content": "", "creation_timestamp": "2025-02-23T10:17:00.822641Z"}, {"uuid": "abd83a18-78e1-49b5-a2bf-0c3494f4bf1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljndxxx6vw2f", "content": "", "creation_timestamp": "2025-03-05T16:00:10.858622Z"}, {"uuid": "ae9e5855-549e-4089-a5bc-8d4ea3e66477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3li46yrgtds2y", "content": "", "creation_timestamp": "2025-02-14T02:50:46.482226Z"}, {"uuid": "0b8f5933-1af5-49d8-be0c-26c248a955f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114000574432565372", "content": "", "creation_timestamp": "2025-02-14T05:25:18.788802Z"}, {"uuid": "7aa7e988-c02a-47f4-b2d5-1ab705a1df62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114000574448510025", "content": "", "creation_timestamp": "2025-02-14T05:25:19.094106Z"}, {"uuid": "6e33fcb9-1b43-4b15-83ec-39dbc8a02f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114000735493955219", "content": "", "creation_timestamp": "2025-02-14T06:06:16.390908Z"}, {"uuid": "a62a565f-97a0-4f3d-81c0-15f927713d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li4kibtauv2c", "content": "", "creation_timestamp": "2025-02-14T06:16:13.390838Z"}, {"uuid": "1203fb5f-92d7-46c5-8680-3aad94c58549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li4kiefipn2c", "content": "", "creation_timestamp": "2025-02-14T06:16:15.861245Z"}, {"uuid": "c61bbe78-955b-4964-b3a8-9fcf6652b6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li4kigpvbe2h", "content": "", "creation_timestamp": "2025-02-14T06:16:18.281907Z"}, {"uuid": "010d81ca-2751-4468-837f-17ccae3a83e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li4skdsmk52z", "content": "", "creation_timestamp": "2025-02-14T08:40:33.396204Z"}, {"uuid": "850a670c-dd69-4200-9179-6eebb2b7a116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li4skdvzwi26", "content": "", "creation_timestamp": "2025-02-14T08:40:33.887083Z"}, {"uuid": "a97432af-ccb9-47fa-836f-730142535f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li4skdzcbm2y", "content": "", "creation_timestamp": "2025-02-14T08:40:34.423009Z"}, {"uuid": "cb920598-b7f6-4708-9ec3-0d288b2de01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13735", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114001534633593944", "content": "", "creation_timestamp": "2025-02-14T09:29:30.288231Z"}, {"uuid": "b02ea795-e080-4cf4-9ad6-02cdfb990b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13735", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li4xwlt7gz2s", "content": "", "creation_timestamp": "2025-02-14T10:16:52.044142Z"}, {"uuid": "03f325eb-a098-48d3-890b-f6a13f7b9140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li4ziai45724", "content": "", "creation_timestamp": "2025-02-14T10:44:38.890994Z"}, {"uuid": "d609c3f4-a0a8-4433-b141-c4178f2f7b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13791", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114001942927367213", "content": "", "creation_timestamp": "2025-02-14T11:13:20.445265Z"}, {"uuid": "cf44a369-5018-40dc-9851-baa5fa25737c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13791", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li537jyk4z2c", "content": "", "creation_timestamp": "2025-02-14T11:15:33.537067Z"}, {"uuid": "b15845e1-1ed0-449b-9709-f3b6d46279b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li55pgnyti2r", "content": "", "creation_timestamp": "2025-02-14T12:00:14.292741Z"}, {"uuid": "e9dc801b-2d4b-4456-a7f3-3aaafead4b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13152", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bwxsby62p", "content": "", "creation_timestamp": "2025-02-14T13:16:02.219004Z"}, {"uuid": "2ebe40c9-28b3-4e4b-9485-15b93544281a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13471", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljndxykpxh2q", "content": "", "creation_timestamp": "2025-03-05T16:00:12.232087Z"}, {"uuid": "41b80a96-e2af-4f3d-9be2-dc4f903a1c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lju3x525dr2h", "content": "", "creation_timestamp": "2025-03-08T08:25:11.052698Z"}, {"uuid": "6684906a-6f4a-4ba9-a787-cfa6b3ac0313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkfpimfwx223", "content": "", "creation_timestamp": "2025-03-15T08:30:16.242267Z"}, {"uuid": "ebc6f16f-c516-439a-8205-0e429266e21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdolhcez2m", "content": "", "creation_timestamp": "2025-03-20T09:03:26.028707Z"}, {"uuid": "e3c58f6a-4692-4006-a52e-f2897ead13cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13791", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5gvpjosl2a", "content": "", "creation_timestamp": "2025-02-14T14:44:49.744871Z"}, {"uuid": "11dfb370-9bd1-431f-9935-460148bcbb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13152", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114002789781062858", "content": "", "creation_timestamp": "2025-02-14T14:48:43.892612Z"}, {"uuid": "f4510e9e-9a33-4bc8-9e02-0b555b7d8a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5jp6b7t22a", "content": "", "creation_timestamp": "2025-02-14T15:34:51.197080Z"}, {"uuid": "7a5146cb-04ab-4ab6-9fa5-18f4aeb420c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13152", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li6fwvr7tf2a", "content": "", "creation_timestamp": "2025-02-15T00:00:17.992621Z"}, {"uuid": "371ecdfe-1ac3-4e8c-9eb8-85425467ce14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13842", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li6k5u3ghf2y", "content": "", "creation_timestamp": "2025-02-15T01:15:42.898590Z"}, {"uuid": "469e7aa4-9096-4292-99e9-f9099b166f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13843", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li6k5wjfmn2n", "content": "", "creation_timestamp": "2025-02-15T01:15:45.681982Z"}, {"uuid": "51550d1f-7a44-4ac3-8e79-0af851f4f50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6wypsk522v", "content": "", "creation_timestamp": "2025-02-15T05:05:29.325739Z"}, {"uuid": "3f474d47-9216-4e1d-bead-bbe72a2d46c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6wyq4b432z", "content": "", "creation_timestamp": "2025-02-15T05:05:30.028098Z"}, {"uuid": "8c5b2382-ed26-4639-a6f8-813498ee2018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13208", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114006395679188174", "content": "", "creation_timestamp": "2025-02-15T06:05:43.852003Z"}, {"uuid": "ed22ca1a-7262-45b7-ac8f-e36a0766bb59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13306", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114006395694000942", "content": "", "creation_timestamp": "2025-02-15T06:05:44.197161Z"}, {"uuid": "66b19f0e-a3ac-477d-8253-c3dd657ef45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13208", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li72wrpebe2o", "content": "", "creation_timestamp": "2025-02-15T06:15:59.040318Z"}, {"uuid": "3f2ae74d-14ae-4842-a7ad-e1ff11309c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13306", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li72wtuyhf2t", "content": "", "creation_timestamp": "2025-02-15T06:16:01.347011Z"}, {"uuid": "ab9a664b-ab8e-44d8-b76f-ea0d25573ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114006746171699870", "content": "", "creation_timestamp": "2025-02-15T07:34:52.232553Z"}, {"uuid": "69d13b0d-325c-4fdc-87af-d3a552b84bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7bmj2giw2o", "content": "", "creation_timestamp": "2025-02-15T08:15:30.681816Z"}, {"uuid": "ae7f5109-8b5e-4063-8de8-03ab1c728793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13525", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114006958211681134", "content": "", "creation_timestamp": "2025-02-15T08:28:47.613339Z"}, {"uuid": "93719c15-0aa0-40f4-84dc-9ad7fcea492d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13563", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114006958246865606", "content": "", "creation_timestamp": "2025-02-15T08:28:48.167156Z"}, {"uuid": "0a85c33f-d9d1-464a-94b4-fa88768418e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114007035031705174", "content": "", "creation_timestamp": "2025-02-15T08:48:20.259345Z"}, {"uuid": "362802da-7175-4a3b-ae5c-97db80b5654b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7eegsmwb2a", "content": "", "creation_timestamp": "2025-02-15T09:04:41.094613Z"}, {"uuid": "5b2e9f43-287f-47b7-8ea6-237c3634e865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7eeh7beq2y", "content": "", "creation_timestamp": "2025-02-15T09:04:42.209194Z"}, {"uuid": "a0070153-debe-4ef1-8f7e-e8a2c8c0fa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13525", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7extqvy42k", "content": "", "creation_timestamp": "2025-02-15T09:15:32.237830Z"}, {"uuid": "8a2b51e7-42d2-48c9-919c-68c41de901c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13563", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7exwjc2u2h", "content": "", "creation_timestamp": "2025-02-15T09:15:34.945892Z"}, {"uuid": "4f3221f1-e497-4817-8170-92a03e1c69ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114007194740959636", "content": "", "creation_timestamp": "2025-02-15T09:28:56.992775Z"}, {"uuid": "47d28124-943b-4ffe-95fb-d590e889e0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7g24c7j322", "content": "", "creation_timestamp": "2025-02-15T09:34:42.002904Z"}, {"uuid": "d123acf5-2884-428c-8f2f-e1026f14ed31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7icztwba2o", "content": "", "creation_timestamp": "2025-02-15T10:15:29.083034Z"}, {"uuid": "1894bac9-530f-4d8d-8377-944d746bc43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13525", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7le4xf7z2a", "content": "", "creation_timestamp": "2025-02-15T11:09:47.309435Z"}, {"uuid": "41e178fb-b70a-4904-8249-e69326b386e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7le5i3hi26", "content": "", "creation_timestamp": "2025-02-15T11:09:49.888013Z"}, {"uuid": "1b3a5bb6-41e3-4606-a751-afe187855331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7le5ledk2m", "content": "", "creation_timestamp": "2025-02-15T11:09:50.423614Z"}, {"uuid": "23b2acab-0d5d-4bf7-a329-05fb918f26f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114007668643843070", "content": "", "creation_timestamp": "2025-02-15T11:29:27.960822Z"}, {"uuid": "075aba2f-0da2-47cd-988c-aa9b83ba858c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114007668658448921", "content": "", "creation_timestamp": "2025-02-15T11:29:28.173786Z"}, {"uuid": "87b3cb67-24ac-4bee-9342-8c8974224871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114007668674336492", "content": "", "creation_timestamp": "2025-02-15T11:29:28.595456Z"}, {"uuid": "449f1f1c-6952-4056-9c42-feb02f454e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13152", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li7o64vrlz2k", "content": "", "creation_timestamp": "2025-02-15T12:00:07.173459Z"}, {"uuid": "21e9c5b8-7884-40ad-8683-b18425894467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13875", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdolx7is26", "content": "", "creation_timestamp": "2025-03-20T09:03:27.718421Z"}, {"uuid": "e6ab3846-18ad-4d2a-b91d-950f62b8887f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomessz2s", "content": "", "creation_timestamp": "2025-03-20T09:03:30.038829Z"}, {"uuid": "7e0ccd95-3dba-401c-a0fe-03965da2e927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13876", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdom2etj2s", "content": "", "creation_timestamp": "2025-03-20T09:03:28.318750Z"}, {"uuid": "6ee3ca99-0eb5-4ad8-b68a-ae8ce34e2b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13880", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdom5plf2x", "content": "", "creation_timestamp": "2025-03-20T09:03:28.910896Z"}, {"uuid": "6509162e-908d-449f-a9ec-2fd7c364ae92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3liyneq4oos2r", "content": "", "creation_timestamp": "2025-02-25T10:22:28.092211Z"}, {"uuid": "cb6f70e8-c543-417e-a4f3-8f9e4dd638b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3liyneq4oos2r", "content": "", "creation_timestamp": "2025-02-25T10:22:28.231562Z"}, {"uuid": "403da0cc-af97-46a3-b206-56908186f982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomb2ac2m", "content": "", "creation_timestamp": "2025-03-20T09:03:29.480722Z"}, {"uuid": "d4569c2f-d2e2-42e8-9f07-7b6515e6fa34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysav3zu2x", "content": "", "creation_timestamp": "2025-03-19T10:43:18.473262Z"}, {"uuid": "b6f74e0d-f690-4c52-b589-2d1c8bd87773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7p2g22qy2o", "content": "", "creation_timestamp": "2025-02-15T12:15:55.652755Z"}, {"uuid": "c2f3f000-b156-4242-827b-1830ce8064bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "content": "", "creation_timestamp": "2025-03-20T00:00:00.000000Z"}, {"uuid": "ee4c0510-0396-4205-a40f-b2eb1e04dafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13790", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysbfipe2s", "content": "", "creation_timestamp": "2025-03-19T10:43:20.330710Z"}, {"uuid": "aed7e768-d90a-4a44-b1b6-4a2518d8e6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj5zsonubx2y", "content": "", "creation_timestamp": "2025-02-27T13:48:20.102578Z"}, {"uuid": "1f1d00c9-90e5-4ff8-9f0f-d6f3d95a20e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13790", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114188702542520075", "content": "", "creation_timestamp": "2025-03-19T10:48:46.041874Z"}, {"uuid": "53601bb6-3d1b-44ba-9b35-eb9259ad2fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114076531254128083", "content": "", "creation_timestamp": "2025-02-27T15:22:07.861403Z"}, {"uuid": "eed01007-4ac8-4e3d-b25c-f4d6fab40ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7p2kxnjd2y", "content": "", "creation_timestamp": "2025-02-15T12:16:01.076670Z"}, {"uuid": "95cb07d0-f38b-4e76-91ac-a2ee7a7affef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liywm5dncz2a", "content": "", "creation_timestamp": "2025-02-25T13:07:40.179529Z"}, {"uuid": "6badd094-b924-4cc4-9fba-0fc0b59574cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7p2ilhx22t", "content": "", "creation_timestamp": "2025-02-15T12:15:58.366975Z"}, {"uuid": "687e24be-18c8-43b4-94ac-fb4341f7690f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114008351209049483", "content": "", "creation_timestamp": "2025-02-15T14:23:03.001522Z"}, {"uuid": "bd8098eb-c424-4751-89ed-324ec6a2987a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7yrlqn6d22", "content": "", "creation_timestamp": "2025-02-15T15:09:57.204822Z"}, {"uuid": "3625ba5a-c514-4551-8031-8138a30ba8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7yrm57ws2a", "content": "", "creation_timestamp": "2025-02-15T15:09:58.246336Z"}, {"uuid": "c94ac258-54f1-4835-ae99-ddc184649064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7yrmahkp2a", "content": "", "creation_timestamp": "2025-02-15T15:09:58.742784Z"}, {"uuid": "eefabc69-21c6-4537-8276-6ad969a6cab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li7z3w2y2u2o", "content": "", "creation_timestamp": "2025-02-15T15:15:43.807976Z"}, {"uuid": "78380733-ccc6-4f8e-b8df-ec00e84d4509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liaghzkjqm2c", "content": "", "creation_timestamp": "2025-02-15T19:15:08.616648Z"}, {"uuid": "fb4daa62-8c93-42b7-a73a-a7a01964f228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liawfn7fl72w", "content": "", "creation_timestamp": "2025-02-16T00:00:11.090998Z"}, {"uuid": "3c24943c-edc9-4277-a953-2a67e531da2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lic6mzeozh2e", "content": "", "creation_timestamp": "2025-02-16T12:00:05.465685Z"}, {"uuid": "53f4bb92-b90f-4a97-bb1b-8cbffab2d2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13402", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asjceih27", "content": "", "creation_timestamp": "2025-02-27T15:53:31.132846Z"}, {"uuid": "1d103358-7fb7-440d-a1c2-bd6df5e95cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114077109535316307", "content": "", "creation_timestamp": "2025-02-27T17:49:12.153184Z"}, {"uuid": "f2a27cc4-189a-495c-9f9b-85ecc4cc49a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13442", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkq7ddnhzo2v", "content": "", "creation_timestamp": "2025-03-19T12:40:14.326939Z"}, {"uuid": "817d0287-1edd-4cba-9a72-037cce4a37d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13603", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114017708430906181", "content": "", "creation_timestamp": "2025-02-17T06:02:42.790357Z"}, {"uuid": "79ef98dc-0bf8-4c33-9a39-f01c8ee1129f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13608", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114017708444763523", "content": "", "creation_timestamp": "2025-02-17T06:02:42.979399Z"}, {"uuid": "3d5a253c-81e0-409a-94c9-854f788b3f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13625", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114017708458038008", "content": "", "creation_timestamp": "2025-02-17T06:02:43.364513Z"}, {"uuid": "aa4a7b80-b77e-423d-b690-3df45a60e4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114017708471446669", "content": "", "creation_timestamp": "2025-02-17T06:02:43.455555Z"}, {"uuid": "671a62bc-b19e-4cfe-aaf7-ca542201a444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13627", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114017767473909832", "content": "", "creation_timestamp": "2025-02-17T06:17:43.779377Z"}, {"uuid": "4635a90b-5685-4ab4-88e7-f7ce87b2a8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrxmaoz2h", "content": "", "creation_timestamp": "2025-03-10T11:40:21.518975Z"}, {"uuid": "37ca31e2-784e-4154-af7d-380d2ed0f5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdgd6kldz2h", "content": "", "creation_timestamp": "2025-03-14T10:40:48.461667Z"}, {"uuid": "643a56a4-2f8f-46c8-a328-b0409d3f54aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6i3bwbzm2t", "content": "", "creation_timestamp": "2025-02-27T18:03:41.212775Z"}, {"uuid": "37a50240-0ae2-4ecd-b17d-3195bf689fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114137976626483757", "content": "", "creation_timestamp": "2025-03-10T11:48:30.087408Z"}, {"uuid": "2785d827-39dc-4da3-9d61-97c12116c791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114137976660008505", "content": "", "creation_timestamp": "2025-03-10T11:48:30.540855Z"}, {"uuid": "496d6611-07ec-42cc-97f0-b4064a8c2727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13624", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2024-13624.yaml", "content": "", "creation_timestamp": "2025-03-12T12:59:25.000000Z"}, {"uuid": "320c5650-3b9b-4115-8983-aa8d685fb4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdgd6xdme2j", "content": "", "creation_timestamp": "2025-03-14T10:40:49.739597Z"}, {"uuid": "0c809d38-12a1-427d-9c43-9a10b6ed1fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13626", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3uaywwa2t", "content": "", "creation_timestamp": "2025-02-17T06:15:46.869569Z"}, {"uuid": "2e256ab0-5bc0-4356-ad78-b0631ba3de52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13627", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3uddor72g", "content": "", "creation_timestamp": "2025-02-17T06:15:49.070113Z"}, {"uuid": "34178365-030a-4a4f-aa8c-58445b9d58e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13726", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3ufwumy2t", "content": "", "creation_timestamp": "2025-02-17T06:15:51.874741Z"}, {"uuid": "3aa06ec6-fe8c-4f59-a8a3-992bc4ad9b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13726", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114017767487537657", "content": "", "creation_timestamp": "2025-02-17T06:17:44.004657Z"}, {"uuid": "aff3a1d0-c6cb-47b8-83b1-5d67776f2682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13603", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3tzyo6o2o", "content": "", "creation_timestamp": "2025-02-17T06:15:39.570741Z"}, {"uuid": "cd321381-7399-4ab8-8bbc-72dce1872139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13608", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3u4ltf42o", "content": "", "creation_timestamp": "2025-02-17T06:15:42.021079Z"}, {"uuid": "22cb4c8a-a2db-4e5f-9270-dfccd5e947ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13625", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3u6qjqq2n", "content": "", "creation_timestamp": "2025-02-17T06:15:44.346038Z"}, {"uuid": "ce174afc-f2bf-4897-b301-52d8a7e2e6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liefctntbc2p", "content": "", "creation_timestamp": "2025-02-17T09:05:00.186158Z"}, {"uuid": "51a37029-075c-430e-9fc6-fe87083dffe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liefelr4472v", "content": "", "creation_timestamp": "2025-02-17T09:05:58.473706Z"}, {"uuid": "11099efa-68d5-4038-9519-234fd2a707b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liefem2ksw2y", "content": "", "creation_timestamp": "2025-02-17T09:05:59.115599Z"}, {"uuid": "f8bd8843-c6b2-4150-95d9-9d4f3dc1b52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liefeml62w2y", "content": "", "creation_timestamp": "2025-02-17T09:06:02.027985Z"}, {"uuid": "526f81b4-787c-43ed-be28-6c9ebb2b131e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwsy3rw2j", "content": "", "creation_timestamp": "2025-03-19T14:38:30.663295Z"}, {"uuid": "d16fb0df-8aff-4840-b167-3857e548cb07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13146", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3llb7h5osla2b", "content": "", "creation_timestamp": "2025-03-26T06:57:37.608537Z"}, {"uuid": "785128ee-2a49-4ed6-b424-367c4006600d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13626", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liefem5uc32y", "content": "", "creation_timestamp": "2025-02-17T09:05:59.874364Z"}, {"uuid": "404d1d8b-e0c4-4e23-8c88-0c438e16a751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liefembcxg2z", "content": "", "creation_timestamp": "2025-02-17T09:06:00.392507Z"}, {"uuid": "1dd2417e-c731-42e2-8f71-5194aa17d418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13152", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3liexhpohgs2i", "content": "", "creation_timestamp": "2025-02-17T14:29:52.635388Z"}, {"uuid": "79775800-a88c-4fa2-8d21-8affe2d565b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13879", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114019912283848794", "content": "", "creation_timestamp": "2025-02-17T15:23:10.937936Z"}, {"uuid": "920ac40e-4caa-4ce9-bde2-7d6e44619065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13879", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lif5g65ocs2h", "content": "", "creation_timestamp": "2025-02-17T16:16:21.686933Z"}, {"uuid": "ca90674b-2dc7-46ee-85ed-8ed554646f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13837", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lifhgskvf72y", "content": "", "creation_timestamp": "2025-02-17T19:15:40.239988Z"}, {"uuid": "f5ff130d-b85f-453a-8a0d-b155090df78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lifhigb7c32a", "content": "", "creation_timestamp": "2025-02-17T19:16:34.241014Z"}, {"uuid": "dce9c2bf-7152-4bc0-a1dd-e27ce515552d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lifopbzyog2v", "content": "", "creation_timestamp": "2025-02-17T21:25:41.488496Z"}, {"uuid": "31373630-de33-4b69-b14c-ef60a84d6322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13741", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lig6xth45v2n", "content": "", "creation_timestamp": "2025-02-18T02:16:47.778185Z"}, {"uuid": "c4faf2b8-bfb6-4252-8d88-4c1fc8042254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13740", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligcbbfcu22i", "content": "", "creation_timestamp": "2025-02-18T03:15:45.453436Z"}, {"uuid": "c071cae8-4c43-4eda-940f-d154c1f6dd75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13464", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixi2ps22n", "content": "", "creation_timestamp": "2025-02-18T05:15:32.967039Z"}, {"uuid": "880d61f2-a905-4d7c-b226-fe9d01d3f0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13501", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixkumha2o", "content": "", "creation_timestamp": "2025-02-18T05:15:36.167788Z"}, {"uuid": "0407b0a2-62e4-4c66-92d8-8a8fc06cb73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13522", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiyga24q2o", "content": "", "creation_timestamp": "2025-02-18T05:16:04.500803Z"}, {"uuid": "76268e31-41d4-4f4b-aef1-3ba5bff7273e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13535", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiyieucf2h", "content": "", "creation_timestamp": "2025-02-18T05:16:06.771131Z"}, {"uuid": "be69e472-2d26-4bac-bb85-9e08e1610cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13538", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiylb65m2y", "content": "", "creation_timestamp": "2025-02-18T05:16:09.813919Z"}, {"uuid": "2de6a545-ea2f-44cb-8dd8-bcc771c0283f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13540", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiyo7lv52h", "content": "", "creation_timestamp": "2025-02-18T05:16:12.921669Z"}, {"uuid": "eb5df465-10f5-493e-ac33-a100942058bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13555", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiyqhwev2g", "content": "", "creation_timestamp": "2025-02-18T05:16:15.673492Z"}, {"uuid": "de562ad6-eda8-4231-adf4-7c0963eb9da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13565", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiysqcqw2i", "content": "", "creation_timestamp": "2025-02-18T05:16:18.363395Z"}, {"uuid": "653d0c73-edb7-4c1e-83e6-aea138488b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13573", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiyuvz7n2t", "content": "", "creation_timestamp": "2025-02-18T05:16:20.042699Z"}, {"uuid": "49f66eb7-4aa5-455f-94dd-abe8370fe032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13576", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiyxyjkw2i", "content": "", "creation_timestamp": "2025-02-18T05:16:23.068975Z"}, {"uuid": "473e5405-4590-4d44-8925-5fb180714196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13577", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiz3c6fa2o", "content": "", "creation_timestamp": "2025-02-18T05:16:26.839802Z"}, {"uuid": "e2b3af56-8391-4492-83af-68255d34f78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13578", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiz5ladv2g", "content": "", "creation_timestamp": "2025-02-18T05:16:28.948263Z"}, {"uuid": "ef1720d0-de8f-4dd9-a5a2-515532d3ca91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13579", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizaq3si23", "content": "", "creation_timestamp": "2025-02-18T05:16:32.382274Z"}, {"uuid": "4608d48d-a634-4dce-b9c4-095c4338f4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13581", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizde5zm2y", "content": "", "creation_timestamp": "2025-02-18T05:16:35.313518Z"}, {"uuid": "a54363b4-2d77-48f2-bf4c-68d466e262f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13582", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizfsk2a23", "content": "", "creation_timestamp": "2025-02-18T05:16:38.166763Z"}, {"uuid": "960a143a-877c-425f-92c2-20b1649348fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13587", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizih2w42y", "content": "", "creation_timestamp": "2025-02-18T05:16:40.753978Z"}, {"uuid": "caa68810-7f73-451c-95ae-a3b8d93ed52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13588", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizl5kpa23", "content": "", "creation_timestamp": "2025-02-18T05:16:43.536012Z"}, {"uuid": "456cc642-99fd-4f61-bf40-ceeb66abbbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13595", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligiznny2q27", "content": "", "creation_timestamp": "2025-02-18T05:16:46.032273Z"}, {"uuid": "9567d048-b671-43a2-8e5c-c360acd20fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13609", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizqnqpc2n", "content": "", "creation_timestamp": "2025-02-18T05:16:48.966451Z"}, {"uuid": "aac05063-532c-407e-b122-6ec447de9417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13622", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizthwnk2y", "content": "", "creation_timestamp": "2025-02-18T05:16:51.877528Z"}, {"uuid": "5b3a5ce6-c745-469a-bd8b-e9fa6413f48e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13677", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizvybgi23", "content": "", "creation_timestamp": "2025-02-18T05:16:54.928091Z"}, {"uuid": "88f99613-c46c-4190-ab1b-7b3669d3c457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13684", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligizyipmn2o", "content": "", "creation_timestamp": "2025-02-18T05:16:57.352832Z"}, {"uuid": "e2be7c92-3b75-405b-af3f-997b26e4733f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13687", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj22rkm42t", "content": "", "creation_timestamp": "2025-02-18T05:16:59.520350Z"}, {"uuid": "b7a8722e-32b8-4f38-abdb-f7a8571da394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13725", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj252nkd2k", "content": "", "creation_timestamp": "2025-02-18T05:17:02.178325Z"}, {"uuid": "45c12acb-db7b-49cb-b556-7c6b27594541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13848", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj2azvqe2t", "content": "", "creation_timestamp": "2025-02-18T05:17:06.172833Z"}, {"uuid": "7932a197-3b52-48dc-89c4-4251ae7795cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13852", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj2dh4de2y", "content": "", "creation_timestamp": "2025-02-18T05:17:08.845803Z"}, {"uuid": "58d5cb27-c33e-41e7-a7e3-0a198e8c5bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligjtfxbzw2p", "content": "", "creation_timestamp": "2025-02-18T05:31:11.809419Z"}, {"uuid": "efcd1252-4021-4096-8e55-9328f8974210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligm2xauad2m", "content": "", "creation_timestamp": "2025-02-18T06:11:11.044593Z"}, {"uuid": "3ed51c3e-b060-46a7-898b-dea62f0e1563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13725", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligm2xnhgo2c", "content": "", "creation_timestamp": "2025-02-18T06:11:11.730556Z"}, {"uuid": "639e3916-c833-4bb5-b066-12de9b232b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligm2xre7c2z", "content": "", "creation_timestamp": "2025-02-18T06:11:12.322567Z"}, {"uuid": "d92fc516-d40a-454b-8c9c-85c466a34114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligm2xuym624", "content": "", "creation_timestamp": "2025-02-18T06:11:12.905415Z"}, {"uuid": "ad0d679a-18ce-4a86-8b82-1ba3bae9e542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13315", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligmcsy5wg2t", "content": "", "creation_timestamp": "2025-02-18T06:15:35.050454Z"}, {"uuid": "7e0f41b7-21f2-45d9-baa5-510fc4451ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13438", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligmcvmuug2h", "content": "", "creation_timestamp": "2025-02-18T06:15:37.601906Z"}, {"uuid": "541ce121-dd9a-4d59-a1c5-eb6b73b955d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13556", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligmcxtwc32o", "content": "", "creation_timestamp": "2025-02-18T06:15:39.788105Z"}, {"uuid": "16d4b197-cc37-472d-b3c1-4fe0f60b864e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13677", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114023552587475440", "content": "", "creation_timestamp": "2025-02-18T06:48:57.776785Z"}, {"uuid": "08f69c0e-904f-49ef-ae0a-bf4d0c54efff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13684", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114023552622562906", "content": "", "creation_timestamp": "2025-02-18T06:48:58.268103Z"}, {"uuid": "c604fcc9-6816-4431-8d7e-aee82e3783d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13725", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114023552671740574", "content": "", "creation_timestamp": "2025-02-18T06:48:59.110194Z"}, {"uuid": "31cea397-a017-421c-8240-3cdbcafa88df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13852", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114023552710702386", "content": "", "creation_timestamp": "2025-02-18T06:48:59.640089Z"}, {"uuid": "80487518-3cef-42c8-992d-e760d5e7307f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13523", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligpo5xqp42i", "content": "", "creation_timestamp": "2025-02-18T07:15:36.899559Z"}, {"uuid": "3557bb5a-1dd9-4942-8d2a-964b7a88b1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13465", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligsznv47e2k", "content": "", "creation_timestamp": "2025-02-18T08:15:43.486135Z"}, {"uuid": "2289c2b6-33ef-40b3-ad6e-7eceda8da57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13575", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligszqr45d2y", "content": "", "creation_timestamp": "2025-02-18T08:15:47.216998Z"}, {"uuid": "e7ea0fc8-49a9-45fa-b453-e76604dd7d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13704", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligszswqcw2g", "content": "", "creation_timestamp": "2025-02-18T08:15:48.800690Z"}, {"uuid": "f4d0cb20-4f9f-446e-aabd-0942176d5947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13795", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligszvlf7d27", "content": "", "creation_timestamp": "2025-02-18T08:15:51.615939Z"}, {"uuid": "7a02ac3e-54ec-4ef8-b380-c7a712ef2124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13315", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114024022728440880", "content": "", "creation_timestamp": "2025-02-18T08:48:31.691905Z"}, {"uuid": "e9fca0a0-0a1d-4df6-8cb5-d742d427521f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13556", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114024022764435678", "content": "", "creation_timestamp": "2025-02-18T08:48:32.203236Z"}, {"uuid": "f6279e99-9f33-441d-ad2d-2e31e19b1335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13316", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligwehm5vl2y", "content": "", "creation_timestamp": "2025-02-18T09:15:27.271862Z"}, {"uuid": "e869b377-4ad2-45e5-ad3a-0ec78a21b676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13395", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligwejxdnx2o", "content": "", "creation_timestamp": "2025-02-18T09:15:29.836663Z"}, {"uuid": "ced03ab7-4377-4a10-948f-3f9ea13b6e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13718", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligwemhbue2p", "content": "", "creation_timestamp": "2025-02-18T09:15:32.475922Z"}, {"uuid": "097bb670-4867-4962-a772-104de04a7e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13442", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwt6ytl26", "content": "", "creation_timestamp": "2025-03-19T14:38:31.780927Z"}, {"uuid": "0b0c1752-5de7-4913-8fe6-61c7a7b246bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13118", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ll6mzgj6dr2s", "content": "", "creation_timestamp": "2025-03-25T06:22:30.280077Z"}, {"uuid": "c52b65b8-dad1-4245-b53d-21f9403882e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13373", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542262965907", "content": "", "creation_timestamp": "2025-03-01T09:48:03.992608Z"}, {"uuid": "50874624-4aed-4d51-b413-a97cd598e7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13824", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkfxum35b72t", "content": "", "creation_timestamp": "2025-03-15T11:00:06.235986Z"}, {"uuid": "c13c9514-d824-4302-a259-6ff96b354675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13771", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkfxumegol23", "content": "", "creation_timestamp": "2025-03-15T11:00:07.135903Z"}, {"uuid": "4586e183-cf4a-4cc5-9cd5-617c87f5ea34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligxjwdyqb2v", "content": "", "creation_timestamp": "2025-02-18T09:36:24.288410Z"}, {"uuid": "fcddf463-49f3-413c-bc40-71f75be08425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligxjwp4va2a", "content": "", "creation_timestamp": "2025-02-18T09:36:25.023693Z"}, {"uuid": "4e68e6d2-171d-47ca-ac43-69e8a70ded8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13438", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligxjwvvu72a", "content": "", "creation_timestamp": "2025-02-18T09:36:25.541343Z"}, {"uuid": "6e7a1342-316d-481c-826d-b33ed251e6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13687", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligzikirng26", "content": "", "creation_timestamp": "2025-02-18T10:11:25.976786Z"}, {"uuid": "683f7543-5316-4513-bc3f-61930069d09f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13582", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligzikyqf626", "content": "", "creation_timestamp": "2025-02-18T10:11:26.701502Z"}, {"uuid": "a8a3f330-a1c5-44f5-884d-107b19b34a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligzilcl5e2m", "content": "", "creation_timestamp": "2025-02-18T10:11:27.326860Z"}, {"uuid": "19f3e058-5945-4df5-b8dd-9fff0fb2d32c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13369", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligzskwjrv2p", "content": "", "creation_timestamp": "2025-02-18T10:17:02.080695Z"}, {"uuid": "d4c4d8e8-748a-4c45-a718-3e9fc7453251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13636", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53k7mgr2i", "content": "", "creation_timestamp": "2025-02-18T11:15:44.455243Z"}, {"uuid": "888f7427-7042-45c0-a511-9bd86df94a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13667", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53me7f72y", "content": "", "creation_timestamp": "2025-02-18T11:15:46.454950Z"}, {"uuid": "aff5cada-13d0-4e7d-941e-f1bce8ebce05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13681", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53ondwh2n", "content": "", "creation_timestamp": "2025-02-18T11:15:48.861535Z"}, {"uuid": "354c7003-7f1f-4ec5-b43d-3b0a2ec28287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13691", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53r7tdm2o", "content": "", "creation_timestamp": "2025-02-18T11:15:51.481722Z"}, {"uuid": "606406df-078f-4f9f-9df3-f3ac9835c041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13783", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53tqlfz2g", "content": "", "creation_timestamp": "2025-02-18T11:15:54.170099Z"}, {"uuid": "da00cc14-f438-4075-b6a1-6797fbfb1de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13797", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53w5h4v2o", "content": "", "creation_timestamp": "2025-02-18T11:15:56.655138Z"}, {"uuid": "ec116647-7461-48af-8e2c-0a3129c18d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13523", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lih6sobjk226", "content": "", "creation_timestamp": "2025-02-18T11:46:33.964135Z"}, {"uuid": "79dee1d8-a4ca-4563-8265-4a7eaf8ad0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lih6soql2624", "content": "", "creation_timestamp": "2025-02-18T11:46:34.699712Z"}, {"uuid": "affc1298-cd57-4bd2-8692-bfee3fef326f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lih6sp3jl226", "content": "", "creation_timestamp": "2025-02-18T11:46:35.870369Z"}, {"uuid": "6223acf9-20d9-480d-80e9-f12adf0971aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13636", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liha7hwyse2c", "content": "", "creation_timestamp": "2025-02-18T12:11:37.502651Z"}, {"uuid": "d1b092b7-aa51-4873-9ead-80d9e2686848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13636", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114025203514256752", "content": "", "creation_timestamp": "2025-02-18T13:48:48.869648Z"}, {"uuid": "dbd28160-aafc-4fbf-9788-f3f80cb9e314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13667", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihg3gkb7o2p", "content": "", "creation_timestamp": "2025-02-18T13:56:44.077596Z"}, {"uuid": "79e210ce-5be1-49da-8097-4998fb9383da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihg3hcfbr26", "content": "", "creation_timestamp": "2025-02-18T13:56:45.989895Z"}, {"uuid": "fcb1402a-00eb-43ee-80f5-6422af5953ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihg3hjxnf22", "content": "", "creation_timestamp": "2025-02-18T13:56:47.227276Z"}, {"uuid": "6194bd71-ffc9-4f93-91e0-a46b605e1d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13689", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmhqvuq2p", "content": "", "creation_timestamp": "2025-02-18T15:17:50.990314Z"}, {"uuid": "434eaf62-7ddf-436c-9970-645bc9babc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13689", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihtherg6q2e", "content": "", "creation_timestamp": "2025-02-18T17:56:04.359725Z"}, {"uuid": "74962459-ecf8-458c-9d93-324df3d0c893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13743", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liife56egk2o", "content": "", "creation_timestamp": "2025-02-18T23:16:22.588247Z"}, {"uuid": "811c481c-8881-4a2e-ba2c-721d0dc76f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13725", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liihtllt6i2z", "content": "", "creation_timestamp": "2025-02-19T00:00:48.144390Z"}, {"uuid": "8ed827b2-098d-4b56-85f8-4008cbd351f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13508", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liiiojakeh2g", "content": "", "creation_timestamp": "2025-02-19T00:15:51.656054Z"}, {"uuid": "0b3e2703-0a8c-4c10-a575-0851da787fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13743", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liip5f4cqf2y", "content": "", "creation_timestamp": "2025-02-19T02:11:34.027670Z"}, {"uuid": "cf154f96-7e2d-4b98-ba97-dd7445114087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liivcb3u4y2c", "content": "", "creation_timestamp": "2025-02-19T04:01:39.212022Z"}, {"uuid": "78d6a49e-f185-4167-a022-99905dab2f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13443", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liiwbw66gt2y", "content": "", "creation_timestamp": "2025-02-19T04:19:21.587600Z"}, {"uuid": "8361b5b4-f178-4ca1-8331-824a5a6abd8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13726", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13726.yaml", "content": "", "creation_timestamp": "2025-02-17T09:10:57.000000Z"}, {"uuid": "2a06e043-d5dd-44ae-9c22-aa4bca4a2327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13799", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lij4snd62l2g", "content": "", "creation_timestamp": "2025-02-19T06:16:05.163488Z"}, {"uuid": "29821406-d92a-4e78-bbf3-d905ec35f4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijcz4mnpj2a", "content": "", "creation_timestamp": "2025-02-19T08:07:05.091299Z"}, {"uuid": "352cb579-20ce-4b98-b928-f370cfc283a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13443", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijcz52h622v", "content": "", "creation_timestamp": "2025-02-19T08:07:06.614722Z"}, {"uuid": "64626abb-7232-4a67-80f4-6b1723161df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13390", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdikvqwi2o", "content": "", "creation_timestamp": "2025-02-19T08:15:43.060711Z"}, {"uuid": "14891fb6-a7c2-4826-b2b0-e88f822e34a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13405", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdinatct2t", "content": "", "creation_timestamp": "2025-02-19T08:15:45.502818Z"}, {"uuid": "714bfb42-0a40-4fa5-b07e-e03ed74f3704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13462", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdipsq332y", "content": "", "creation_timestamp": "2025-02-19T08:15:48.698813Z"}, {"uuid": "137652a3-258d-40af-ac1c-927201d81cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13468", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjq7chn2g", "content": "", "creation_timestamp": "2025-02-19T08:16:22.191501Z"}, {"uuid": "7210dcb4-ac4e-48b0-a953-4eb6bc718c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13589", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjst2rc2p", "content": "", "creation_timestamp": "2025-02-19T08:16:25.210464Z"}, {"uuid": "5cc93f1a-4c66-480a-a7ea-cc9d2755b5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13591", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjvfwbk2i", "content": "", "creation_timestamp": "2025-02-19T08:16:27.976220Z"}, {"uuid": "64e4775a-a622-4a28-bc86-12ce0829efb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13592", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjxrrav2g", "content": "", "creation_timestamp": "2025-02-19T08:16:30.078700Z"}, {"uuid": "a813e5af-b22d-4dc6-98d2-56b9085977bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13657", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdk2delf2g", "content": "", "creation_timestamp": "2025-02-19T08:16:33.183393Z"}, {"uuid": "05a503f4-e44a-4ddf-a3af-fb4f6e1845c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13660", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdk4lrxn2g", "content": "", "creation_timestamp": "2025-02-19T08:16:35.373592Z"}, {"uuid": "679547ce-4f7a-46fb-9196-e6b14fd4b960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13663", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdk6vkcv2g", "content": "", "creation_timestamp": "2025-02-19T08:16:37.559941Z"}, {"uuid": "50b2b4f7-ad54-4c72-b43b-592233179d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13674", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdkbnapc2t", "content": "", "creation_timestamp": "2025-02-19T08:16:40.491364Z"}, {"uuid": "100fab39-0225-4482-b2e5-2fe0d005b00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13676", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdke4jhy2o", "content": "", "creation_timestamp": "2025-02-19T08:16:42.998144Z"}, {"uuid": "6a0e14ed-6f97-4734-bb41-caa74321cbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13679", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdkgkoha2o", "content": "", "creation_timestamp": "2025-02-19T08:16:45.680915Z"}, {"uuid": "5d70c9a8-2de0-43a1-9429-76da3537d3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13711", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdkitlhi2o", "content": "", "creation_timestamp": "2025-02-19T08:16:47.995529Z"}, {"uuid": "7131ea5d-11e4-4dc9-b874-55dd7f7571b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13712", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdkli5662n", "content": "", "creation_timestamp": "2025-02-19T08:16:50.901522Z"}, {"uuid": "fb239c36-810e-4b9e-a203-cf174b055791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13719", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdknorun2g", "content": "", "creation_timestamp": "2025-02-19T08:16:53.186839Z"}, {"uuid": "0f562994-ff50-4c03-b9f4-23a6686c3635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13736", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdkpsoat2y", "content": "", "creation_timestamp": "2025-02-19T08:16:55.413154Z"}, {"uuid": "3a791200-f333-465b-93e5-466246b0fa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13854", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdks3ngk2t", "content": "", "creation_timestamp": "2025-02-19T08:16:57.720232Z"}, {"uuid": "cedfbdb8-2716-4d63-85e0-60d898bffb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13231", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtfps3m2t", "content": "", "creation_timestamp": "2025-02-19T09:15:28.274519Z"}, {"uuid": "450509ea-921f-4d4d-8a68-a87021e2aefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13336", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtigepz2i", "content": "", "creation_timestamp": "2025-02-19T09:15:30.873370Z"}, {"uuid": "646a3086-4e47-40f2-b9a8-652d204daa24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13339", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtkwhnn23", "content": "", "creation_timestamp": "2025-02-19T09:15:33.393023Z"}, {"uuid": "1d9b98ad-05ae-45f7-ba91-e367859b7724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13363", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtngtw523", "content": "", "creation_timestamp": "2025-02-19T09:15:36.048261Z"}, {"uuid": "ae89fa64-81a2-49e6-9043-87c988f04c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13364", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtptino2o", "content": "", "creation_timestamp": "2025-02-19T09:15:38.530802Z"}, {"uuid": "6ab8407d-b6c0-4a8c-8aed-7848ed5ee09f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13825", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwv2n2d2m", "content": "", "creation_timestamp": "2025-03-08T10:30:18.540905Z"}, {"uuid": "1729bf0e-1102-4f4f-a50d-91171f26d925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13844", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvf2ym2l", "content": "", "creation_timestamp": "2025-03-08T10:30:19.180149Z"}, {"uuid": "9c0e66ae-4911-4d61-af10-26625f7cbdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13771", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdmymtmnl2g", "content": "", "creation_timestamp": "2025-03-14T12:40:10.579967Z"}, {"uuid": "e0d972c3-d88c-49a6-bbe9-2747bd71666f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13908", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvij6j2f", "content": "", "creation_timestamp": "2025-03-08T10:30:19.736246Z"}, {"uuid": "d64cd663-9923-4882-be03-0487c60d7aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13442", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114189644522048401", "content": "", "creation_timestamp": "2025-03-19T14:48:19.703465Z"}, {"uuid": "50961f07-cd5a-45b7-a51b-4ebebf8b7c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13933", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114189644574652729", "content": "", "creation_timestamp": "2025-03-19T14:48:20.526403Z"}, {"uuid": "dd0d95d7-623e-4d5a-953b-986ae6ef2575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livx2einnu2t", "content": "", "creation_timestamp": "2025-02-24T08:37:38.630751Z"}, {"uuid": "1e68d24f-fb2a-4fe8-83e9-bf7fc7ad5a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvu3a726", "content": "", "creation_timestamp": "2025-03-08T10:30:21.441726Z"}, {"uuid": "60626d94-4426-4844-b1b2-580a1c95ed0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13489", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijk6qpfzh2h", "content": "", "creation_timestamp": "2025-02-19T10:15:29.993468Z"}, {"uuid": "1ed6b0a0-5b6f-4f38-b878-686042c473a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lijm7hp5d32c", "content": "", "creation_timestamp": "2025-02-19T10:51:42.291152Z"}, {"uuid": "b1ae59a0-167b-4bd3-8e0b-5b66e52c71bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lijm7hp5d32c", "content": "", "creation_timestamp": "2025-02-19T10:51:42.353305Z"}, {"uuid": "98cea611-7768-468b-9c91-eaf04ece11c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lijm7hp5d32c", "content": "", "creation_timestamp": "2025-02-19T10:51:42.411819Z"}, {"uuid": "88d2f003-56ef-4c38-a7e5-4946f1d8456f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3vusn52a", "content": "", "creation_timestamp": "2025-02-19T12:01:16.969130Z"}, {"uuid": "2e69224a-eb33-4d06-b4e0-fdbd7b18052d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3w5xmh2v", "content": "", "creation_timestamp": "2025-02-19T12:01:17.621364Z"}, {"uuid": "24661116-a354-4711-9272-b57fbce5c428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13674", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3wdvbr2y", "content": "", "creation_timestamp": "2025-02-19T12:01:18.220801Z"}, {"uuid": "a8635438-653c-42b0-a33c-f807098e77f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13676", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3whahb2m", "content": "", "creation_timestamp": "2025-02-19T12:01:18.784118Z"}, {"uuid": "20dadc8d-8623-4a7f-8f15-5da260cbe929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13854", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3wnvex2v", "content": "", "creation_timestamp": "2025-02-19T12:01:19.852023Z"}, {"uuid": "e0c1ffe5-6b40-4c4a-b5c1-081fb49e0233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13231", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3wut2p2v", "content": "", "creation_timestamp": "2025-02-19T12:01:20.990952Z"}, {"uuid": "e9777988-8e82-4ccc-9b41-e2a44c24ae96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13339", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3x4e7u26", "content": "", "creation_timestamp": "2025-02-19T12:01:22.099320Z"}, {"uuid": "c8ada44f-1bf5-48e9-8a99-2444236790f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13711", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3x7qd22a", "content": "", "creation_timestamp": "2025-02-19T12:01:22.665469Z"}, {"uuid": "e826ace9-2947-4ee3-b0d9-357b5469a49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13478", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvoocvk2y", "content": "", "creation_timestamp": "2025-02-19T12:15:42.338740Z"}, {"uuid": "4b26f998-1048-4f9e-a205-1ade53f1a841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13479", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvr23qc2k", "content": "", "creation_timestamp": "2025-02-19T12:15:44.475427Z"}, {"uuid": "b36c0e46-84c1-46e1-b7fa-b7a907507e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13481", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvtceac2k", "content": "", "creation_timestamp": "2025-02-19T12:15:46.695666Z"}, {"uuid": "85c556dc-0199-46d9-b438-fa81663f66b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13483", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvvfth52p", "content": "", "creation_timestamp": "2025-02-19T12:15:48.927847Z"}, {"uuid": "863efd09-428b-4a69-a3e6-3d885a10834a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13485", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqvy3w2z2o", "content": "", "creation_timestamp": "2025-02-19T12:15:51.687308Z"}, {"uuid": "deefe2a0-6b38-4fd5-9686-bbcd290509b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13491", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqw2hy5m2h", "content": "", "creation_timestamp": "2025-02-19T12:15:54.241817Z"}, {"uuid": "0e4251a0-6112-4f53-a4f6-237bf6adb841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13533", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqw4vnbn2p", "content": "", "creation_timestamp": "2025-02-19T12:15:56.723778Z"}, {"uuid": "65972934-6863-460e-897a-d7fbb6dac80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13534", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqw725sm2o", "content": "", "creation_timestamp": "2025-02-19T12:15:59.215293Z"}, {"uuid": "119660e2-e799-46b1-8e5e-3903dee1e474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnjvfrl22", "content": "", "creation_timestamp": "2025-02-19T14:16:25.077177Z"}, {"uuid": "f82f3ee8-2556-41b8-bcc2-28af3484d1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13533", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnjyp5b2z", "content": "", "creation_timestamp": "2025-02-19T14:16:25.658339Z"}, {"uuid": "ba17a819-8383-4938-b81f-e0b1b3a227bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13481", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnk45ky2a", "content": "", "creation_timestamp": "2025-02-19T14:16:26.217342Z"}, {"uuid": "30decd5f-c687-4686-8c4f-2fa04aa3d1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkcpj22m", "content": "", "creation_timestamp": "2025-02-19T14:16:27.448117Z"}, {"uuid": "2c3046c1-e579-4f99-93c3-84ba8260b2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13534", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkjp3j2z", "content": "", "creation_timestamp": "2025-02-19T14:16:28.626116Z"}, {"uuid": "45c295d3-0e3c-4596-a58d-00d7a7fb82fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkn7hq2a", "content": "", "creation_timestamp": "2025-02-19T14:16:29.240584Z"}, {"uuid": "56c55587-212b-4552-8437-e4e1fa644dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13478", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkqhyd22", "content": "", "creation_timestamp": "2025-02-19T14:16:29.816369Z"}, {"uuid": "55930626-548b-4cf9-bc4b-ea9b8f8d5947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13485", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnktump2e", "content": "", "creation_timestamp": "2025-02-19T14:16:30.381295Z"}, {"uuid": "83196934-e0fe-4d2c-87f2-7d656e0412bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13483", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkx6522v", "content": "", "creation_timestamp": "2025-02-19T14:16:30.937081Z"}, {"uuid": "02b40bfc-288f-47c7-937d-9e10fbe2261e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13726", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodr3qps2k", "content": "", "creation_timestamp": "2025-02-19T21:02:38.465686Z"}, {"uuid": "d4097112-ed7a-47f5-bb1a-e1a29bcd4e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13605", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livx2exbbc2t", "content": "", "creation_timestamp": "2025-02-24T08:37:39.875591Z"}, {"uuid": "26193869-1325-4f0a-b459-a08aa2095f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrddpyzeb2h", "content": "", "creation_timestamp": "2025-03-07T05:59:30.527459Z"}, {"uuid": "a2b98ace-61d2-45b5-aaa1-006d72531631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "seen", "source": "https://bsky.app/profile/abrahack.bsky.social/post/3ll4ghq7qrs2g", "content": "", "creation_timestamp": "2025-03-24T09:19:58.609966Z"}, {"uuid": "4e1794e4-4880-44b8-a099-bba9cb1f25db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lim3tnehwk2u", "content": "", "creation_timestamp": "2025-02-20T10:36:43.974485Z"}, {"uuid": "331b02e2-5400-4f97-ad92-c48281262a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13753", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114036057912346467", "content": "", "creation_timestamp": "2025-02-20T11:49:32.726085Z"}, {"uuid": "20a39c1c-ad73-4d05-8564-67bc80172c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13789", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114036057959681930", "content": "", "creation_timestamp": "2025-02-20T11:49:33.106831Z"}, {"uuid": "75ae7a01-38ce-4457-ba15-66c582accb3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctfhwyb2l", "content": "", "creation_timestamp": "2025-02-20T12:41:51.918456Z"}, {"uuid": "7519f86b-ad22-41f6-b37e-58ac63c1750b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctfuif52y", "content": "", "creation_timestamp": "2025-02-20T12:41:52.678900Z"}, {"uuid": "86cd3af3-c7cd-4ab6-91d2-53eaf7d20ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13888", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctg3wnw26", "content": "", "creation_timestamp": "2025-02-20T12:41:53.818883Z"}, {"uuid": "c24072f0-231e-4257-9f24-dc3052cbebdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13792", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctg7c3n2y", "content": "", "creation_timestamp": "2025-02-20T12:41:54.416703Z"}, {"uuid": "03b4a9b8-6552-4ed2-83e7-007e3a5a8ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctgdc5x2y", "content": "", "creation_timestamp": "2025-02-20T12:41:55.214947Z"}, {"uuid": "b4561438-d192-44a5-a04d-e5425991de9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctggngv2y", "content": "", "creation_timestamp": "2025-02-20T12:41:55.810167Z"}, {"uuid": "fd9ea0c9-bc60-482a-af54-180c0c704588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctgl4rq2y", "content": "", "creation_timestamp": "2025-02-20T12:41:56.347240Z"}, {"uuid": "cd276b41-5235-472f-872e-95c40397dc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13476", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctgpjo32c", "content": "", "creation_timestamp": "2025-02-20T12:41:56.928092Z"}, {"uuid": "74725b2c-d6e1-4793-89d7-db178717d130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctgtfot2c", "content": "", "creation_timestamp": "2025-02-20T12:41:57.533039Z"}, {"uuid": "150b5e4d-7776-4e76-8358-58391c633eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3limctgwmwf2p", "content": "", "creation_timestamp": "2025-02-20T12:41:58.096332Z"}, {"uuid": "18ef171b-ad32-48ef-9a07-f31a62d22e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13789", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3linirhysbr22", "content": "", "creation_timestamp": "2025-02-21T00:00:50.981178Z"}, {"uuid": "ae2022e8-74ce-4215-bbe4-9bd2378e3b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liobgzuqjg27", "content": "", "creation_timestamp": "2025-02-21T07:22:22.844472Z"}, {"uuid": "303e6a27-34cf-4d44-aa53-3ebfa88f3af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liobh2amgn2c", "content": "", "creation_timestamp": "2025-02-21T07:22:23.419089Z"}, {"uuid": "20066e9b-ec07-4eed-bae1-0ea139f8ad77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13314", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liobh2kaz62l", "content": "", "creation_timestamp": "2025-02-21T07:22:24.495528Z"}, {"uuid": "9968fa6b-effc-4e3d-ac82-ce7a03edd589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13882", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114126651137484458", "content": "", "creation_timestamp": "2025-03-08T11:48:17.079929Z"}, {"uuid": "43ccefac-2444-4d82-9e76-3e1da7d5eb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13359", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114126651218617680", "content": "", "creation_timestamp": "2025-03-08T11:48:18.217459Z"}, {"uuid": "da1e7f20-9b14-4a12-a00c-bdf946b04a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzlwsbb3224", "content": "", "creation_timestamp": "2025-03-10T12:54:37.989426Z"}, {"uuid": "a67846fb-91a4-440e-817a-0b7f42fee125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13771", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114161097294048919", "content": "", "creation_timestamp": "2025-03-14T13:48:23.524812Z"}, {"uuid": "a3881b93-3ec8-4b9e-b6df-ea56f3170a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzlwwntpk2w", "content": "", "creation_timestamp": "2025-03-10T12:54:42.725185Z"}, {"uuid": "0518f169-1b63-4186-8108-7c0f5f6a12c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljujwoaskb2h", "content": "", "creation_timestamp": "2025-03-08T12:35:29.367984Z"}, {"uuid": "ee019923-b39e-461c-bb4a-23c7962483c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13353", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114041717750191182", "content": "", "creation_timestamp": "2025-02-21T11:48:36.107581Z"}, {"uuid": "52b0bae0-ef45-4c65-a690-8f9b4be736b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13789", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lioqyae7fe2b", "content": "", "creation_timestamp": "2025-02-21T12:00:26.387570Z"}, {"uuid": "2d2bf751-4ac7-46e1-adba-33304a95e6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhbqr22u", "content": "", "creation_timestamp": "2025-02-21T15:26:56.366518Z"}, {"uuid": "60637dfd-798f-44f3-a6e7-c1a3303949e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhf5id2a", "content": "", "creation_timestamp": "2025-02-21T15:26:56.924604Z"}, {"uuid": "1d7eeb88-a6ca-4e3a-90f5-edddcb43809c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhmsok26", "content": "", "creation_timestamp": "2025-02-21T15:26:58.095650Z"}, {"uuid": "e207d625-922d-4e25-8981-f8320f6ef34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhtlpj2p", "content": "", "creation_timestamp": "2025-02-21T15:26:59.281036Z"}, {"uuid": "b4d2b50b-0cc1-4063-a758-757bcc4920b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13564", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lirayszhqb2r", "content": "", "creation_timestamp": "2025-02-22T11:52:26.013902Z"}, {"uuid": "5cafff5b-8185-4cfb-a653-a612625c3d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-925fae68-b6651114658b01d3", "content": "", "creation_timestamp": "2025-02-22T15:37:36.759797Z"}, {"uuid": "81a47806-5943-45d7-8827-d42f8aa802ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-925fae68-b6651114658b01d3", "content": "", "creation_timestamp": "2025-02-22T15:37:36.819554Z"}, {"uuid": "4a476e76-61b0-4708-ac91-f18f24840c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-925fae68-b6651114658b01d3", "content": "", "creation_timestamp": "2025-02-22T15:37:36.874728Z"}, {"uuid": "f5b54ca9-5e21-445b-8672-64f7151e6678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13869", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lirogkgqri2k", "content": "", "creation_timestamp": "2025-02-22T15:52:44.655841Z"}, {"uuid": "ad44ee6a-18c5-4e0d-9680-fd9d3730b7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljujwnrqvg26", "content": "", "creation_timestamp": "2025-03-08T12:35:27.429788Z"}, {"uuid": "9c23d527-c067-494a-bb4e-e3c216a42e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljujwonqhl2m", "content": "", "creation_timestamp": "2025-03-08T12:35:30.869262Z"}, {"uuid": "5e75a087-76e7-46f9-9171-4e772d1f3a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138324497059173", "content": "", "creation_timestamp": "2025-03-10T13:16:58.172313Z"}, {"uuid": "4a75ffd9-1a8c-455e-8dab-b335d8574e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra5ylr72l", "content": "", "creation_timestamp": "2025-03-14T13:55:59.389415Z"}, {"uuid": "ea02c510-f11b-4c19-876e-a0ea78d7b9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138324497059173", "content": "", "creation_timestamp": "2025-03-10T13:16:58.243622Z"}, {"uuid": "a0af71db-7b1d-43be-9f8e-99e471d0be83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13888", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleer6rfe2z", "content": "", "creation_timestamp": "2025-03-04T21:02:04.249396Z"}, {"uuid": "5e661cbb-c4ab-4578-a970-2d6dd7cddc38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-11)", "content": "", "creation_timestamp": "2025-03-11T00:00:00.000000Z"}, {"uuid": "b9643339-083d-4cdb-88df-f70f29bd6280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13171", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-114/", "content": "", "creation_timestamp": "2025-03-10T04:00:00.000000Z"}, {"uuid": "74b04e5d-4a35-4a9e-ab8b-e8adcb96829a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13924", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114127947868522711", "content": "", "creation_timestamp": "2025-03-08T17:18:03.038559Z"}, {"uuid": "91db9a5a-3f05-494d-8372-b52b4048bf5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1305", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-10", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "5fed52b6-d863-4ad7-8454-9e8b522a8121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13446", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk6fehrozq2m", "content": "", "creation_timestamp": "2025-03-12T10:40:19.517673Z"}, {"uuid": "a02d3f02-7bbe-4e03-ae8f-db57feeda10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lksk76y4va2p", "content": "", "creation_timestamp": "2025-03-20T11:00:06.119417Z"}, {"uuid": "4f4ac21e-adb1-469a-b0e4-01bad2cc1eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13790", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lksk77a5ji2r", "content": "", "creation_timestamp": "2025-03-20T11:00:07.214657Z"}, {"uuid": "c77c9e01-bfba-422b-a506-a31d2911b6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13442", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lksk77jor224", "content": "", "creation_timestamp": "2025-03-20T11:00:07.961796Z"}, {"uuid": "af67acf4-9f14-4d9d-bcb0-1a2467580172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljzsw6fmln2m", "content": "", "creation_timestamp": "2025-03-10T14:59:33.348130Z"}, {"uuid": "ba0a6623-745c-4c96-b9bc-6a3c2028d530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljzsw6soxq2x", "content": "", "creation_timestamp": "2025-03-10T14:59:34.205520Z"}, {"uuid": "602cbeef-cc0b-4331-a0b9-64451ccd88dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13655", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrlz4vzhl2u", "content": "", "creation_timestamp": "2025-03-07T08:34:38.446046Z"}, {"uuid": "0e79f1f0-4143-41d5-b12c-bbc3713c0c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj73ynaibz2q", "content": "", "creation_timestamp": "2025-02-28T00:00:08.171872Z"}, {"uuid": "3208f1dd-449c-4b48-ba38-3e77d473cd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13359", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114129168811824088", "content": "", "creation_timestamp": "2025-03-08T22:28:33.193290Z"}, {"uuid": "4b7aa74b-ee4e-4a88-9ee3-fae32fcedade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13853", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13853.yaml", "content": "", "creation_timestamp": "2025-03-12T06:44:39.000000Z"}, {"uuid": "bb78b750-23c4-4858-add8-6c7f95eb9361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13655", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114120519381596288", "content": "", "creation_timestamp": "2025-03-07T09:48:54.533019Z"}, {"uuid": "98f8576a-e5e7-4d52-b79d-8da272329fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13496.yaml", "content": "", "creation_timestamp": "2025-03-25T08:37:47.000000Z"}, {"uuid": "a53a7e32-dc82-4ff9-9eaf-78d2a44f5717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13618", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6v7zjesz2k", "content": "", "creation_timestamp": "2025-03-25T08:49:21.846870Z"}, {"uuid": "ebd4e2ed-5ebb-43fd-b654-f9b2c1dd3f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6v7zmr3f2m", "content": "", "creation_timestamp": "2025-03-25T08:49:22.405176Z"}, {"uuid": "d4e08450-7372-4b6a-ac1f-ae8c0cca4dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13863", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6v7zxoqi2l", "content": "", "creation_timestamp": "2025-03-25T08:49:24.065043Z"}, {"uuid": "5223943f-d7d3-468f-b733-ca89c7c879f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3liwlpnxv5s24", "content": "", "creation_timestamp": "2025-02-24T14:47:30.796431Z"}, {"uuid": "3a1c637e-99f6-49a9-aa78-7abc8e162b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13481", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059628087750893", "content": "", "creation_timestamp": "2025-02-24T15:43:25.970351Z"}, {"uuid": "e4c31f38-0457-4082-9acb-aba136307b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13479", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059628495249085", "content": "", "creation_timestamp": "2025-02-24T15:43:32.169258Z"}, {"uuid": "16ca3b5e-76aa-43de-818e-5bea3e728cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13478", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059628764944300", "content": "", "creation_timestamp": "2025-02-24T15:43:39.644269Z"}, {"uuid": "dbbdc441-51d3-4875-a73c-d6103f144d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13871", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk6m32ne7q2s", "content": "", "creation_timestamp": "2025-03-12T12:40:19.700811Z"}, {"uuid": "9254bc97-61ca-4eb8-91cb-79e6734c721d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13483", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059630046391796", "content": "", "creation_timestamp": "2025-02-24T15:43:55.811694Z"}, {"uuid": "f727ab89-5ae9-4cdb-9d35-4aa98f6c87f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13485", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059630853315458", "content": "", "creation_timestamp": "2025-02-24T15:44:08.139269Z"}, {"uuid": "61091a67-8ced-4c26-950b-70d7aebd8f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk6m33fr4b2g", "content": "", "creation_timestamp": "2025-03-12T12:40:20.551242Z"}, {"uuid": "5ba1c489-5199-49ed-a89f-46c935ae99d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13489", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059631174460711", "content": "", "creation_timestamp": "2025-02-24T15:44:13.013125Z"}, {"uuid": "ad5b4cca-074d-42a0-89ed-176ed6a19745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljp77irqw52y", "content": "", "creation_timestamp": "2025-03-06T09:40:13.908433Z"}, {"uuid": "73b018f0-1b79-49b4-893c-bf2f6f19943b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059631478198325", "content": "", "creation_timestamp": "2025-02-24T15:44:17.542593Z"}, {"uuid": "d3432527-17cd-4926-93be-cf54559953fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljp77j3v542a", "content": "", "creation_timestamp": "2025-03-06T09:40:14.467280Z"}, {"uuid": "0ece4726-5978-442e-b0b7-361c061aa73f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phka2h525", "content": "", "creation_timestamp": "2025-02-28T05:48:29.242128Z"}, {"uuid": "7bb3fe46-34fb-4074-adc1-0dc580028c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13122", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2c76z24", "content": "", "creation_timestamp": "2025-03-25T08:49:25.765070Z"}, {"uuid": "591f34b3-e344-4e64-9228-3105fd6e8c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llcon6byo72z", "content": "", "creation_timestamp": "2025-03-26T21:02:12.840776Z"}, {"uuid": "586de21c-b5ea-467b-93c5-d5b9da79177c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-10T18:10:02.000000Z"}, {"uuid": "93075609-aacc-4c83-9f12-aebfd19b03f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-10T18:10:04.000000Z"}, {"uuid": "7d53c492-f695-4226-b994-47156759460a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13871", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114149569646900003", "content": "", "creation_timestamp": "2025-03-12T12:56:45.430745Z"}, {"uuid": "d350c4ba-6486-4b40-bae8-109259f66d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-10T18:10:04.000000Z"}, {"uuid": "b33950f6-a273-42f4-a404-39d27f9dd588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114149569646900003", "content": "", "creation_timestamp": "2025-03-12T12:56:45.505889Z"}, {"uuid": "19411864-fd51-4597-87a0-5b2701b10bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13624", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkbyl6xfzi2a", "content": "", "creation_timestamp": "2025-03-13T21:02:07.982787Z"}, {"uuid": "31e8648d-6581-4ecb-8115-6bab9e1f76fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkv3yfb6c62e", "content": "", "creation_timestamp": "2025-03-21T11:23:46.432721Z"}, {"uuid": "36c298ad-0ca0-42c5-93b9-517cf77c1781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuynhs2g", "content": "", "creation_timestamp": "2025-03-10T19:11:43.809499Z"}, {"uuid": "ab64cfa5-a1a7-4626-b266-6725f1517ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuynhs2g", "content": "", "creation_timestamp": "2025-03-10T19:11:43.902100Z"}, {"uuid": "1484b85a-5420-4eae-99d9-323686f18337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuynhs2g", "content": "", "creation_timestamp": "2025-03-10T19:11:43.979704Z"}, {"uuid": "5b8cbce9-0119-4939-b128-ce48d46c39c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13666", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkxnchcgtr2k", "content": "", "creation_timestamp": "2025-03-22T11:38:55.088694Z"}, {"uuid": "73e5628b-830e-4b33-9ca3-12e3fdedccba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuz6322g", "content": "", "creation_timestamp": "2025-03-10T19:11:45.069816Z"}, {"uuid": "301e142d-4eab-43b3-8c3e-f4857d21911b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuz6322g", "content": "", "creation_timestamp": "2025-03-10T19:11:45.150018Z"}, {"uuid": "c4e2b20f-9ffc-44bf-a5b2-99fe9b2a3dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuz6322g", "content": "", "creation_timestamp": "2025-03-10T19:11:45.225942Z"}, {"uuid": "e0817dfa-4ae7-4289-a65d-ebe39f5b2591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lja4mf633525", "content": "", "creation_timestamp": "2025-02-28T09:43:50.213664Z"}, {"uuid": "0bf7f09f-c478-484e-ab50-987e1d12ad4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13617", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2q3yi2l", "content": "", "creation_timestamp": "2025-03-25T08:49:28.009227Z"}, {"uuid": "fcc457a0-f840-4d18-b0ca-07df13ce130e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13469", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lja4mexiwb2y", "content": "", "creation_timestamp": "2025-02-28T09:43:49.600479Z"}, {"uuid": "2d32866b-c290-4590-8f81-30012145b09f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13123", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2thbt26", "content": "", "creation_timestamp": "2025-03-25T08:49:28.561833Z"}, {"uuid": "6ce4c382-5423-4fbe-8ae4-ece1325b9bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3lk4qv52j5z2e", "content": "", "creation_timestamp": "2025-03-11T19:01:10.928472Z"}, {"uuid": "437ea8de-1e3b-43c0-9472-53a2dcbcdec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk2e6kjbxk24", "content": "", "creation_timestamp": "2025-03-10T20:08:30.066371Z"}, {"uuid": "bc5d27e4-28a3-4e94-8e64-045157ae25a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3lk4qv52j5z2e", "content": "", "creation_timestamp": "2025-03-11T19:01:10.995896Z"}, {"uuid": "21ea9ca1-9f29-441d-afec-74e9300d45f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3lk4qv52j5z2e", "content": "", "creation_timestamp": "2025-03-11T19:01:11.060667Z"}, {"uuid": "2abd1280-0336-4ef7-abba-17ed8714ca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llqvfffeth2v", "content": "", "creation_timestamp": "2025-04-01T12:40:17.154075Z"}, {"uuid": "4809743e-717b-4fa5-b97e-02f059685cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114263019273052265", "content": "", "creation_timestamp": "2025-04-01T13:48:33.201103Z"}, {"uuid": "fb8cd677-cce0-4d16-a709-b36bd1c0e145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13557", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114248301386235895", "content": "", "creation_timestamp": "2025-03-29T23:25:32.039378Z"}, {"uuid": "ca985ecd-5831-4a6f-b63e-41259536bedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13557", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114248301386235895", "content": "", "creation_timestamp": "2025-03-29T23:25:32.035903Z"}, {"uuid": "8d51b0ec-b192-4e3d-89c1-d5f6315b6e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114263019273052265", "content": "", "creation_timestamp": "2025-04-01T13:48:33.199163Z"}, {"uuid": "c352d472-9ff2-4cd4-9ab7-79caadb1ea25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13427", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpv5da4usw42", "content": "", "creation_timestamp": "2025-05-24T02:53:43.471496Z"}, {"uuid": "8e4b21a8-ccc4-4984-8661-a0e6ec024b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13645", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llxsohuaan2a", "content": "", "creation_timestamp": "2025-04-04T06:40:18.666408Z"}, {"uuid": "a2562feb-cbfd-4d09-89c4-ce6c5829869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13744", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114278590468850131", "content": "", "creation_timestamp": "2025-04-04T07:48:27.253456Z"}, {"uuid": "b08625d9-2bd0-4b13-9337-e9421572ee81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13744", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114278590468850131", "content": "", "creation_timestamp": "2025-04-04T07:48:27.258010Z"}, {"uuid": "259387a4-ecc5-4469-9ded-58f9cea14d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13645", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114278590576492916", "content": "", "creation_timestamp": "2025-04-04T07:48:28.836172Z"}, {"uuid": "0229ca8e-7d4f-4587-a51a-10b075671490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13645", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114278590576492916", "content": "", "creation_timestamp": "2025-04-04T07:48:28.865579Z"}, {"uuid": "34c734d0-2a5c-437e-9c31-422b797a02f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxxaky53i2u", "content": "", "creation_timestamp": "2025-04-04T08:02:00.844645Z"}, {"uuid": "d8a90d38-6f8e-497e-8429-97b2d5717ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxxaltg3i2z", "content": "", "creation_timestamp": "2025-04-04T08:02:04.122005Z"}, {"uuid": "941ef1f4-50ba-4a37-9569-5363ff703917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13776", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114284253377794641", "content": "", "creation_timestamp": "2025-04-05T07:48:36.179419Z"}, {"uuid": "193d08f9-5d0c-4e88-b006-992b048a59f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13776", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114284253377794641", "content": "", "creation_timestamp": "2025-04-05T07:48:36.177431Z"}, {"uuid": "04384b67-8716-441a-bd78-bbb93ba2ace4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lm2hyuehkn26", "content": "", "creation_timestamp": "2025-04-05T08:07:15.311694Z"}, {"uuid": "3cf03040-3274-4801-953e-79b5bf0a3d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13126", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13126.yaml", "content": "", "creation_timestamp": "2025-04-05T06:19:48.000000Z"}, {"uuid": "bb0302e4-a45c-48b1-b8aa-86e8b5edfcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13946", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lq433mbfhz2c", "content": "", "creation_timestamp": "2025-05-26T21:02:15.868889Z"}, {"uuid": "9f727c5f-b53f-48d5-850a-9b6274c58825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13917", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfnoqlx5uv2", "content": "", "creation_timestamp": "2025-05-30T16:29:09.329151Z"}, {"uuid": "ed01b78c-4ddb-4b05-87cc-52a4dbc844c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13916", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfnorhcrrh2", "content": "", "creation_timestamp": "2025-05-30T16:29:09.848905Z"}, {"uuid": "abd7f681-48bd-4ff4-b7a8-f5d42d4325c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfnoti27oe2", "content": "", "creation_timestamp": "2025-05-30T16:29:10.452656Z"}, {"uuid": "0d0c1f14-b8e9-4d30-b3d5-1f98d69d1155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "12fe544b-f94a-4855-ba85-23753d0c5c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "d4822748-26d6-407d-aa9c-4b1b12afeca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "6826b46a-2370-46f5-a4c9-2ebd28c85810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmh73tkn3m2i", "content": "", "creation_timestamp": "2025-04-10T09:32:30.056096Z"}, {"uuid": "0d3ca5e2-fee4-43ff-b8cd-828ae6a6e97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmh73todsg2r", "content": "", "creation_timestamp": "2025-04-10T09:32:30.624007Z"}, {"uuid": "35886652-a15a-4d19-bda9-bbc1b0e102b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmh73tucc42g", "content": "", "creation_timestamp": "2025-04-10T09:32:31.201163Z"}, {"uuid": "aea36287-fd8b-4499-b8da-70a91217146f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsxurw2mqp2r", "content": "", "creation_timestamp": "2025-07-02T09:14:22.931615Z"}, {"uuid": "8b5d78f8-5629-468a-a040-9d7855063fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsxv5b5s4l2m", "content": "", "creation_timestamp": "2025-07-02T09:20:43.603856Z"}, {"uuid": "e0eb2bbe-a5e0-48d6-9757-79db62dc9b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqfzsqmajr2q", "content": "", "creation_timestamp": "2025-05-30T20:06:01.101384Z"}, {"uuid": "045142bb-d538-431c-9d1c-a61d31bb3258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13917", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqg23pb4aa2r", "content": "", "creation_timestamp": "2025-05-30T20:11:01.667645Z"}, {"uuid": "d3e54b0e-208f-4e5a-8389-c745ada8240e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13916", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqg2entthj2s", "content": "", "creation_timestamp": "2025-05-30T20:16:01.992943Z"}, {"uuid": "50db5d95-eff8-4274-99cc-b9ea64c1ed9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13861", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114319711347166542", "content": "", "creation_timestamp": "2025-04-11T14:06:01.995933Z"}, {"uuid": "0c0f366f-df81-4909-86eb-1202a3a7988d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13861", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdybtpof2j", "content": "", "creation_timestamp": "2025-04-11T15:37:57.406421Z"}, {"uuid": "163e58e4-02b8-4c4b-86cd-29e2c1bfea76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13967", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqriey7ujhg2", "content": "", "creation_timestamp": "2025-06-04T09:26:49.508770Z"}, {"uuid": "895ad4ec-a835-48fa-8bd8-93232246a4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl33hbbr24", "content": "", "creation_timestamp": "2025-04-14T12:33:25.832592Z"}, {"uuid": "f41d9b78-85e5-41a1-b8d6-5108a0544494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl3457cn2c", "content": "", "creation_timestamp": "2025-04-14T12:33:29.330277Z"}, {"uuid": "8e495aec-94ba-42db-88e8-174142724556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofrv2ux2a", "content": "", "creation_timestamp": "2025-04-15T08:38:24.761490Z"}, {"uuid": "3914df82-5725-4d13-beb8-2a1ebefcea23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13610", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofs6yui2i", "content": "", "creation_timestamp": "2025-04-15T08:38:25.463050Z"}, {"uuid": "9bdbd542-72f0-467c-8143-0f43d6f746e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy24kir27", "content": "", "creation_timestamp": "2025-04-15T21:02:29.500961Z"}, {"uuid": "341e8707-a1df-4a70-b368-903d0327bf25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13478", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy273wu2a", "content": "", "creation_timestamp": "2025-04-15T21:02:30.164425Z"}, {"uuid": "7f9be2fc-1db7-4587-b3e6-6f9da9988b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13479", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy2bmf227", "content": "", "creation_timestamp": "2025-04-15T21:02:30.728731Z"}, {"uuid": "58c606fa-554c-4603-9c42-82a84a0f7de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13481", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy2dxfl2h", "content": "", "creation_timestamp": "2025-04-15T21:02:31.302466Z"}, {"uuid": "6e3108c9-75c4-4d0c-be80-326a4a05a4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13483", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy2g7o32h", "content": "", "creation_timestamp": "2025-04-15T21:02:32.074587Z"}, {"uuid": "8fb833ae-943c-448f-85c2-b0fc2cd4d29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13485", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy2imyk27", "content": "", "creation_timestamp": "2025-04-15T21:02:32.605258Z"}, {"uuid": "565ac1d7-20db-463b-a2d6-6a42452eb8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://thehackernews.com/2025/06/preinstalled-apps-on-ulefone-kruger.html", "content": "", "creation_timestamp": "2025-06-02T13:12:00.000000Z"}, {"uuid": "8387781c-6bec-4f98-a6bb-75744cc523a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmyj7ha6oi2c", "content": "", "creation_timestamp": "2025-04-17T06:48:43.448973Z"}, {"uuid": "b3351278-b0a1-410c-ae9a-eb9282f52e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln2ykvszj22b", "content": "", "creation_timestamp": "2025-04-18T06:28:52.766384Z"}, {"uuid": "a9fd8bde-9d21-46bb-9b9a-aaddae6fd430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "content": "", "creation_timestamp": "2025-06-03T00:00:00.000000Z"}, {"uuid": "5634a7de-18a0-49a5-98b7-8673cce37691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-13059", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114359274731523643", "content": "", "creation_timestamp": "2025-04-18T13:47:31.117413Z"}, {"uuid": "299e8022-a604-43ea-8080-31e30d5f8305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13926", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln5laan57qu2", "content": "", "creation_timestamp": "2025-04-19T07:08:24.314829Z"}, {"uuid": "2311a56a-5415-4c8c-8b59-2add0a30136f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13926", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln5qctml472a", "content": "", "creation_timestamp": "2025-04-19T08:39:12.550849Z"}, {"uuid": "a5843572-1627-4fad-b26a-985d319dfb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ln6cgc3cp225", "content": "", "creation_timestamp": "2025-04-19T14:03:14.929979Z"}, {"uuid": "064c3727-ecaa-4fc5-aa33-f5d5b5ab8efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "content": "", "creation_timestamp": "2025-06-03T00:00:00.000000Z"}, {"uuid": "0f5a3dae-7d03-4102-a5d8-483b881b6307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "3de5e744-a6eb-4118-96ff-e8f2aa822ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "650ee723-4117-43df-8667-e2f539bce851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gmpr7s2a", "content": "", "creation_timestamp": "2025-04-22T07:04:44.563555Z"}, {"uuid": "01123dc7-0595-44dd-8f8f-b000df94aeac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13967", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqro5yntmu2e", "content": "", "creation_timestamp": "2025-06-04T11:09:30.431935Z"}, {"uuid": "dd3c0f3c-8746-44a7-9f95-42da452795f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "ed9ad50f-de52-4ed5-872b-4be2bdcc2067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13967", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114624996410097906", "content": "", "creation_timestamp": "2025-06-04T12:04:02.061203Z"}, {"uuid": "104fdd01-801b-4b95-914b-4f0a9a2442e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "content": "", "creation_timestamp": "2025-05-30T00:00:00.000000Z"}, {"uuid": "8ee57d61-4bea-4591-9af2-7a26cecc6409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lprtj7csk42q", "content": "", "creation_timestamp": "2025-05-22T19:20:06.412681Z"}, {"uuid": "148c7e76-cf15-4898-83ca-cbce96003dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lprtsb4eca22", "content": "", "creation_timestamp": "2025-05-22T19:25:08.448187Z"}, {"uuid": "0e10736b-be41-477d-8576-9c51e8c8fab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-23)", "content": "", "creation_timestamp": "2025-04-23T00:00:00.000000Z"}, {"uuid": "e6a5480b-843b-4047-a777-7448b4834d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lprv4otuvs2k", "content": "", "creation_timestamp": "2025-05-22T19:48:51.150655Z"}, {"uuid": "666afeef-0602-4ae5-b0c3-ff1cec49b7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13307", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvnu6k242s", "content": "", "creation_timestamp": "2025-04-24T14:19:28.463005Z"}, {"uuid": "63735079-0b95-4e99-935c-89247e6bf079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lprvwb76w72q", "content": "", "creation_timestamp": "2025-05-22T20:03:09.337251Z"}, {"uuid": "c6fdea4e-9e89-4ea3-acf0-4bd91ee8de01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13808", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnoxcmccjna2", "content": "", "creation_timestamp": "2025-04-26T04:59:46.457086Z"}, {"uuid": "29242847-daed-49be-8cd5-73dced88fca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13808", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114403160904498626", "content": "", "creation_timestamp": "2025-04-26T07:48:21.273651Z"}, {"uuid": "86b33ae0-1615-4df5-9960-1f66b1e8ff9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13808", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnpcjsy5cb2b", "content": "", "creation_timestamp": "2025-04-26T08:20:28.883425Z"}, {"uuid": "a81e3184-1a77-482a-99ff-d10828799094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13812", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnpftglyf6o2", "content": "", "creation_timestamp": "2025-04-26T09:19:40.267607Z"}, {"uuid": "00bec697-0806-4e3e-ba4a-7283c3d96375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13955", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpryka4zwt2s", "content": "", "creation_timestamp": "2025-05-22T20:50:07.495913Z"}, {"uuid": "46157bcc-1098-405d-9827-ac34e5fefbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13952", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpryt6t5fu2q", "content": "", "creation_timestamp": "2025-05-22T20:55:07.936393Z"}, {"uuid": "86cd4692-cacc-4cde-828c-0e55072b23a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnpn42xtpy24", "content": "", "creation_timestamp": "2025-04-26T11:29:38.435731Z"}, {"uuid": "a5e1844e-b972-4c11-9e21-177e33598a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpemg4fyyu2h", "content": "", "creation_timestamp": "2025-05-17T13:08:27.918963Z"}, {"uuid": "b081dd4e-c18a-40d4-af2d-baa983c9a904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13688", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxieo5u2b", "content": "", "creation_timestamp": "2025-04-28T09:40:54.469442Z"}, {"uuid": "c3aa9d6f-b900-42fc-849c-b0e5bd98afb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13964", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bf5yz2t", "content": "", "creation_timestamp": "2025-05-17T21:07:48.542505Z"}, {"uuid": "1eb0fbf6-9037-43d1-ad56-d2e817acd489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bot3p2e", "content": "", "creation_timestamp": "2025-05-17T21:07:49.275564Z"}, {"uuid": "170e867c-95ca-444d-ba9e-52426dc39a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13943", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxj4zvm2e", "content": "", "creation_timestamp": "2025-04-30T21:55:56.683342Z"}, {"uuid": "40eb455c-edb3-47ff-9178-ed7482a0e8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13943", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-262/", "content": "", "creation_timestamp": "2025-04-30T03:00:00.000000Z"}, {"uuid": "f105f32e-eca0-4ff8-9315-a2144f81735e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13845", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo3msleryd2e", "content": "", "creation_timestamp": "2025-05-01T05:56:20.256474Z"}, {"uuid": "7af27177-1f62-472b-b824-c3bfdbd8c316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13381", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo426b3sm624", "content": "", "creation_timestamp": "2025-05-01T09:55:27.576061Z"}, {"uuid": "f0c6a0f2-d1f1-4f84-aa12-3e14ee3077db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13418", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lo6bacjbbkf2", "content": "", "creation_timestamp": "2025-05-02T07:19:05.407821Z"}, {"uuid": "68698df1-2229-4188-bf4f-d3bc4407fcdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13344", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7okuih2t", "content": "", "creation_timestamp": "2025-05-02T08:00:31.734955Z"}, {"uuid": "5f4db203-7d8c-4df0-92b3-03fc9e7009c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7ow6jg2h", "content": "", "creation_timestamp": "2025-05-02T08:00:33.369443Z"}, {"uuid": "0dd69361-3045-48f8-9e80-226c1da10f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7p54hx2t", "content": "", "creation_timestamp": "2025-05-02T08:00:34.487549Z"}, {"uuid": "ae8ec767-faa6-4d1a-aa88-090988ad4eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13858", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7pqa6g22", "content": "", "creation_timestamp": "2025-05-02T08:00:37.325936Z"}, {"uuid": "c76b6e7b-beb9-40d8-af26-b6e354d2d1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13420", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7ptwoy2e", "content": "", "creation_timestamp": "2025-05-02T08:00:37.900469Z"}, {"uuid": "902c645f-1d6c-4c15-900e-9fb0881ab451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13859", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7q3axo2l", "content": "", "creation_timestamp": "2025-05-02T08:00:39.044504Z"}, {"uuid": "aa6c8bb1-eff3-450d-b8b5-26ae2c14b496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7qfomi2l", "content": "", "creation_timestamp": "2025-05-02T08:00:40.769942Z"}, {"uuid": "f2fe3b5c-1b5c-48af-b148-23bf939e663a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13859", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo6g65d2k5f2", "content": "", "creation_timestamp": "2025-05-02T13:21:01.296834Z"}, {"uuid": "e5ef8202-9f5f-4f86-aceb-5627b145cd67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo6g65osqkk2", "content": "", "creation_timestamp": "2025-05-02T13:21:01.884941Z"}, {"uuid": "845a1149-3aed-42d1-ab3f-6c1bb3ccbc5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13860", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo6g6epu5zk2", "content": "", "creation_timestamp": "2025-05-02T13:21:03.775484Z"}, {"uuid": "ee1a2236-e18d-4c83-a95f-acb1368b73d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13738", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3loadvtqidf2m", "content": "", "creation_timestamp": "2025-05-03T03:00:20.682891Z"}, {"uuid": "5b2ba5a1-e06b-476e-8436-93da50996256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13738", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafeewn5vx2", "content": "", "creation_timestamp": "2025-05-03T03:26:30.387123Z"}, {"uuid": "2a6f167a-8817-4040-88f9-665304714a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13322", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2024-13322.yaml", "content": "", "creation_timestamp": "2025-05-02T13:06:20.000000Z"}, {"uuid": "e5c4f176-6096-4c32-a24c-a4cdda40fa61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "content": "", "creation_timestamp": "2025-06-12T00:00:00.000000Z"}, {"uuid": "2d45bc7e-4228-42da-9cb2-04a4d6a87879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lptjbxlxxn2y", "content": "", "creation_timestamp": "2025-05-23T11:22:22.697933Z"}, {"uuid": "8b8ccdf4-95f2-433d-8115-e1dd066fc682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13322", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lohbcknau42a", "content": "", "creation_timestamp": "2025-05-05T21:02:24.827389Z"}, {"uuid": "6fa9f86d-882f-4762-87c7-f97ed442a6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-05)", "content": "", "creation_timestamp": "2025-05-05T00:00:00.000000Z"}, {"uuid": "04e63097-f5c2-47f0-8a4b-4354807780fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looipib42pd2", "content": "", "creation_timestamp": "2025-05-08T19:43:10.375207Z"}, {"uuid": "ca60e6c7-304c-4a8a-a241-2c520bdd71a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/113", "content": "", "creation_timestamp": "2025-05-09T07:39:10.000000Z"}, {"uuid": "b99de6d9-f9ab-4f1c-9e0d-037bdcf55553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loqgnz63bx2j", "content": "", "creation_timestamp": "2025-05-09T12:32:14.989738Z"}, {"uuid": "92793c78-6ed6-4c84-9cf4-dcc59b59e741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13962", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk26c7eh2", "content": "", "creation_timestamp": "2025-05-09T16:05:00.140800Z"}, {"uuid": "18c35289-eb09-44e4-82f2-311a0100ad46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13960", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk3jvgtg2", "content": "", "creation_timestamp": "2025-05-09T16:05:01.331926Z"}, {"uuid": "8f4b371c-f6d5-463d-b0f6-5b80fe4185bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13961", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk3e5ehc2", "content": "", "creation_timestamp": "2025-05-09T16:05:01.890665Z"}, {"uuid": "faa3663c-545a-48a0-8375-1820994fa643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13959", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk3uoz4c2", "content": "", "creation_timestamp": "2025-05-09T16:05:02.461067Z"}, {"uuid": "2f3a3269-e0c7-4ce0-8b66-762918779e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13944", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk5kkdag2", "content": "", "creation_timestamp": "2025-05-09T16:05:03.074129Z"}, {"uuid": "a8513ac5-4b64-46d3-bcd8-18c4aabfa8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13759", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqskak4qcw2", "content": "", "creation_timestamp": "2025-05-09T16:05:04.401875Z"}, {"uuid": "7baa5d9e-1315-434b-91be-d1a85646cae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13944", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478753232862764", "content": "", "creation_timestamp": "2025-05-09T16:12:29.079555Z"}, {"uuid": "0481276b-ee7b-4e39-8ebb-8a6c0ea5368f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13759", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478753232862764", "content": "", "creation_timestamp": "2025-05-09T16:12:29.169832Z"}, {"uuid": "f2b4786a-4936-40a3-af8f-e4ec6703bb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13959", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478753232862764", "content": "", "creation_timestamp": "2025-05-09T16:12:29.257963Z"}, {"uuid": "a45b8be7-5da6-443c-8c06-de6be68233fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13960", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478753232862764", "content": "", "creation_timestamp": "2025-05-09T16:12:29.341783Z"}, {"uuid": "bd87d090-e2fd-44b7-a16e-3caa369a8a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13961", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478753232862764", "content": "", "creation_timestamp": "2025-05-09T16:12:29.429979Z"}, {"uuid": "7025d266-9bcb-45a3-8479-34e6114c6823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13962", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478753232862764", "content": "", "creation_timestamp": "2025-05-09T16:12:29.516975Z"}, {"uuid": "f0af0930-c200-4870-997b-2102a5eaa1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13964", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478753232862764", "content": "", "creation_timestamp": "2025-05-09T16:12:29.601665Z"}, {"uuid": "214187da-3aa5-46ee-8a3f-3ce29f4c1976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3loqwnir3mc2c", "content": "", "creation_timestamp": "2025-05-09T17:18:22.767923Z"}, {"uuid": "7712af34-f113-41b9-a21c-24f32073c00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13962", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rrctzn2h", "content": "", "creation_timestamp": "2025-05-09T18:32:15.685739Z"}, {"uuid": "8f090a40-6441-40a4-bea1-2a52b9551e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-06)", "content": "", "creation_timestamp": "2025-06-06T00:00:00.000000Z"}, {"uuid": "46ca0ec3-12d5-4c8c-b72a-96b402c64cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13940", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4o2u7gc232", "content": "", "creation_timestamp": "2025-05-14T09:19:31.342475Z"}, {"uuid": "c45b822f-36a1-4bd4-aad1-a13c94213918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrh5rtw2h", "content": "", "creation_timestamp": "2025-05-15T06:57:47.075615Z"}, {"uuid": "fbee709d-73f4-459a-bb75-fca9f4962467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lp7zkwcsss26", "content": "", "creation_timestamp": "2025-05-15T17:20:30.497767Z"}, {"uuid": "ae03da74-5d71-485d-aeb1-21d67ac20b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13357", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lpaf2lnear2f", "content": "", "creation_timestamp": "2025-05-15T20:46:07.588376Z"}, {"uuid": "5fa83e43-307c-4578-bde7-a65430ef24be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "8aaf52b3-6a1d-434f-bb48-d8206d4aa143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13972", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114870125851359984", "content": "", "creation_timestamp": "2025-07-17T19:03:40.792358Z"}, {"uuid": "116d6a10-5b31-4ed5-b59c-11424223a1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13972", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-b4ff51d2-3ebe177d5dcd7fd6", "content": "", "creation_timestamp": "2025-07-18T05:43:48.335739Z"}, {"uuid": "5cc8a040-3b2b-4b14-a28b-f0ea937344d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13175", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luapdr32rp2w", "content": "", "creation_timestamp": "2025-07-18T14:56:08.998524Z"}, {"uuid": "ae5ae641-56dd-48a0-898c-934ea60e3821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lujb6chyau2i", "content": "", "creation_timestamp": "2025-07-22T00:36:30.947203Z"}, {"uuid": "4fedb6b7-c6b6-4b04-9fda-0cba86e4815a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-605c14d2-887a4e63c671f474", "content": "", "creation_timestamp": "2025-07-22T13:48:46.240605Z"}, {"uuid": "c1710b8a-fa4b-4240-825c-f2a7e54d04ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13973", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-605c14d2-887a4e63c671f474", "content": "", "creation_timestamp": "2025-07-22T13:48:46.355974Z"}, {"uuid": "6013d39a-61a9-4347-a6ff-1efdee95ba3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum46iuol22j", "content": "", "creation_timestamp": "2025-07-23T03:45:08.568180Z"}, {"uuid": "41914aba-7c63-43f6-bd56-1e5418859ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13973", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum46iuol22j", "content": "", "creation_timestamp": "2025-07-23T03:45:08.670683Z"}, {"uuid": "f91b6cc3-fd05-44ad-a959-a5b5491d617d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3luopdjr2ac2o", "content": "", "creation_timestamp": "2025-07-24T04:33:21.714124Z"}, {"uuid": "bbdd1ee1-e3bc-4145-864c-4fbc5b6b421a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13973", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3luopdjr2ac2o", "content": "", "creation_timestamp": "2025-07-24T04:33:21.818383Z"}, {"uuid": "83558937-c4e2-4466-a87e-93fad6e53572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "content": "", "creation_timestamp": "2025-09-05T00:00:00.000000Z"}, {"uuid": "2f5999ca-df52-4f58-a136-5f946bf371e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "content": "", "creation_timestamp": "2025-09-05T00:00:00.000000Z"}, {"uuid": "996fecc1-adf6-4258-be1c-711f61d6e12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "content": "", "creation_timestamp": "2025-09-05T00:00:00.000000Z"}, {"uuid": "562d2454-a2a4-4434-876c-9806f8d8fab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luqcxwtddc2d", "content": "", "creation_timestamp": "2025-07-24T19:57:26.030615Z"}, {"uuid": "9741c041-2bc8-4770-9cff-0df02df0646d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13973", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luqcxwtddc2d", "content": "", "creation_timestamp": "2025-07-24T19:57:26.144421Z"}, {"uuid": "5ab85886-38d3-41dc-a635-8234115d7122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3luqjn2mzts2a", "content": "", "creation_timestamp": "2025-07-24T21:56:35.095860Z"}, {"uuid": "de8a8a2c-4be2-4e01-b723-bde60e3c64a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13990", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lzcbnoyrhz2p", "content": "", "creation_timestamp": "2025-09-20T21:02:27.849492Z"}, {"uuid": "bbb1fe99-a96b-4ad7-b929-d2ea8713208c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13979", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3l76gc24727", "content": "", "creation_timestamp": "2025-10-19T21:02:30.427222Z"}, {"uuid": "9c8c0086-a647-4314-acd2-64ab98e8f47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13962", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-698/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "f4d89031-f3bc-4fde-a47d-48b4bcb0da2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13959", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-697/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "dfd5fdad-8b86-4ba2-93e6-46629e700409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13961", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-696/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "5461dadb-32c5-43c1-8689-b846b16346df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13944", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-695/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "ad7f9402-ee59-4419-be79-9b15d558d105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13944", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-693/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "2e3f315c-2005-4638-8878-aedca3e4cdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13960", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-707/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "da7977ee-c5a8-4d85-822a-8349db281cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "b09abc20-7e91-4c29-8d60-8b2b33221b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13569", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "d9e7d514-097d-4936-bfab-ca8c02f70437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "0c4a74c6-38c9-4095-b05d-8f10cba5cdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13178", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5kuvahi5k2n", "content": "", "creation_timestamp": "2025-11-14T04:48:46.128418Z"}, {"uuid": "f6e55724-7352-4766-8d13-686cf85d5b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13983", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5kv5vfpx32n", "content": "", "creation_timestamp": "2025-11-14T04:53:36.357917Z"}, {"uuid": "09a513ff-d76c-4aa6-9294-aeae6914941d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13569", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:36.000000Z"}, {"uuid": "fcaac735-4df2-402c-9492-6e84c6a827c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:39.000000Z"}, {"uuid": "47ccebd6-2791-4269-907c-a22e7a9b3474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13118", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "a7e01f55-5104-463e-a858-68a1fb0e71aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13054", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "cd1fa297-ec7a-4ee6-8395-8e20d9209ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13871", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "e9adb0f7-45dc-4fde-ab7b-9406f5785e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "06854cd9-f69d-44ad-8691-8e551ec63fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13498", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "2c7bbc0f-edfc-44a1-9e61-06e5346870cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13991", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrlhg2o2e", "content": "", "creation_timestamp": "2025-10-16T21:02:37.779992Z"}, {"uuid": "8222a2ea-26fa-4525-b97c-b73723e73dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13090", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-09", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e42fa8d8-549a-4517-98b0-1538f775d56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13089", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-09", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2b390e1b-cd85-479d-90f8-7d8bc71db626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13184", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lzyvtqvnpx2q", "content": "", "creation_timestamp": "2025-09-29T21:02:20.635425Z"}, {"uuid": "d850ddd7-8996-457f-b2e6-9779b18c3a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "0f652d8d-0741-4f0c-ac11-2f725ace37b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeux6e4m24", "content": "", "creation_timestamp": "2025-09-30T01:31:29.240025Z"}, {"uuid": "cecb3e7a-345c-4b90-a58d-c647fd1330cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "f410d182-39dc-45fb-81cb-0414d37e1471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lz4hlgxqhk2f", "content": "", "creation_timestamp": "2025-09-18T13:32:35.716265Z"}, {"uuid": "0cbcb094-9155-475f-a811-7c2c889569d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "43b8c8c0-f9f0-45e8-bee8-bc3626f1574a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13747", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "cba8b5cb-f97c-48db-8b79-3bfea55c8e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "29c47277-3a77-42bf-a209-fc2df647d74e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13611", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "7398d7d5-236a-4b31-b4d4-297109faee65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13833", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "1507163f-a832-4275-9530-36e76757f1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13796", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "fe9bc5b7-4d63-489d-9058-bf2df436b697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13905", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "9b1692c0-b888-4c80-acfc-e34efc3749cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13647", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "8398f5f0-4049-47f9-98a6-4b8a5ffe0e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13907", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "877af5c5-32df-41f7-b066-9cc42d8e7bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13217", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "5fc23f47-2a2f-49cc-912e-b14647ee6c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "b41c90c1-20da-4f5b-875f-ee5af8208a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "aaa4218c-defd-4dd4-9de0-f85a318a7da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "c100bb0f-9b0d-4f51-b002-f5dace5d3c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13984", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-24)", "content": "", "creation_timestamp": "2025-11-24T00:00:00.000000Z"}, {"uuid": "d6efd050-9f3b-481f-a11d-45567d130e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13759", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-897/", "content": "", "creation_timestamp": "2025-09-18T03:00:00.000000Z"}, {"uuid": "55356364-6eeb-4a6e-988d-15f305781abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m326cbeeek25", "content": "", "creation_timestamp": "2025-10-13T02:31:28.725674Z"}, {"uuid": "da32e17c-7ca1-44a0-bcbb-665c2bd6082f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m326cbqdaj24", "content": "", "creation_timestamp": "2025-10-13T02:31:30.883349Z"}, {"uuid": "485bd2b4-b6b1-45d1-91fe-70eb93430203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13992", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4iowrzxqc2a", "content": "", "creation_timestamp": "2025-10-31T14:31:44.280716Z"}, {"uuid": "0b65d9cb-2fd8-4db1-8e9c-61dbe0275135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13455", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "a6116be2-d568-4582-9b6a-40d6d5747ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "0f1aab13-b9eb-45e9-b473-65aab0f093f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "542619b3-6d49-4daf-ace1-3b8d414b284d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "e4aa8013-3ae5-4faf-a1ed-1a7c71ebad53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "4e314add-3cea-4635-9d3b-5e0302cf1f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13644", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "70b3ceac-0c03-456b-aef7-e5602d5c07d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "22b5bf08-e013-498f-accd-427113f30d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "56b37516-3352-49d1-b850-4befff732fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13119", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "3a5acf29-f0cb-4ad2-8e52-034729ea4f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "073581a3-ae7d-4dfb-a371-4cf8348eee3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "5797e1e2-3241-49ca-ab37-e4aadf1a741d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "d882349b-6030-4063-95d0-39b37035b438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "31ce56f3-b282-4126-8c9f-9a60862819aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "39ffeb87-1f05-460a-ba10-e67710cf9a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "5a8b7d0b-522c-4b38-b1bd-db639ec04912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "ddba9055-8440-43e4-9ecd-2086bb7cd310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "4240c02a-de28-4d23-8ee0-c3294439dfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "ab8a37f2-e65d-4e2f-b2be-8835d01926bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13380", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "9a78672a-7e85-4dec-b7a7-f26942ffb390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13087", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-871/", "content": "", "creation_timestamp": "2025-08-26T03:00:00.000000Z"}, {"uuid": "66ded5a2-1510-43ff-a291-bf743c68b99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13982", "type": "seen", "source": "https://gist.github.com/Darkcrai86/56d8be961d3a706dba8c43ad1a936dc5", "content": "", "creation_timestamp": "2025-08-28T06:51:11.000000Z"}, {"uuid": "e41ddf53-ad4a-45c5-80d9-22ec4576cd87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13986", "type": "seen", "source": "https://gist.github.com/Darkcrai86/c4d02346fc3886536abf687ba3a3d820", "content": "", "creation_timestamp": "2025-08-28T17:02:22.000000Z"}, {"uuid": "aa68fd08-508c-4a71-9770-7d583515b3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxjuuyui3d2c", "content": "", "creation_timestamp": "2025-08-29T10:44:48.587104Z"}, {"uuid": "7766a834-f6ab-403a-84fa-541410fa6f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxkjof7hja2m", "content": "", "creation_timestamp": "2025-08-29T16:57:21.179860Z"}, {"uuid": "da3bfb7f-f1b3-4946-9fd6-ee660321292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxkkgooeid2j", "content": "", "creation_timestamp": "2025-08-29T17:10:30.217270Z"}, {"uuid": "ebf0e53d-0653-45bf-8474-9c5cfbc366d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13986", "type": "seen", "source": "https://bsky.app/profile/theyhack.bsky.social/post/3lxkklycmic2q", "content": "", "creation_timestamp": "2025-08-29T17:13:29.185437Z"}, {"uuid": "95e8e87d-834c-46af-ad58-6ed78d959548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13979", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf77dil2b", "content": "", "creation_timestamp": "2025-08-29T21:02:21.945585Z"}, {"uuid": "7721edac-0f90-421d-95b6-8c134444e805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13980", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7bvmg2j", "content": "", "creation_timestamp": "2025-08-29T21:02:22.527949Z"}, {"uuid": "4e580f50-0dd3-4177-901f-30cedb611a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13981", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7elfi2q", "content": "", "creation_timestamp": "2025-08-29T21:02:23.064178Z"}, {"uuid": "e7c6122e-6b78-42d0-ab7d-42c42056fe96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13982", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7hagj2b", "content": "", "creation_timestamp": "2025-08-29T21:02:23.561860Z"}, {"uuid": "a67394cb-1247-4f4a-90bc-81e514f19b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13984", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7jybe2p", "content": "", "creation_timestamp": "2025-08-29T21:02:24.061145Z"}, {"uuid": "0e81badd-c833-45c0-ac6d-29be9f424ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7n22o2j", "content": "", "creation_timestamp": "2025-08-29T21:02:24.643141Z"}, {"uuid": "32099ab6-1c5e-45b8-916d-b32cee1f4f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13978", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lxkxgs4ggk2e", "content": "", "creation_timestamp": "2025-08-29T21:03:12.447671Z"}, {"uuid": "06c0b672-f0e2-45ff-a400-16ced9cb49a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4r6aycl6w2b", "content": "", "creation_timestamp": "2025-11-03T23:27:10.559772Z"}, {"uuid": "3fcb49d3-2d5f-4ff2-8636-0c7cfbcebef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:43.000000Z"}, {"uuid": "89f94cf3-ce42-41d4-88bc-12653666cee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13998", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4rgngpw6p2b", "content": "", "creation_timestamp": "2025-11-04T01:57:18.187510Z"}, {"uuid": "b856c2e9-a21f-434c-8f8a-81acfccac497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyxuw4ji7j2c", "content": "", "creation_timestamp": "2025-09-16T17:47:53.848795Z"}, {"uuid": "651ac8a4-5dc3-4503-9157-7feec1a35f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13527", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "82770d7c-6f11-457d-b01f-314df7827950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13466", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "acf22808-de6f-4cf9-81ef-2555be9c659a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "7caa8e29-5612-4085-befb-4328ce003aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13521", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "610c5702-5e15-40ff-9ea0-52b6e4b01973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13758", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "b2c1751a-ecd1-4bfb-910b-97dc3327533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13694", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "d2230c1c-6f3a-4168-99b3-308153f7e6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13470", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "44070291-8655-4598-88a7-d187ff7282fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13973", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:43.000000Z"}, {"uuid": "7e9e80e2-af62-4e4f-a47a-e373e20d99d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13706", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "e084a694-b788-4ed2-8d31-21537a8eed62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13453", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "b7767b7d-0910-427d-802d-85ef446a19d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13457", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "22ef880e-5cfb-47c0-9d0e-2cab8d244e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13979", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13979.yaml", "content": "", "creation_timestamp": "2025-10-16T06:34:05.000000Z"}, {"uuid": "51e9a8f6-781b-4487-8833-2f09631a43dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13569", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13569.yaml", "content": "", "creation_timestamp": "2026-02-11T16:59:54.000000Z"}, {"uuid": "99e08105-a6df-4f41-91e8-79388324483e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13625", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7rb4b2q", "content": "", "creation_timestamp": "2026-02-11T21:03:05.649835Z"}, {"uuid": "b504bace-7206-4402-8dd4-6ff3d4ab6f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13099", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7ejed2k", "content": "", "creation_timestamp": "2026-02-11T21:03:02.787432Z"}, {"uuid": "6a50b026-2a12-4b81-aace-8c119803aeea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13224", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7h5vl24", "content": "", "creation_timestamp": "2026-02-11T21:03:03.371732Z"}, {"uuid": "b19e7710-72d6-43fe-9fc4-6b04ed7316d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7jmkn2q", "content": "", "creation_timestamp": "2026-02-11T21:03:03.981553Z"}, {"uuid": "e3e9c4a4-4ed3-410c-a5a8-3da8a8e86e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13630", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7wakv2c", "content": "", "creation_timestamp": "2026-02-11T21:03:06.683127Z"}, {"uuid": "47d69bdb-d72a-415f-b9e6-bcdef96f51d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13328", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7mlt427", "content": "", "creation_timestamp": "2026-02-11T21:03:04.516109Z"}, {"uuid": "c7c37e21-951c-43bc-86f8-f130daa013be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13330", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7osym2i", "content": "", "creation_timestamp": "2026-02-11T21:03:05.052885Z"}, {"uuid": "ed80011c-107e-411b-b1c5-a3feec5f8212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13627", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7tqtn2s", "content": "", "creation_timestamp": "2026-02-11T21:03:06.130214Z"}, {"uuid": "ef1fc80a-0535-48bc-a29f-2bfda3d2499f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13331", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13331.yaml", "content": "", "creation_timestamp": "2026-02-06T16:02:04.000000Z"}, {"uuid": "e3a5ca57-5177-48db-aec1-cd9f254c379a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13627", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13627.yaml", "content": "", "creation_timestamp": "2026-02-07T03:34:54.000000Z"}, {"uuid": "db527e5a-7c52-41ce-a362-6f27c9d5d325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13099", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13099.yaml", "content": "", "creation_timestamp": "2026-02-06T16:23:36.000000Z"}, {"uuid": "7abf4822-f586-49f3-a5a1-2c4ddf4a8868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13352", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13352.yaml", "content": "", "creation_timestamp": "2026-02-06T13:30:12.000000Z"}, {"uuid": "aa14b9ca-f0e9-4d51-a3ee-2d89b618b082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13331", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mejue7xjma2q", "content": "", "creation_timestamp": "2026-02-10T21:02:59.043502Z"}, {"uuid": "3af64732-9098-458a-94cc-13d9e3397f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mejue7ukwi2i", "content": "", "creation_timestamp": "2026-02-10T21:02:58.508889Z"}, {"uuid": "56f7e642-95c6-4e85-a548-8c29fb59b570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13352", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mejuea23oq2i", "content": "", "creation_timestamp": "2026-02-10T21:02:59.692175Z"}, {"uuid": "360ef728-2246-4758-88e3-1e48cfddd165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13330", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13330.yaml", "content": "", "creation_timestamp": "2026-02-07T03:20:03.000000Z"}, {"uuid": "d488931b-fa32-48ac-808f-19a7c34d725a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13328", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13328.yaml", "content": "", "creation_timestamp": "2026-02-06T15:57:50.000000Z"}, {"uuid": "92631d0d-d49a-4e2c-8d18-360182d8212d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13492", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13492.yaml", "content": "", "creation_timestamp": "2026-02-06T16:25:47.000000Z"}, {"uuid": "80f0a892-875d-41d6-94b0-198514b7e73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13543", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13543.yaml", "content": "", "creation_timestamp": "2026-02-05T05:52:19.000000Z"}, {"uuid": "5fa53738-dce0-4139-a0a9-546b4ec2ab43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13727", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13727.yaml", "content": "", "creation_timestamp": "2026-02-11T16:17:23.000000Z"}, {"uuid": "382870e1-1764-4c0c-b074-02732ad2d41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13098", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meetgdkwb72j", "content": "", "creation_timestamp": "2026-02-08T21:02:55.728273Z"}, {"uuid": "d35e763e-a3b5-4617-b98d-4369f6541fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13055", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdeeb52k", "content": "", "creation_timestamp": "2026-02-12T21:03:17.996503Z"}, {"uuid": "5a6a1611-c6f8-48a9-93f8-0c8ad1a1c16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13094", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdgwg324", "content": "", "creation_timestamp": "2026-02-12T21:03:18.616809Z"}, {"uuid": "9b795fc6-2d71-4714-8587-6f6b7d1e772b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13097", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdjj4w2v", "content": "", "creation_timestamp": "2026-02-12T21:03:19.211204Z"}, {"uuid": "7ca54915-49be-4851-b597-31fc4542967a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13628", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13628.yaml", "content": "", "creation_timestamp": "2026-02-07T03:41:56.000000Z"}, {"uuid": "8b044e19-aca9-4ed3-9532-a1a8f0a8e7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13114", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdlnfk2j", "content": "", "creation_timestamp": "2026-02-12T21:03:19.854515Z"}, {"uuid": "697b28d9-11af-4ec8-8244-d5a5c2fdf4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13226", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13226.yaml", "content": "", "creation_timestamp": "2026-02-07T03:31:10.000000Z"}, {"uuid": "2b77eff3-252c-4137-8672-181d254e4410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13219", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdo6sc2q", "content": "", "creation_timestamp": "2026-02-12T21:03:20.498588Z"}, {"uuid": "49434c8a-0820-4223-901c-11d4cc7e90d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdqxoz2i", "content": "", "creation_timestamp": "2026-02-12T21:03:21.082182Z"}, {"uuid": "2edb7788-af50-4550-afbf-93d75b003058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13221", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdtea22h", "content": "", "creation_timestamp": "2026-02-12T21:03:21.645383Z"}, {"uuid": "a9ee92b9-cdf4-49ae-b891-9f142488a89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13569", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdvnna2k", "content": "", "creation_timestamp": "2026-02-12T21:03:22.209858Z"}, {"uuid": "d65d9474-b63a-4cb4-bdad-03664fbd9256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13570", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdy55s2q", "content": "", "creation_timestamp": "2026-02-12T21:03:22.796399Z"}, {"uuid": "31292b87-b2b6-4eaa-9849-b23d9b2ad88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13609", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovce2oaj2i", "content": "", "creation_timestamp": "2026-02-12T21:03:23.480020Z"}, {"uuid": "ff50f570-a5af-4760-8dd6-98b3f3cf1d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13619", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovce55yb2s", "content": "", "creation_timestamp": "2026-02-12T21:03:24.111733Z"}, {"uuid": "fb4eabc1-15c5-4fd8-aa0e-e3ec3df5451b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13634", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovce7n2j2q", "content": "", "creation_timestamp": "2026-02-12T21:03:24.755264Z"}, {"uuid": "ea7f714b-2e5d-4eb7-9647-ac72fc87237f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13727", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovceca5b2c", "content": "", "creation_timestamp": "2026-02-12T21:03:25.528967Z"}, {"uuid": "1adf9e5e-b281-4891-b8d1-fe3a0adf0a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13225.yaml", "content": "", "creation_timestamp": "2026-02-06T16:17:57.000000Z"}, {"uuid": "909caa9e-2ca3-4894-beca-d0a1a5c5c296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13222.yaml", "content": "", "creation_timestamp": "2026-02-05T06:12:34.000000Z"}, {"uuid": "9ebef525-c121-4d10-b419-a59fa9e064df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3maejvlprok2h", "content": "", "creation_timestamp": "2025-12-19T20:31:49.512347Z"}, {"uuid": "19516309-b251-4ba8-a164-c4cb3ec0350f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13327", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13327.yaml", "content": "", "creation_timestamp": "2026-02-07T03:18:11.000000Z"}, {"uuid": "1ae52623-ed1e-4d13-a54e-fb00e345faaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13325", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13325.yaml", "content": "", "creation_timestamp": "2026-02-06T15:55:22.000000Z"}, {"uuid": "30b62b4c-bfc8-45f2-904a-eca96183d66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13630", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13630.yaml", "content": "", "creation_timestamp": "2026-02-07T03:40:08.000000Z"}, {"uuid": "84c30fce-b8fe-4e5c-acad-88fab0f2a829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13326.yaml", "content": "", "creation_timestamp": "2026-02-07T03:28:57.000000Z"}, {"uuid": "abbbc3c2-f405-435f-976a-3dd7a6a25e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13625", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13625.yaml", "content": "", "creation_timestamp": "2026-02-06T16:10:26.000000Z"}, {"uuid": "1a3afe37-90a7-42df-baa4-1eb8969f9ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13224", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13224.yaml", "content": "", "creation_timestamp": "2026-02-06T13:33:11.000000Z"}, {"uuid": "3211587f-74a9-44b4-9848-057c875648f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "1c296bc8-55b2-4262-a57f-ea755e4e5811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-02)", "content": "", "creation_timestamp": "2026-03-02T00:00:00.000000Z"}, {"uuid": "0804ab3c-0725-4c61-8747-acf3251d348e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "a7df69c1-25ab-4410-a4ca-a76249271256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "81011415-b89b-4824-a597-53b5a0723713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meccxhhea62q", "content": "", "creation_timestamp": "2026-02-07T21:02:57.389163Z"}, {"uuid": "f0bb58ed-9730-4f6e-bb30-b2aa2e5b3ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13543", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meccxhjyui2s", "content": "", "creation_timestamp": "2026-02-07T21:02:57.893665Z"}, {"uuid": "c47fc46a-d05c-4c45-a328-4c9a458b0b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13098", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13098.yaml", "content": "", "creation_timestamp": "2026-02-07T03:32:52.000000Z"}, {"uuid": "dc9cad64-7fa0-4276-9824-ddb9ac842d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13030", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwkal3ka2m", "content": "", "creation_timestamp": "2026-03-21T21:03:02.926955Z"}, {"uuid": "bda9a07a-6e21-4d63-9a1a-2abeaf8fe83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisa-recently-patched-ivanti-epm-flaw-now-actively-exploited/", "content": "", "creation_timestamp": "2026-03-11T13:32:03.606019Z"}, {"uuid": "a37db3af-261f-40ae-8159-12c694ef745e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisa-recently-patched-ivanti-epm-flaw-now-actively-exploited/", "content": "", "creation_timestamp": "2026-03-11T13:32:23.832774Z"}, {"uuid": "3da4b824-74f7-4984-b47e-58dec6f1404b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisa-recently-patched-ivanti-epm-flaw-now-actively-exploited/", "content": "", "creation_timestamp": "2026-03-11T13:32:41.166868Z"}, {"uuid": "f0bda08a-1cad-4e20-8101-870757d45b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-13030", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7e778c2d-cf27-4c9c-9fe6-fc01102b5431", "content": "", "creation_timestamp": "2026-03-12T10:50:26.115478Z"}, {"uuid": "1804c8cc-52f8-40ea-98f2-4c38c5d9018c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "09108322-4384-4952-a101-ab55154b088e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-13830", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f", "content": "", "creation_timestamp": "2025-02-11T19:05:13.397489Z"}, {"uuid": "29ea8dce-1245-48b4-9f02-a6b3da77db4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-13843", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f", "content": "", "creation_timestamp": "2025-02-11T19:05:13.397489Z"}, {"uuid": "2a1bf37a-fde7-4bed-b49c-38a2bec2e0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-13813", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f", "content": "", "creation_timestamp": "2025-02-11T19:05:13.397489Z"}, {"uuid": "5928a22f-269e-42dd-a465-e4557244f7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-13842", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f", "content": "", "creation_timestamp": "2025-02-11T19:05:13.397489Z"}, {"uuid": "d252000e-fa37-4f46-bfcf-3bee3ed3157e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14", "content": "", "creation_timestamp": "2025-09-11T13:37:23.512990Z"}, {"uuid": "1ae28f55-0d22-4fc0-b9df-0063221589a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "5df91918-13c1-4e8e-a043-1566f97d710b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13337", "type": "seen", "source": "https://gist.github.com/alon710/b98e74709e45ce1d97fc3eef0f77b652", "content": "", "creation_timestamp": "2026-01-24T21:30:46.000000Z"}, {"uuid": "3c7b7116-7851-4d90-a92b-5aca7be3d14d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13337", "type": "seen", "source": "https://gist.github.com/alon710/d914cef57d3f53543037ad495b44bb69", "content": "", "creation_timestamp": "2026-01-24T21:30:47.000000Z"}, {"uuid": "2f97e1aa-af16-41b0-8e10-4015268456dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1461", "content": "", "creation_timestamp": "2025-01-17T04:00:00.000000Z"}, {"uuid": "eb439979-3b10-4306-8a40-195e8420f153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1461", "content": "", "creation_timestamp": "2025-01-17T04:00:00.000000Z"}, {"uuid": "74893d36-57b6-4ec6-85cc-39f790e43d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1461", "content": "", "creation_timestamp": "2025-01-17T04:00:00.000000Z"}, {"uuid": "31812d99-ef0d-4af7-8be8-dfe136f10874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13337", "type": "seen", "source": "https://gist.github.com/alon710/350d54a2bd3192801aa5fae40b7cb39c", "content": "", "creation_timestamp": "2026-01-24T22:42:48.000000Z"}, {"uuid": "b9584cb4-b493-4161-b9bd-3c328e98543a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4cc41933-ece2-4071-9009-4c4a5d42392d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1337", "type": "seen", "source": "https://gist.github.com/alon710/6eca4037be86e75855719d48f741002d", "content": "", "creation_timestamp": "2026-01-24T22:43:35.000000Z"}, {"uuid": "dfc108bd-c198-41a6-9eb4-0f7b93ec89a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/089f1172-37ae-4b7d-8899-b42047c5d7c9", "content": "", "creation_timestamp": "2026-02-02T12:26:08.327099Z"}, {"uuid": "c7d66fbd-5d8f-4b6f-a612-d118c7782ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9526ad2f-417c-40a4-b280-e546d919a306", "content": "", "creation_timestamp": "2026-02-02T12:26:08.532166Z"}, {"uuid": "81b10126-6792-4475-be21-3b19b8beccf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ef07c26-2bba-4910-bef8-1f992fcb9ec3", "content": "", "creation_timestamp": "2026-02-02T12:26:08.429943Z"}, {"uuid": "32870c7c-3a89-4593-8937-d650c967d91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13609", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlfmqer2a", "content": "", "creation_timestamp": "2026-04-03T21:02:35.908087Z"}, {"uuid": "d30b4187-5040-415c-8f92-dbebe6a5ac0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-04)", "content": "", "creation_timestamp": "2026-04-04T00:00:00.000000Z"}, {"uuid": "496cb65e-49e4-4c8a-a849-56f2ccd7d825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1389", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13240", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1389\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Paid Membership Subscriptions \u2013 Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pms_stripe_connect_handle_authorization_return function in all versions up to, and including, 2.11.1. This makes it possible for unauthenticated attackers to change the Stripe payment keys.\n\ud83d\udccf Published: 2024-02-20T18:56:46.095Z\n\ud83d\udccf Modified: 2025-04-24T15:02:56.401Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cd5f5861-5be4-456d-915d-bafb7bff2110?source=cve\n2. https://plugins.trac.wordpress.org/browser/paid-member-subscriptions/trunk/includes/gateways/stripe/admin/functions-admin-connect.php#L11\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3034497%40paid-member-subscriptions%2Ftrunk&old=3031453%40paid-member-subscriptions%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-04-24T15:06:28.000000Z"}, {"uuid": "ab00757c-6eec-40c9-a262-042c0153b6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13487", "type": "seen", "source": "https://t.me/cvedetector/17370", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13487 - \"WooCommerce CURCY Arbitrary Shortcode Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13487 \nPublished : Feb. 6, 2025, 7:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : The The CURCY \u2013 Multi Currency for WooCommerce \u2013 The best free currency exchange plugin \u2013 Run smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution via the get_products_price() function in all versions up to, and including, 2.2.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T10:12:38.000000Z"}, {"uuid": "70a830c1-6829-4f8e-81ac-113a0eb78c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13682", "type": "seen", "source": "https://t.me/cvedetector/19492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13682 - WooCommerce Wallet CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13682 \nPublished : March 4, 2025, 9:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : The Wallet System for WooCommerce \u2013 Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.2. This is due to missing or incorrect nonce validation in class-wallet-user-table.php. This makes it possible for unauthenticated attackers to modify wallet balances via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T12:30:10.000000Z"}, {"uuid": "c60e9b73-ee45-4e4d-a68a-aec1e8c1985f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13724", "type": "seen", "source": "https://t.me/cvedetector/19487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13724 - WooCommerce Wallet Unauthenticated Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13724 \nPublished : March 4, 2025, 9:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : The Wallet System for WooCommerce \u2013 Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to increase their own wallet balance, transfer balances between arbitrary users and initiate transfer requests from other users' wallets. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T12:30:03.000000Z"}, {"uuid": "bed49cea-0850-4c22-9f26-443d3bb69ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13685", "type": "seen", "source": "https://t.me/cvedetector/19469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13685 - WordPress Admin and Site Enhancements (ASE) IP Address Manipulation Vulnerability (Information Disclosure/Authentication Bypass)\", \n  \"Content\": \"CVE ID : CVE-2024-13685 \nPublished : March 4, 2025, 6:15 a.m. | 23\u00a0minutes ago \nDescription : The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T08:18:30.000000Z"}, {"uuid": "7acec609-26ca-4b3d-8cf0-3a16c0cc5a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13418", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13418\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files that can make remote code execution possible. This issue was escalated to Envato over two months from the date of this disclosure and the issue, while partially patched, is still vulnerable.\n\ud83d\udccf Published: 2025-05-02T03:21:20.383Z\n\ud83d\udccf Modified: 2025-05-02T03:21:20.383Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bced4547-3264-43dc-8bb1-89a06f74ccbd?source=cve\n2. https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964", "creation_timestamp": "2025-05-02T04:15:42.000000Z"}, {"uuid": "eca4496b-0d53-4b62-b87f-e079e8a531b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13740", "type": "seen", "source": "https://t.me/cvedetector/18273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13740 - ProfileGrid WordPress Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-13740 \nPublished : Feb. 18, 2025, 3:15 a.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : The ProfileGrid \u2013 User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.4.2 via the pm_messenger_show_messages function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read private conversations of other users. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T06:46:11.000000Z"}, {"uuid": "6892850e-bbaf-4f9b-911b-f8a8f1f6e472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13884", "type": "seen", "source": "https://t.me/cvedetector/20201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13884 - Limit Bio WordPress Stored Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13884 \nPublished : March 13, 2025, 6:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : The Limit Bio WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T08:55:52.000000Z"}, {"uuid": "a46a6f33-1952-4a8c-9ce8-c4de545c7827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13228", "type": "seen", "source": "https://t.me/cvedetector/20044", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13228 - Qubely \u2013 Advanced Gutenberg Blocks WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13228 \nPublished : March 11, 2025, 7:15 a.m. | 46\u00a0minutes ago \nDescription : The Qubely \u2013 Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.13 via the 'qubely_get_content'. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, password-protected, draft, and trashed post data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:15:50.000000Z"}, {"uuid": "2b67708c-b89c-4941-a66e-c2d69029206f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13344", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14435", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13344\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Advance Seat Reservation Management for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'profileId' parameter in all versions up to, and including, 3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-05-02T03:21:18.456Z\n\ud83d\udccf Modified: 2025-05-02T03:21:18.456Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/35acdb85-e463-46b1-aea7-a6d4c3581499?source=cve\n2. https://codecanyon.net/item/advance-seat-reservation-management-for-woocommerce/19984266", "creation_timestamp": "2025-05-02T04:15:49.000000Z"}, {"uuid": "41ac9ece-8513-4875-bd30-f197e1ba3061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13315", "type": "seen", "source": "https://t.me/cvedetector/18277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13315 - Shopwarden WooCommerce Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-13315 \nPublished : Feb. 18, 2025, 6:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : The Shopwarden \u2013 Automated WooCommerce monitoring & testing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.11. This is due to missing or incorrect nonce validation on the save_setting() function. This makes it possible for unauthenticated attackers to update arbitrary options and achieve privilege escalation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:47.000000Z"}, {"uuid": "d6bc85d8-1666-448b-b6df-8cc3ad1fc370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13556", "type": "seen", "source": "https://t.me/cvedetector/18276", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13556 - \"WordPress Affiliate Links PHP Object Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13556 \nPublished : Feb. 18, 2025, 6:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input from an file export. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:45.000000Z"}, {"uuid": "80f44697-0ef8-488a-9981-dd3e48f8d5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13741", "type": "seen", "source": "https://t.me/cvedetector/18268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13741 - ProfileGrid WordPress SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13741 \nPublished : Feb. 18, 2025, 2:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : The ProfileGrid \u2013 User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pm_upload_image function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to download and view images, as well as validating if a non-image file exists, both on local or remote hosts. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T05:05:50.000000Z"}, {"uuid": "3059cf7a-2d20-4274-b1d5-3cebc6d752af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13879", "type": "seen", "source": "https://t.me/cvedetector/18261", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13879 - WordPress Stream Plugin SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13879 \nPublished : Feb. 17, 2025, 4:15 p.m. | 44\u00a0minutes ago \nDescription : The Stream plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.2 due to insufficient validation on the webhook feature. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T19:21:49.000000Z"}, {"uuid": "73a1b4c0-485e-4617-8569-cd925ca0a3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13322", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14433", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13322\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'a_id' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-05-02T03:21:19.226Z\n\ud83d\udccf Modified: 2025-05-02T03:21:19.226Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3bcb60a8-220f-45a4-a9a9-10f64acf470c?source=cve\n2. https://codecanyon.net/item/ads-pro-plugin-multipurpose-wordpress-advertising-manager/10275010", "creation_timestamp": "2025-05-02T04:15:48.000000Z"}, {"uuid": "426a8ece-53f0-447f-aee6-bad154e7f5d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13721", "type": "seen", "source": "https://t.me/cvedetector/16361", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13721 - Plethora Plugins Tabs + Accordions WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13721 \nPublished : Jan. 25, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Plethora Plugins Tabs + Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the anchor parameter in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T07:58:10.000000Z"}, {"uuid": "d45fdefb-1f92-4689-8625-4e990f93362c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13891", "type": "seen", "source": "https://t.me/cvedetector/20198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13891 - \"WordPress Schedule Plugin Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13891 \nPublished : March 13, 2025, 6:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : The Schedule WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T08:55:49.000000Z"}, {"uuid": "3376ad83-f35e-4839-bf19-47c404fa0674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13885", "type": "seen", "source": "https://t.me/cvedetector/20197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13885 - WordPress e-Customers Beta XSS\", \n  \"Content\": \"CVE ID : CVE-2024-13885 \nPublished : March 13, 2025, 6:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T08:55:49.000000Z"}, {"uuid": "796b6306-d947-43dc-b136-9969e79c7593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13054", "type": "seen", "source": "https://t.me/cvedetector/20196", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13054 - GitLab Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13054 \nPublished : March 13, 2025, 6:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. where a denial of service vulnerability could allow an attacker to cause a system reboot under certain conditions. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T08:55:45.000000Z"}, {"uuid": "3f5aa174-aac4-461d-b96a-61f767fbe821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13703", "type": "seen", "source": "https://t.me/cvedetector/20181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13703 - \"vcita WordPress Plugin Unauthorized Data Modification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13703 \nPublished : March 13, 2025, 2:15 a.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : The CRM and Lead Management by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae() function in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enable and disable plugin widgets. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T04:44:57.000000Z"}, {"uuid": "9b851564-6827-4ae6-a741-a783ad966a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13420", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14432", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13420\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable.\n\ud83d\udccf Published: 2025-05-02T03:21:19.589Z\n\ud83d\udccf Modified: 2025-05-02T03:21:19.589Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6d484422-4adf-4370-b228-61496d5ad78a?source=cve\n2. https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964", "creation_timestamp": "2025-05-02T04:15:44.000000Z"}, {"uuid": "7f76b020-8f69-407b-953d-56918fe47af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13833", "type": "seen", "source": "Telegram/RD1Ky5ZRbc32bZBRiSXIpP4UIywIulPEnoUHTEQQcT6lmCwS", "content": "", "creation_timestamp": "2025-03-02T11:46:58.000000Z"}, {"uuid": "7f3e61c4-5716-4961-ae65-375463889540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13887", "type": "seen", "source": "https://t.me/cvedetector/20186", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13887 - WordPress Business Directory Plugin Unauthenticated Image Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13887 \nPublished : March 13, 2025, 4:15 a.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : The Business Directory Plugin \u2013 Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.14 via the 'ajax_listing_submit_image_upload' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to add arbitrary images to listings. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T07:15:17.000000Z"}, {"uuid": "06da237e-fcb6-4000-aa52-cb0404323159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13546", "type": "seen", "source": "Telegram/jytQXdHmFjcmkhuhfbAe3PkV1HS7vhQ4ktCAVUb2pbh24Eac", "content": "", "creation_timestamp": "2025-03-02T11:46:58.000000Z"}, {"uuid": "5d27da73-0fce-45c7-bab1-6870a88b0dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13910", "type": "seen", "source": "Telegram/JFy8u7YN3hg77163PbdM-kZZZ9HJ2N9usaMvjoPxJ5F42U6T", "content": "", "creation_timestamp": "2025-03-02T11:46:58.000000Z"}, {"uuid": "394822da-c77b-486d-8714-a34331e3542e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13697", "type": "seen", "source": "Telegram/XgnI4V8Wnz3lSuKrUbZrFlszjJpI1TBdy26rdGlrarwKVH5h", "content": "", "creation_timestamp": "2025-03-02T11:46:58.000000Z"}, {"uuid": "8b0fb16e-6da1-4748-8b55-1bd75e00ae5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13611", "type": "seen", "source": "Telegram/XuHL3rmpEM9Ue9JaezZN1adZ6zNHmp5jsgRvClbwwU5yU8rw", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "3002dfd4-0c5c-400e-a4ef-7029c3744d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13911", "type": "seen", "source": "Telegram/oRRBSugfJuKPuc76LOtUjhj-VUtS6qCIUUmGq5oY81CUY-xJ", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "0c5977c6-23a5-4123-a351-df64551108fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13640", "type": "seen", "source": "https://t.me/cvedetector/19873", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13640 - WooCommerce Print Invoice & Delivery Notes Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13640 \nPublished : March 8, 2025, 5:15 a.m. | 19\u00a0minutes ago \nDescription : The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/wcdn/invoice directory which can contain invoice files if an email attachment setting is enabled. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T06:49:33.000000Z"}, {"uuid": "66c9a63f-09bf-4a17-b6a5-7871fc5362a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13806", "type": "seen", "source": "Telegram/f93JrHZIl9YtmInEh7SPVgVsBxQ6LLbQlk7fwDA_cT8p31_x", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "3c741af2-bcd4-4d4c-a9a9-359587d52e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13436", "type": "seen", "source": "https://t.me/cvedetector/20033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13436 - Appsero Helper WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13436 \nPublished : March 11, 2025, 4:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The Appsero Helper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'appsero_helper' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T07:35:36.000000Z"}, {"uuid": "8bf3bb1a-d69a-48f8-9502-42c38aeff432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13413", "type": "seen", "source": "https://t.me/cvedetector/20030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13413 - ProductDyno WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13413 \nPublished : March 11, 2025, 5:15 a.m. | 37\u00a0minutes ago \nDescription : The ProductDyno plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018res\u2019 parameter in all versions up to, and including, 1.0.24 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts into pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This vulnerability is potentially a duplicate of CVE-2025-22320. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T07:35:34.000000Z"}, {"uuid": "4048f8c2-4f58-4e22-a54c-6be60342caa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://t.me/cvedetector/19943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13919 - Laravel Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13919 \nPublished : March 10, 2025, 10:15 a.m. | 53\u00a0minutes ago \nDescription : The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T12:20:52.000000Z"}, {"uuid": "42463e7d-c22c-4db2-9f97-5e178ed01a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "fcdd2569-5ade-4bb8-ac9d-207dfb5d52d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "1d810502-e938-4af8-8970-80cf2288098f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "76cd9101-0a4a-4396-abc5-d140f8b73798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "529b068f-0166-4262-a28f-1ff0bc1a60c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "8df56c8b-5be9-4a78-b5eb-baeae46a65b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13615", "type": "seen", "source": "https://t.me/cvedetector/20052", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13615 - Social Snap WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13615 \nPublished : March 11, 2025, 6:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The Social Share Buttons, Social Sharing Icons, Click to Tweet \u2014 Social Media Plugin by Social Snap WordPress plugin through 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:16:02.000000Z"}, {"uuid": "d9fe8698-2b67-4e08-8eb2-18a0426d333c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13580", "type": "seen", "source": "https://t.me/cvedetector/20051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13580 - XV Random Quotes CSRF Vulnerability in WordPress Plugin\", \n  \"Content\": \"CVE ID : CVE-2024-13580 \nPublished : March 11, 2025, 6:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:16:01.000000Z"}, {"uuid": "09899293-6940-413f-8e5e-edf8db4c5457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13574", "type": "seen", "source": "https://t.me/cvedetector/20050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13574 - \"XV Random Quotes WordPress Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13574 \nPublished : March 11, 2025, 6:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:16:01.000000Z"}, {"uuid": "92689f16-3bf6-4500-9490-3a35145ad510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13862", "type": "seen", "source": "https://t.me/cvedetector/20049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13862 - AWS Elementor YouTube Vimeo Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13862 \nPublished : March 11, 2025, 6:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The S3Bubble Media Streaming (AWS|Elementor|YouTube|Vimeo Functionality) WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:15:57.000000Z"}, {"uuid": "1169803e-229f-4784-874e-81741d990b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13836", "type": "seen", "source": "https://t.me/cvedetector/20048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13836 - WordPress Login Control Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13836 \nPublished : March 11, 2025, 6:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:15:56.000000Z"}, {"uuid": "194da837-6a3d-425d-86bd-00b7b1fb3c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13864", "type": "seen", "source": "https://t.me/cvedetector/20046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13864 - \"WordPress Countdown Timer Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13864 \nPublished : March 11, 2025, 6:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The Countdown Timer WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:15:55.000000Z"}, {"uuid": "db0ebad3-66b9-40eb-92f0-2834209c69f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13853", "type": "seen", "source": "https://t.me/cvedetector/20045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13853 - \"WordPress SEO Tools Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13853 \nPublished : March 11, 2025, 6:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T09:15:54.000000Z"}, {"uuid": "f5195678-e6dd-40a1-8f36-7f14f8a2735c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "c569b634-cafb-4392-8e99-edf294efcdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "d66107a0-d646-47b5-a09e-b43bfd190c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://t.me/cvedetector/19944", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13918 - Laravel Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13918 \nPublished : March 10, 2025, 10:15 a.m. | 53\u00a0minutes ago \nDescription : The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T12:20:53.000000Z"}, {"uuid": "aa073d9f-c366-4b2d-806c-3c0d22ec7b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13419", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14438", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13419\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Multiple plugins and/or themes for WordPress using Smart Framework are vulnerable to Stored Cross-Site Scripting due to a missing capability check on the saveOptions() and importThemeOptions() functions in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings which includes custom JavaScript that is enabled site-wide. This issue was escalated to Envato over two months from the date of this disclosure and the issue is still vulnerable.\n\ud83d\udccf Published: 2025-05-02T03:21:17.035Z\n\ud83d\udccf Modified: 2025-05-02T03:21:17.035Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/07729c28-a73a-46f4-853e-116792d612f5?source=cve\n2. https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964", "creation_timestamp": "2025-05-02T04:15:55.000000Z"}, {"uuid": "e360ae61-cc1c-4d06-91a8-fed93a5345d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13655", "type": "seen", "source": "https://t.me/cvedetector/19796", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13655 - \"Flex Mag WordPress Theme Unauthenticated Option Deletion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13655 \nPublished : March 7, 2025, 7:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions up to, and including, 3.5.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:18.000000Z"}, {"uuid": "8ec052b9-10c4-47cc-8710-69ad8fe82ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13906", "type": "seen", "source": "https://t.me/cvedetector/19794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13906 - BestWebSoft Gallery PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13906 \nPublished : March 7, 2025, 8:15 a.m. | 46\u00a0minutes ago \nDescription : The Gallery by BestWebSoft \u2013 Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.7.3 via deserialization of untrusted input in the 'import_gallery_from_csv' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:17.000000Z"}, {"uuid": "22ba42e1-63aa-49b9-888c-72a33ffe3300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13858", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14450", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13858\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018invitee_name\u2019 parameter in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41.\n\ud83d\udccf Published: 2025-05-02T06:41:50.012Z\n\ud83d\udccf Modified: 2025-05-02T06:41:50.012Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5f50e293-aebd-44dd-a692-64dea8f6622f?source=cve\n2. https://www.buddyboss.com/platform/", "creation_timestamp": "2025-05-02T07:16:19.000000Z"}, {"uuid": "4183713c-8828-4eff-a846-d2b434818fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13359", "type": "seen", "source": "https://t.me/cvedetector/19898", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13359 - WooCommerce File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13359 \nPublished : March 8, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the add_product_input_fields_to_order_item_meta() function in all versions up to, and including, 1.12.1. This may make it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Please note that by default the plugin is only vulnerable to a double extension file upload attack, unless an administrators leaves the accepted file extensions field blank which can make .php file uploads possible. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T13:31:02.000000Z"}, {"uuid": "cc9f710d-aa09-494e-aa6b-64f2d36b4d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13649", "type": "seen", "source": "https://t.me/cvedetector/19902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13649 - Elementor Xpro Addons for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13649 \nPublished : March 8, 2025, 12:15 p.m. | 1\u00a0hour, 43\u00a0minutes ago \nDescription : The 140+ Widgets | Xpro Addons For Elementor \u2013 FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.4.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T15:11:19.000000Z"}, {"uuid": "ebbfedc6-5ce1-49d7-9097-25a51134a7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13860", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14449", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13860\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018bbp_topic_title\u2019 parameter in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41.\n\ud83d\udccf Published: 2025-05-02T06:41:50.634Z\n\ud83d\udccf Modified: 2025-05-02T06:41:50.634Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a0ac8a41-553e-473b-82a7-226de17e472d?source=cve\n2. https://www.buddyboss.com/platform/\n3. https://example/social/forums/forum/redteam/", "creation_timestamp": "2025-05-02T07:16:18.000000Z"}, {"uuid": "e3cb1cc1-4abb-4817-9d4a-561960baffc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13844", "type": "seen", "source": "https://t.me/cvedetector/19886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13844 - WordPress Post SMTP SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13844 \nPublished : March 8, 2025, 6:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the \u2018columns\u2019 parameter in all versions up to, and including, 3.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:12.000000Z"}, {"uuid": "b4a14049-6303-40c9-9679-515478a68132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13826", "type": "seen", "source": "https://t.me/cvedetector/19885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13826 - \"WordPress Email Keep CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-13826 \nPublished : March 8, 2025, 6:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : The Email Keep WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:08.000000Z"}, {"uuid": "4780962c-26cf-45ac-b180-8c5e966471dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13675", "type": "seen", "source": "https://t.me/cvedetector/19903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13675 - FunnelKit (WooFunnels) SlingBlocks Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13675 \nPublished : March 8, 2025, 12:15 p.m. | 1\u00a0hour, 43\u00a0minutes ago \nDescription : The SlingBlocks \u2013 Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \"Icon List\" Block in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T15:11:20.000000Z"}, {"uuid": "5745ad80-1810-421d-8766-9d3902386797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13924", "type": "seen", "source": "https://t.me/cvedetector/19899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13924 - FancyWP WordPress Blind Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13924 \nPublished : March 8, 2025, 1:15 p.m. | 44\u00a0minutes ago \nDescription : The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'http_request_host_is_external' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T15:11:16.000000Z"}, {"uuid": "5dfc4e6e-6969-434d-9854-5f3608bd4aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13882", "type": "seen", "source": "https://t.me/cvedetector/19889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13882 - WordPress Aiomatic Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13882 \nPublished : March 8, 2025, 9:15 a.m. | 37\u00a0minutes ago \nDescription : The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_generate_featured_image' function in all versions up to, and including, 2.3.8. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T11:00:23.000000Z"}, {"uuid": "06c43258-43ee-4ad2-8dbe-d965803a89be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://t.me/cvedetector/19888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13816 - Aiomatic WordPress Unauthenticated Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13816 \nPublished : March 8, 2025, 9:15 a.m. | 37\u00a0minutes ago \nDescription : The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete posts, list and delete batches, list assistant uploaded files, delete personas, delete forms, delete templates, and clear logs. The vulnerability was partially patched in version 2.3.5. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T11:00:22.000000Z"}, {"uuid": "6c11b7cc-e8e2-4c28-9c80-5cb63bdf3a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13859", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14448", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13859\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018bp_nouveau_ajax_media_save\u2019 function in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41.\n\ud83d\udccf Published: 2025-05-02T06:41:51.037Z\n\ud83d\udccf Modified: 2025-05-02T06:41:51.037Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d77c8096-40b1-4ac7-881f-6aed98da6752?source=cve\n2. https://www.buddyboss.com/platform/", "creation_timestamp": "2025-05-02T07:16:17.000000Z"}, {"uuid": "265f9d5f-bfa8-4418-817a-fea16617583d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13825", "type": "seen", "source": "https://t.me/cvedetector/19884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13825 - WordPress Email Keep Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13825 \nPublished : March 8, 2025, 6:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : The Email Keep WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:07.000000Z"}, {"uuid": "384ab5fd-463f-48b2-a4d8-c1c3960d5256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13908", "type": "seen", "source": "https://t.me/cvedetector/19881", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13908 - BestWebSoft WordPress SMTP File Upload Vulnerability (Remote Code Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-13908 \nPublished : March 8, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The SMTP by BestWebSoft plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:05.000000Z"}, {"uuid": "7a9eb8be-2ed0-422b-9219-b111d51c0eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13890", "type": "seen", "source": "https://t.me/cvedetector/19879", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13890 - WordPress Allow PHP Execute Plugin PHP Code Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13890 \nPublished : March 8, 2025, 3:15 a.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access and above, to inject PHP code into posts and pages. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T06:49:40.000000Z"}, {"uuid": "c9610a62-7ac6-4328-8a2e-2cb766d460a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13835", "type": "seen", "source": "https://t.me/cvedetector/19878", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13835 - WordPress Post Meta Data Manager Multisite Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13835 \nPublished : March 8, 2025, 3:15 a.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including, 1.4.3. This is due to the plugin not properly verifying the existence of a multisite installation prior to allowing user meta to be added/modified. This makes it possible for authenticated attackers, with Administrator-level access and above, to gain elevated privileges on subsites that would otherwise be inaccessible. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T06:49:39.000000Z"}, {"uuid": "4ecdfd6e-47f1-4e4d-8d42-9b4dc35d5114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13774", "type": "seen", "source": "https://t.me/cvedetector/19877", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13774 - WooCommerce Multi Wishlists Per Customer CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13774 \nPublished : March 8, 2025, 3:15 a.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.7. This is due to missing or incorrect nonce validation on the 'save_to_multiple_wishlist' function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T06:49:35.000000Z"}, {"uuid": "c2af5fa6-e0f5-44d7-a641-c12b5127e07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13895", "type": "seen", "source": "https://t.me/cvedetector/19874", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13895 - WordPress Code Snippets CPT Plugin Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13895 \nPublished : March 8, 2025, 3:15 a.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : The The Code Snippets CPT plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.1.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T06:49:33.000000Z"}, {"uuid": "40ad7f94-b331-49ec-870d-8408cf4ac016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "0dedf652-9c72-4092-8d23-9b304e6ff120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13086", "type": "seen", "source": "https://t.me/cvedetector/19855", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13086 - Asustor Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13086 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.  \n  \nWe have already fixed the vulnerability in the following version:  \nQTS 5.2.0.2851 build 20240808 and later  \nQuTS hero h5.2.0.2851 build 20240808 and later \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:48:13.000000Z"}, {"uuid": "7cd66537-092c-46f5-8e35-63354e9bc28a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "d7f3f87c-0070-41d1-b8dd-1b57c4b3c779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13334", "type": "seen", "source": "https://t.me/cvedetector/15403", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13334 - WordPress Car Demon Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13334 \nPublished : Jan. 15, 2025, 4:15 a.m. | 35\u00a0minutes ago \nDescription : The Car Demon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search_condition' parameter in all versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T05:54:40.000000Z"}, {"uuid": "09f46b75-dc9c-4322-8ad1-2a8d150cf035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "66174203-16e7-46de-b9c4-3a8f45b4a726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13552", "type": "seen", "source": "https://t.me/cvedetector/19805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13552 - SupportCandy WordPress Plugin Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13552 \nPublished : March 7, 2025, 10:15 a.m. | 46\u00a0minutes ago \nDescription : The SupportCandy \u2013 Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.0 via file upload due to missing validation on a user controlled key. This makes it possible for authenticated attackers to download attachments for support tickets that don't belong to them. If an admin enables tickets for guests, this can be exploited by unauthenticated attackers. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:45.000000Z"}, {"uuid": "d71bb47d-2530-40ea-b791-b14eeab674bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13635", "type": "seen", "source": "https://t.me/cvedetector/19804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13635 - \"WordPress VK Blocks Sensitive Information Exposure\"\", \n  \"Content\": \"CVE ID : CVE-2024-13635 \nPublished : March 7, 2025, 10:15 a.m. | 46\u00a0minutes ago \nDescription : The VK Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.94.2.2 via the page content block. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of private posts and pages. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:41.000000Z"}, {"uuid": "9094fd82-52a2-46fc-b933-948132498a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13805", "type": "seen", "source": "https://t.me/cvedetector/19802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13805 - WordPress Advanced File Manager Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13805 \nPublished : March 7, 2025, 10:15 a.m. | 46\u00a0minutes ago \nDescription : The Advanced File Manager \u2014 Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.2.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an Administrator, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:40.000000Z"}, {"uuid": "7af08d6f-c372-4556-a16b-e73ed59b0197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13857", "type": "seen", "source": "https://t.me/cvedetector/19801", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13857 - WordPress WPGet API Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13857 \nPublished : March 7, 2025, 10:15 a.m. | 46\u00a0minutes ago \nDescription : The WPGet API \u2013 Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:39.000000Z"}, {"uuid": "93dec4ba-40c4-4a6e-adc5-d4146dfb97c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13668", "type": "seen", "source": "https://t.me/cvedetector/19800", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13668 - WordPress Activity O Meter Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13668 \nPublished : March 7, 2025, 10:15 a.m. | 46\u00a0minutes ago \nDescription : The WordPress Activity O Meter WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admins. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:38.000000Z"}, {"uuid": "8968443a-1064-402e-aa57-84dab8186163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13320", "type": "seen", "source": "https://t.me/cvedetector/19798", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13320 - WooCommerce Multi Currency - Currency Switcher SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13320 \nPublished : March 7, 2025, 7:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress is vulnerable to SQL Injection via the 'wc_filter_price_meta[where]' parameter in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:20.000000Z"}, {"uuid": "126f9a93-8c5a-4729-a122-0d950d2ff767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13713", "type": "seen", "source": "https://t.me/cvedetector/18649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13713 - WordPress Square For GiveWP SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13713 \nPublished : Feb. 21, 2025, 12:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T15:35:51.000000Z"}, {"uuid": "db26f1f2-49b2-4d44-952f-a4403f78bbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13526", "type": "seen", "source": "https://t.me/cvedetector/19772", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13526 - EventPrime \u2013 WordPress Events Calendar Unauthorized Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13526 \nPublished : March 7, 2025, 2:15 a.m. | 33\u00a0minutes ago \nDescription : The EventPrime \u2013 Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the export_submittion_attendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download list of attendees for any event. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T04:03:54.000000Z"}, {"uuid": "914ad7eb-459a-4039-9040-dd39708b12e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13455", "type": "seen", "source": "https://t.me/cvedetector/18655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13455 - WordPress Igumbi Online Booking Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13455 \nPublished : Feb. 21, 2025, 12:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : The igumbi Online Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'igumbi_calendar' shortcode in all versions up to, and including, 1.40 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T15:35:58.000000Z"}, {"uuid": "3afcaf03-3f2c-4650-8ef5-9485ae2d77f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13605", "type": "seen", "source": "https://t.me/cvedetector/18781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13605 - 10Web Form Maker Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13605 \nPublished : Feb. 24, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Form Maker by 10Web  WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T07:55:30.000000Z"}, {"uuid": "0f77068d-1680-4d97-8485-bc5c73ec8fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13822", "type": "seen", "source": "https://t.me/cvedetector/18780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13822 - WordPress Photo Contest Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13822 \nPublished : Feb. 24, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Photo Contest  | Competition | Video Contest WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T07:55:30.000000Z"}, {"uuid": "da4bea12-b55b-41d8-a33c-29dfe26cd97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13445", "type": "seen", "source": "https://t.me/cvedetector/18518", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13445 - Elementor Website Builder Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13445 \nPublished : Feb. 20, 2025, 5:15 a.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : The Elementor Website Builder \u2013 More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the border, margin and gap parameters in all versions up to, and including, 3.27.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T08:07:58.000000Z"}, {"uuid": "310637c3-2685-46d4-b8b0-11810f2fac27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13728", "type": "seen", "source": "Telegram/KNbjqZHHZ5qH6bG8X7Tp7RHysYt-M8VATVrrpTtkmiYVdvdA", "content": "", "creation_timestamp": "2025-02-23T17:38:05.000000Z"}, {"uuid": "96fb440e-d0c7-4694-bfad-bddb17de20db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13873", "type": "seen", "source": "https://t.me/cvedetector/18703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13873 - \"WP Job Portal Insecure Direct Object Reference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13873 \nPublished : Feb. 22, 2025, 4:15 a.m. | 40\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.8 via the deleteUserPhoto() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to remove profile photos from users accounts. Please note that this does not officially delete the file. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T06:38:30.000000Z"}, {"uuid": "8437f358-4928-45eb-89c8-4df332b5cc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13564", "type": "seen", "source": "https://t.me/cvedetector/18714", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13564 - Rife Elementor Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13564 \nPublished : Feb. 22, 2025, 9:15 a.m. | 2\u00a0hours ago \nDescription : The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Writing Effect Headline shortcode in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T12:29:08.000000Z"}, {"uuid": "8fe6d617-4a2f-4458-bef7-6d87ac73c8de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13883", "type": "seen", "source": "https://t.me/cvedetector/18623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13883 - WordPress WPUpper Share Buttons CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13883 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The WPUpper Share Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.51. This is due to missing or incorrect nonce validation on the 'save_custom_css_request' function. This makes it possible for unauthenticated attackers to inject custom CSS to modify a site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:40.000000Z"}, {"uuid": "f0e3c43d-8cdd-4efc-b474-f42e09429f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13728", "type": "seen", "source": "https://t.me/cvedetector/18739", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13728 - WordPress Accept Donations with PayPal & Stripe Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13728 \nPublished : Feb. 23, 2025, 6:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the rf parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-23T09:22:05.000000Z"}, {"uuid": "4041f3ac-1b23-4a71-ad41-d9439dcd0378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13295", "type": "seen", "source": "https://t.me/cvedetector/14935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13295 - Drupal Node Export Unvalidated Object Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13295 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X-* before 7.X-3.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:12.000000Z"}, {"uuid": "1ea8a2bd-ee0d-4856-8749-f547cffb018f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13869", "type": "seen", "source": "https://t.me/cvedetector/18720", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13869 - NGINX WPvivid Backup & Migration Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13869 \nPublished : Feb. 22, 2025, 1:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Migration, Backup, Staging \u2013 WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. NOTE: Uploaded files are only accessible on WordPress instances running on the NGINX web server as the existing .htaccess within the target file upload folder prevents access on Apache servers. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T16:39:53.000000Z"}, {"uuid": "f05c9d29-e08a-44ff-bb18-c408773d744a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13798", "type": "seen", "source": "https://t.me/cvedetector/18710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13798 - ComboBlocks Unauthorized Order Creation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13798 \nPublished : Feb. 22, 2025, 5:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The Post Grid and Gutenberg Blocks \u2013 ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5. This is due to insufficient verification on form fields. This makes it possible for unauthenticated attackers to create new orders for products and mark them as paid without actually completing a payment. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T08:18:44.000000Z"}, {"uuid": "34c6cdcc-034f-4adb-b0e8-b8ac2f90d4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13474", "type": "seen", "source": "https://t.me/cvedetector/18708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13474 - Purolator LTL Freight Quotes WordPress Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13474 \nPublished : Feb. 22, 2025, 5:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 2.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T08:18:42.000000Z"}, {"uuid": "44579067-1dad-4e66-90ac-1ed427405e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13899", "type": "seen", "source": "https://t.me/cvedetector/18704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13899 - WordPress Mambo Importer PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13899 \nPublished : Feb. 22, 2025, 4:15 a.m. | 40\u00a0minutes ago \nDescription : The Mambo Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0 via deserialization of untrusted input via the $data parameter in the fImportMenu function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T06:38:31.000000Z"}, {"uuid": "c93e4728-e5b3-4881-a270-22245253398d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13572", "type": "seen", "source": "https://t.me/cvedetector/16273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13572 - WordPress Precious Metals Charts and Widgets Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13572 \nPublished : Jan. 24, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : The Precious Metals Charts and Widgets for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nfusion-widget' shortcode in all versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T12:44:08.000000Z"}, {"uuid": "98b179d4-9279-4072-9f78-3c38d7623d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13186", "type": "seen", "source": "https://t.me/cvedetector/14672", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13186 - Apache MinigameCenter Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-13186 \nPublished : Jan. 8, 2025, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The MinigameCenter  module has insufficient restrictions on loading URLs, which may lead to some information leakage. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T10:47:48.000000Z"}, {"uuid": "f7095213-8331-404b-9092-385016e0a6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13900", "type": "seen", "source": "https://t.me/cvedetector/18651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13900 - WordPress Head, Footer and Post Injections PHP Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13900 \nPublished : Feb. 21, 2025, 12:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject PHP Code in multisite environments. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T15:35:52.000000Z"}, {"uuid": "715a8426-d478-42d6-a566-72e38bcf5f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13846", "type": "seen", "source": "https://t.me/cvedetector/18650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13846 - Indeed Ultimate Learning Pro WordPress Time-Based SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13846 \nPublished : Feb. 21, 2025, 12:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018post_id\u2019 parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T15:35:51.000000Z"}, {"uuid": "08b5d09d-e7b3-4a8b-a299-5c9b869d967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13461", "type": "seen", "source": "https://t.me/cvedetector/18645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13461 - Autoship Cloud for WooCommerce Subscription Products Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13461 \nPublished : Feb. 21, 2025, 10:15 a.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T13:55:33.000000Z"}, {"uuid": "7170e562-5bd6-401a-b71d-ab49c69ce283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13648", "type": "seen", "source": "https://t.me/cvedetector/18646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13648 - \"Maps for WP Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13648 \nPublished : Feb. 21, 2025, 10:15 a.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The Maps for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MapOnePoint' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T13:55:34.000000Z"}, {"uuid": "eb7f5f54-1725-4d46-a7c3-2fc013949643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13353", "type": "seen", "source": "https://t.me/cvedetector/18644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13353 - \"Responsive Addons for Elementor \u2013 Local File Inclusion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13353 \nPublished : Feb. 21, 2025, 10:15 a.m. | 2\u00a0hours ago \nDescription : The Responsive Addons for Elementor \u2013 Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.4 via several widgets. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T13:55:29.000000Z"}, {"uuid": "41967857-a43a-4388-98ad-3a11d30b8ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13185", "type": "seen", "source": "https://t.me/cvedetector/14671", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13185 - Apache MinigameCenter Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-13185 \nPublished : Jan. 8, 2025, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The MinigameCenter  module has insufficient restrictions on loading URLs, which may lead to some information leakage. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T10:47:47.000000Z"}, {"uuid": "32ac5ceb-5e2c-4c1f-a505-28753aa2b271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13818", "type": "seen", "source": "https://t.me/cvedetector/18632", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13818 - WordPress Registration Forms Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13818 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The Registration Forms \u2013 User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3.9 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:49.000000Z"}, {"uuid": "fb2e2917-de1e-4498-ae6d-1c9cde13a136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13585", "type": "seen", "source": "https://t.me/cvedetector/18635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13585 - Ajax Search Lite WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13585 \nPublished : Feb. 21, 2025, 6:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Ajax Search Lite  WordPress plugin before 4.12.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T09:44:58.000000Z"}, {"uuid": "f4945e7b-7f95-4f4a-8b8c-2b40105066b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13314", "type": "seen", "source": "https://t.me/cvedetector/18634", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13314 - WP Carousel Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13314 \nPublished : Feb. 21, 2025, 6:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Carousel, Slider, Gallery by WP Carousel  WordPress plugin before 2.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T09:44:58.000000Z"}, {"uuid": "d0a49170-9bee-483f-a461-0dbba4d69b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13235", "type": "seen", "source": "https://t.me/cvedetector/18626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13235 - Pinpoint Booking System WordPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13235 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The Pinpoint Booking System \u2013 #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'language' parameter in all versions up to, and including, 2.9.9.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:42.000000Z"}, {"uuid": "eac28ef8-07eb-4235-afed-4bfa3f722198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13751", "type": "seen", "source": "https://t.me/cvedetector/18631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13751 - WordPress 3D Photo Gallery Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13751 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The 3D Photo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'des[]' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:48.000000Z"}, {"uuid": "12e336fa-c884-4b7e-9e67-d74d40a062ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13672", "type": "seen", "source": "https://t.me/cvedetector/18630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13672 - WordPress Mini Course Generator Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13672 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mcg' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:48.000000Z"}, {"uuid": "3b89d784-c30a-440d-92bf-12d7d12b7ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13537", "type": "seen", "source": "https://t.me/cvedetector/18629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13537 - WordPress C9 Blocks Full Path Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-13537 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The C9 Blocks plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.7.7. This is due the plugin containing a publicly accessible composer-setup.php file with error display enabled. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:47.000000Z"}, {"uuid": "8769f7ec-7eb3-4b3e-8451-2e106dd7df4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13388", "type": "seen", "source": "https://t.me/cvedetector/18628", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13388 - WordPress TCBD Tooltip Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13388 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The TCBD Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbdtooltip_text' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:46.000000Z"}, {"uuid": "b3e77670-c04e-4e16-9cd3-ac4c0aad0ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13379", "type": "seen", "source": "https://t.me/cvedetector/18627", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13379 - WordPress C9 Admin Dashboard Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13379 \nPublished : Feb. 21, 2025, 4:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The C9 Admin Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T07:14:43.000000Z"}, {"uuid": "19564e44-31dd-4960-bcc4-9ba9c55a5a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13799", "type": "seen", "source": "https://t.me/cvedetector/18409", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13799 - WordPress User Private Files Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13799 \nPublished : Feb. 19, 2025, 6:15 a.m. | 2\u00a0hours ago \nDescription : The User Private Files \u2013 File Upload & Download Manager with Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018new-fldr-name\u2019 parameter in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T09:32:37.000000Z"}, {"uuid": "64cb2e86-7766-4464-8596-251e806917e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13684", "type": "seen", "source": "https://t.me/cvedetector/18283", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13684 - WordPress Reset Plugin Cross-Site Request Forgery (CSRF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13684 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Reset plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce validation on the reset_db_page() function. This makes it possible for unauthenticated attackers to reset several tables in the database like comments, themes, plugins, and more via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:52.000000Z"}, {"uuid": "2f825428-7b3e-42ae-a612-d421f2182529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13888", "type": "seen", "source": "https://t.me/cvedetector/18533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13888 - WordPress WPMobile.App Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13888 \nPublished : Feb. 20, 2025, 9:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:09:08.000000Z"}, {"uuid": "b40617d3-2e32-4f2f-8323-82d4f9439c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13173", "type": "seen", "source": "https://t.me/cvedetector/14670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13173 - HP Health Module URL Loading Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-13173 \nPublished : Jan. 8, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : The health module has insufficient restrictions on loading URLs, which may lead to some information leakage. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:57:43.000000Z"}, {"uuid": "12a7d522-1c58-4dd3-8220-7385c3e354c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13723", "type": "seen", "source": "https://t.me/cvedetector/17245", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13723 - Checkmk NagVis Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13723 \nPublished : Feb. 4, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The \"NagVis\" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T00:45:46.000000Z"}, {"uuid": "79704d22-546b-4df0-98cf-c11da87ea747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13722", "type": "seen", "source": "https://t.me/cvedetector/17244", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13722 - NagVis Checkmk Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13722 \nPublished : Feb. 4, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The \"NagVis\" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once clicked. The attack can be performed on both authenticated and unauthenticated users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T00:45:45.000000Z"}, {"uuid": "f6434cc8-a796-4ae5-9d43-d44050a096fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13712", "type": "seen", "source": "https://t.me/cvedetector/18428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13712 - WordPress Pollin SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13712 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Pollin plugin for WordPress is vulnerable to SQL Injection via the 'question' parameter in all versions up to, and including, 1.01.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:16.000000Z"}, {"uuid": "701c66ef-b6a8-4668-a91c-42da7a17657f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13711", "type": "seen", "source": "https://t.me/cvedetector/18427", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13711 - WordPress Pollin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13711 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Pollin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'question' parameter in all versions up to, and including, 1.01.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:12.000000Z"}, {"uuid": "a16325d9-d623-4e54-8002-2c7689a8412d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13476", "type": "seen", "source": "https://t.me/cvedetector/18532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13476 - GlobalTranz WordPress LTL Freight Quotes SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13476 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtz_wd_save_dropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:09:07.000000Z"}, {"uuid": "b5a74135-e736-4d62-8f9d-2673922c3950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13792", "type": "seen", "source": "https://t.me/cvedetector/18531", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13792 - WooCommerce Food - Restaurant Menu & Food Ordering Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13792 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:09:06.000000Z"}, {"uuid": "0daa3e6a-745e-4a5c-8b42-57f1b4011000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13789", "type": "seen", "source": "https://t.me/cvedetector/18530", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13789 - WordPress Ravpage Plugin PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13789 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The ravpage plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.31 via deserialization of untrusted input from the 'paramsv2' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:09:06.000000Z"}, {"uuid": "e6207b54-61f7-40b9-a300-6fbcca4943fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13753", "type": "seen", "source": "https://t.me/cvedetector/18529", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13753 - WordPress Ultimate Classified Listings CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13753 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Ultimate Classified Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the update_profile function. This makes it possible for unauthenticated attackers to modify victim's email via a forged request, which might lead to account takeover, granted they can trick a user into performing an action such as clicking on a link. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:09:02.000000Z"}, {"uuid": "9a9fc314-345f-46b6-8cc3-f6dae009afb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13748", "type": "seen", "source": "https://t.me/cvedetector/18528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13748 - WordPress Ultimate Classified Listings Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13748 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title parameter in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:09:01.000000Z"}, {"uuid": "50316b4a-070a-4615-b4b3-17e920e34ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13520", "type": "seen", "source": "https://t.me/cvedetector/18527", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13520 - WooCommerce Gift Cards Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13520 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'update_voucher_price', 'update_voucher_date', 'update_voucher_note' functions in all versions up to, and including, 4.4.6. This makes it possible for unauthenticated attackers to update the value, expiration date, and user note for any gift voucher. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:09:00.000000Z"}, {"uuid": "399fb246-6211-4881-b37c-acca57f48b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13855", "type": "seen", "source": "https://t.me/cvedetector/18524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13855 - Elementor Prime Addons for WordPress Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-13855 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the pae_global_block shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract information from posts that are not public, including drafts, private, password protected, and restricted posts. This applies to posts created with Elementor only. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:08:55.000000Z"}, {"uuid": "c0659189-40dd-4f68-baf4-991adb1d5676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13849", "type": "seen", "source": "https://t.me/cvedetector/18523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13849 - WordPress Cookie Notice Bar Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13849 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Cookie Notice Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:08:54.000000Z"}, {"uuid": "0af6966c-6b43-4714-ab9d-8785d7cc70be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13802", "type": "seen", "source": "https://t.me/cvedetector/18522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13802 - Bandsintown Events Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13802 \nPublished : Feb. 20, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintown_events' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T13:08:53.000000Z"}, {"uuid": "1f26bdef-c940-410a-b656-a8c4d59dc985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13155", "type": "seen", "source": "https://t.me/cvedetector/18519", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13155 - Elementor Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13155 \nPublished : Feb. 20, 2025, 8:15 a.m. | 53\u00a0minutes ago \nDescription : The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: Since the widget code isn't part of the code base, to apply the patch, the affected widget: Transparent Split Hero must be deleted and reinstalled manually. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T10:38:19.000000Z"}, {"uuid": "d40eda04-06fb-47d7-95ae-e736ed0f0b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13588", "type": "seen", "source": "https://t.me/cvedetector/18290", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13588 - Simplebooklet WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13588 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Simplebooklet PDF Viewer and Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'simplebooklet' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:17:04.000000Z"}, {"uuid": "a7f93900-9aa4-416e-97cf-794f3a66b038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13587", "type": "seen", "source": "https://t.me/cvedetector/18289", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13587 - Zigaform WordPress Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13587 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Zigaform \u2013 Price Calculator & Cost Estimation Form Builder Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zgfm_fvar' shortcode in all versions up to, and including, 7.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:17:03.000000Z"}, {"uuid": "655c4603-8723-4d44-9c87-a49fe443500d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13622", "type": "seen", "source": "https://t.me/cvedetector/18288", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13622 - WooCommerce File Uploads Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13622 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The File Uploads Addon for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file attachments uploaded by customers. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:17:00.000000Z"}, {"uuid": "261a69ea-65ba-4d7b-99ce-f59af274decb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13609", "type": "seen", "source": "https://t.me/cvedetector/18287", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13609 - WordPress 1-Click Migration Plugin Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13609 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The 1 Click WordPress Migration Plugin \u2013 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data including usernames and their respective password hashes during a short window of time in which the backup is in process. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:59.000000Z"}, {"uuid": "248ccc6b-09dd-43df-83d8-c5954908bc02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13458", "type": "seen", "source": "https://t.me/cvedetector/16367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13458 - WordPress SEO Friendly Accordion FAQ Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13458 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The WordPress SEO Friendly Accordion FAQ with AI assisted content generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'noticefaq' shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:41.000000Z"}, {"uuid": "7245efa7-4024-4b67-898b-3e1a818d4ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13441", "type": "seen", "source": "https://t.me/cvedetector/16366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13441 - WordPress Bilingual Linker Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13441 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Bilingual Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bl_otherlang_link_1 parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:40.000000Z"}, {"uuid": "ebc5b050-7177-4097-9e85-a52d4e7661c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13743", "type": "seen", "source": "https://t.me/cvedetector/18392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13743 - WordPress Wonder Video Embed Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13743 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : The Wonder Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wonderplugin_video shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:11.000000Z"}, {"uuid": "f190a55f-186e-4943-a6bd-674b664593bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13395", "type": "seen", "source": "https://t.me/cvedetector/18296", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13395 - WordPress Threepress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13395 \nPublished : Feb. 18, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The Threepress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'threepress' shortcode in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:30.000000Z"}, {"uuid": "07a427bf-f402-449b-8910-ab937f2a0e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13363", "type": "seen", "source": "https://t.me/cvedetector/18421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13363 - WordPress Raptive Ads Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13363 \nPublished : Feb. 19, 2025, 9:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The Raptive Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'poc' parameter in all versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:05.000000Z"}, {"uuid": "07c1b962-f791-49f3-b954-ae42ead16e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13599", "type": "seen", "source": "https://t.me/cvedetector/16365", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13599 - EDU WordPress LearnPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13599 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.2.7.5 due to insufficient input sanitization and output escaping of a lesson name. This makes it possible for authenticated attackers, with LP Instructor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:39.000000Z"}, {"uuid": "0582cd18-95c2-4fd8-8823-c62f4176aa95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13443", "type": "seen", "source": "https://t.me/cvedetector/18405", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13443 - Easypromos Plugin WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13443 \nPublished : Feb. 19, 2025, 4:15 a.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The Easypromos Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Easypromos shortcode in all versions up to, and including, 1.3.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T07:52:23.000000Z"}, {"uuid": "697c2947-d036-4079-a923-7bbe80deadd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13808", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13565", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13808\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.\n\ud83d\udccf Published: 2025-04-26T04:22:36.503Z\n\ud83d\udccf Modified: 2025-04-26T04:22:36.503Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0833e55f-22aa-44c9-aff6-1f3b74016e4c?source=cve\n2. https://elementor.wpxpro.com", "creation_timestamp": "2025-04-26T05:08:31.000000Z"}, {"uuid": "238e8f3f-6f36-464e-9dfd-6753c43e29df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13489", "type": "seen", "source": "https://t.me/cvedetector/18434", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13489 - Old Dominion WordPress LTL Freight Quotes Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13489 \nPublished : Feb. 19, 2025, 10:15 a.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T13:43:40.000000Z"}, {"uuid": "79e02136-ebea-475a-bb2d-695f97bf1f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13660", "type": "seen", "source": "https://t.me/cvedetector/18432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13660 - Flickr Slideshow for WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13660 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Responsive Flickr Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fshow' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:19.000000Z"}, {"uuid": "79b63dcf-82e3-4eb9-a3f9-8abaddbc781f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13679", "type": "seen", "source": "https://t.me/cvedetector/18431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13679 - WordPress Widget BUY.BOX Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13679 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Widget BUY.BOX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buybox-widget' shortcode in all versions up to, and including, 3.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:18.000000Z"}, {"uuid": "f147e834-a74f-449e-837d-e20d2e9073c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13854", "type": "seen", "source": "https://t.me/cvedetector/18426", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13854 - Elementor Education Addon WordPress Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-13854 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.1 via the naedu_elementor_template shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract information from posts that are not public, including drafts, password protected, and restricted posts. This applies to posts created with Elementor only. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:12.000000Z"}, {"uuid": "1dde563d-7271-4c38-884b-43c0c2445aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13736", "type": "seen", "source": "https://t.me/cvedetector/18425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13736 - Pure Chat WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13736 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Pure Chat \u2013 Live Chat & More! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018purechatWidgetName\u2019 parameter in all versions up to, and including, 2.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:11.000000Z"}, {"uuid": "111ada97-b93e-4e24-8f52-dc378f81b836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13231", "type": "seen", "source": "https://t.me/cvedetector/18423", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13231 - WordPress Portfolio Builder - Portfolio Gallery Unauthenticated Video Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13231 \nPublished : Feb. 19, 2025, 9:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The WordPress Portfolio Builder \u2013 Portfolio Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'add_video' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to add arbitrary videos to any portfolio gallery. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:10.000000Z"}, {"uuid": "57dbf442-1711-4d63-920d-ae439ca7bf04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13364", "type": "seen", "source": "https://t.me/cvedetector/18422", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13364 - Raptive Ads Plugin WordPress Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13364 \nPublished : Feb. 19, 2025, 9:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the site_ads_files_reset() and cls_file_reset() functions in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to reset the ad and cls files. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:06.000000Z"}, {"uuid": "74d607c1-9d7b-4e8c-bfe6-5ff1e1290d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13478", "type": "seen", "source": "https://t.me/cvedetector/18444", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13478 - TForce Edition WordPress LTL Freight Quotes Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13478 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:12.000000Z"}, {"uuid": "919a58e6-7e5c-4421-81ef-7bead6c46632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13479", "type": "seen", "source": "https://t.me/cvedetector/18443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13479 - LTL Freight Quotes - SEFL Edition WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13479 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.2.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:11.000000Z"}, {"uuid": "7f1a11a7-2a39-47de-a4e2-a868a9d9c231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13483", "type": "seen", "source": "https://t.me/cvedetector/18442", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13483 - SAIA LTL Freight Quotes WordPress Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13483 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:10.000000Z"}, {"uuid": "9df152b3-efb5-4bab-8f10-e66d3727027c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13481", "type": "seen", "source": "https://t.me/cvedetector/18441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13481 - R+L Carriers WordPress Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13481 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:09.000000Z"}, {"uuid": "6cb09087-8247-462d-bbb8-d4dd92a5b7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13534", "type": "seen", "source": "https://t.me/cvedetector/18438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13534 - WordPress Small Package Quotes - Worldwide Express Edition SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13534 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The Small Package Quotes \u2013 Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 5.2.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:04.000000Z"}, {"uuid": "b8c56826-5ab9-4eed-ade5-52fd06bfe041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13533", "type": "seen", "source": "https://t.me/cvedetector/18437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13533 - USPS Small Package Quotes for WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13533 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The Small Package Quotes \u2013 USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:03.000000Z"}, {"uuid": "06484085-edf6-4208-b5b7-d085c6e00070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13491", "type": "seen", "source": "https://t.me/cvedetector/18436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13491 - FedEx WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13491 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The Small Package Quotes \u2013 For Customers of FedEx plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:02.000000Z"}, {"uuid": "f053e20b-14a5-46cd-9f35-21ad2a804ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13485", "type": "seen", "source": "https://t.me/cvedetector/18435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13485 - ABF Freight Quotes \u2013 WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13485 \nPublished : Feb. 19, 2025, 12:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T16:14:01.000000Z"}, {"uuid": "27935b17-e3bf-4bd9-b83e-084637bcc076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13676", "type": "seen", "source": "https://t.me/cvedetector/18430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13676 - WordPress Categorized Gallery Plugin SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13676 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The Categorized Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' attribute of the 'image_gallery' shortcode in all versions up to, and including, 2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:18.000000Z"}, {"uuid": "0995cdfa-5f7e-4410-b88f-5bc9f1cf1b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13719", "type": "seen", "source": "https://t.me/cvedetector/18429", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13719 - PeproDev Ultimate Invoice WordPress Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-13719 \nPublished : Feb. 19, 2025, 8:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The PeproDev Ultimate Invoice plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.8 via the invoicing viewer due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view invoices for completed orders which can contain PII of users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:17.000000Z"}, {"uuid": "88751326-89c3-4e98-8487-f6dab78734ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13339", "type": "seen", "source": "https://t.me/cvedetector/18420", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13339 - WordPress DeBounce Email Validator CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13339 \nPublished : Feb. 19, 2025, 9:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The DeBounce Email Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.6. This is due to missing or incorrect nonce validation on the 'debounce_email_validator' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:04.000000Z"}, {"uuid": "39a704d4-a6e6-4af1-853b-25c332209f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13336", "type": "seen", "source": "https://t.me/cvedetector/18419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13336 - WordPress Disable Auto Updates CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13336 \nPublished : Feb. 19, 2025, 9:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the 'disable-auto-updates' page. This makes it possible for unauthenticated attackers to disable all auto updates via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T12:03:03.000000Z"}, {"uuid": "a22415a7-4a7d-4c48-a1d6-2f2275d08187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13586", "type": "seen", "source": "https://t.me/cvedetector/16364", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13586 - Masy Gallery WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13586 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:38.000000Z"}, {"uuid": "53863ffb-0616-49c1-afbb-5edb40517943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13689", "type": "seen", "source": "https://t.me/cvedetector/18331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13689 - Uncode Core Plugin WordPress Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13689 \nPublished : Feb. 18, 2025, 3:15 p.m. | 29\u00a0minutes ago \nDescription : The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.9.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T16:49:01.000000Z"}, {"uuid": "199b5090-3cdf-4bc5-b58d-152a69d77f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13508", "type": "seen", "source": "https://t.me/cvedetector/18398", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13508 - Booking Package for WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13508 \nPublished : Feb. 19, 2025, 12:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all versions up to, and including, 1.6.72 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T03:41:40.000000Z"}, {"uuid": "a97c29d0-7a40-4196-afbf-eeece0abadc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13523", "type": "seen", "source": "https://t.me/cvedetector/18310", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13523 - MemorialDay WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13523 \nPublished : Feb. 18, 2025, 7:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : The MemorialDay plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:50.000000Z"}, {"uuid": "2a8b13bb-69be-4cc4-a865-9c1c9dc47ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13465", "type": "seen", "source": "https://t.me/cvedetector/18308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13465 - aBlocks - WordPress Gutenberg Blocks Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13465 \nPublished : Feb. 18, 2025, 8:15 a.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : The aBlocks \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \"Table Of Content\" Block, specifically in the \"markerView\" attribute, in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:45.000000Z"}, {"uuid": "b5f54712-7814-4494-9eef-a48d34fa03e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13725", "type": "seen", "source": "https://t.me/cvedetector/18285", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13725 - Keap Official Opt-in Forms WordPress Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13725 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. If register_argc_argv is enabled on the server and pearcmd.php is installed, this issue might lead to Remote Code Execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:57.000000Z"}, {"uuid": "11110bdf-8ef1-4c7c-be69-10546bcf53f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13369", "type": "seen", "source": "https://t.me/cvedetector/18321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13369 - Tour Master WordPress Tour Booking SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13369 \nPublished : Feb. 18, 2025, 10:15 a.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : The Tour Master - Tour Booking, Travel, Hotel plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018review_id\u2019 parameter in all versions up to, and including, 5.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:10.000000Z"}, {"uuid": "03882435-eafc-4536-a9b8-63a6c68828ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13551", "type": "seen", "source": "https://t.me/cvedetector/16363", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13551 - WordPress ABC Notation Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13551 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The ABC Notation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abcjs' shortcode in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:37.000000Z"}, {"uuid": "a46e5635-010e-4928-9900-c0fd446cdfad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13636", "type": "seen", "source": "https://t.me/cvedetector/18320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13636 - Brooklyn Theme for WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13636 \nPublished : Feb. 18, 2025, 11:15 a.m. | 18\u00a0minutes ago \nDescription : The Brooklyn theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.9.2 via deserialization of untrusted input in the ot_decode function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:10.000000Z"}, {"uuid": "2dd68c02-9d14-4aa6-88b6-019b6f122509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13797", "type": "seen", "source": "https://t.me/cvedetector/18319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13797 - The PressMart Elementor WooCommerce WordPress Theme Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13797 \nPublished : Feb. 18, 2025, 11:15 a.m. | 18\u00a0minutes ago \nDescription : The PressMart - Modern Elementor WooCommerce WordPress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.16. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:09.000000Z"}, {"uuid": "e11665f8-07cd-4ea2-a150-c505d716768e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13783", "type": "seen", "source": "https://t.me/cvedetector/18318", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13783 - FormCraft WordPress Unauthorized Data Access\", \n  \"Content\": \"CVE ID : CVE-2024-13783 \nPublished : Feb. 18, 2025, 11:15 a.m. | 18\u00a0minutes ago \nDescription : The FormCraft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in formcraft-main.php in all versions up to, and including, 3.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export all plugin data which may contain sensitive information from form submissions. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:08.000000Z"}, {"uuid": "1831bdbc-a7fe-42ca-a7d0-4b31a4a65e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13691", "type": "seen", "source": "https://t.me/cvedetector/18317", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13691 - Uncode WordPress Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13691 \nPublished : Feb. 18, 2025, 11:15 a.m. | 18\u00a0minutes ago \nDescription : The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_recordMedia' function in all versions up to, and including, 2.9.1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read arbitrary files on the server. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:04.000000Z"}, {"uuid": "06325d8c-a1fd-4e98-b987-7ad74f697394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13681", "type": "seen", "source": "https://t.me/cvedetector/18316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13681 - Uncode Theme for WordPress File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13681 \nPublished : Feb. 18, 2025, 11:15 a.m. | 18\u00a0minutes ago \nDescription : The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:03.000000Z"}, {"uuid": "0452a169-4c3e-4d6a-bca1-b42fa5514671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13667", "type": "seen", "source": "https://t.me/cvedetector/18315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13667 - \"Uncode for WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13667 \nPublished : Feb. 18, 2025, 11:15 a.m. | 18\u00a0minutes ago \nDescription : The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018mle-description\u2019 parameter in all versions up to, and including, 2.9.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T12:38:02.000000Z"}, {"uuid": "57e1c6f9-49a0-4948-8553-270e26bbcc83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13687", "type": "seen", "source": "https://t.me/cvedetector/18284", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13687 - WordPress Team Builder Plugin Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13687 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Team Builder \u2013 Meet the Team plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_team_builder_options() function in all versions up to, and including, 1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:56.000000Z"}, {"uuid": "c59ccf2b-bb75-450c-a391-39e1e4dfa5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13373", "type": "seen", "source": "https://t.me/cvedetector/19225", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13373 - Exertio Framework WordPress Password Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13373 \nPublished : March 1, 2025, 7:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Exertio Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.1. This is due to the plugin not properly validating a user's identity prior to updating their password through the fl_forgot_pass_new() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:41.000000Z"}, {"uuid": "62760ca4-c994-47b8-bcb3-45935b325ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13709", "type": "seen", "source": "https://t.me/cvedetector/16359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13709 - WordPress Linear CSRF Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-13709 \nPublished : Jan. 25, 2025, 4:15 a.m. | 22\u00a0minutes ago \nDescription : The Linear plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.1. This is due to missing or incorrect nonce validation on the 'linear-debug'. This makes it possible for unauthenticated attackers to reset the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T06:17:47.000000Z"}, {"uuid": "f4a5a636-b718-4809-b5c6-a05428586485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13795", "type": "seen", "source": "https://t.me/cvedetector/18306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13795 - Ecwid by Lightspeed Ecommerce Shopping Cart CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13795 \nPublished : Feb. 18, 2025, 8:15 a.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27. This is due to missing or incorrect nonce validation on the ecwid_deactivate_feedback() function. This makes it possible for unauthenticated attackers to send deactivation messages on behalf of a site owner via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:44.000000Z"}, {"uuid": "ef6c1f79-e73a-4962-99b6-ca83678070bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13704", "type": "seen", "source": "https://t.me/cvedetector/18305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13704 - WordPress Super Testimonials Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13704 \nPublished : Feb. 18, 2025, 8:15 a.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'st_user_title' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:43.000000Z"}, {"uuid": "0ac772fe-24ec-45d9-a4f2-22aa21f64a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13575", "type": "seen", "source": "https://t.me/cvedetector/18304", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13575 - WordPress Web Stories Enhancer Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13575 \nPublished : Feb. 18, 2025, 8:15 a.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : The Web Stories Enhancer \u2013 Level Up Your Web Stories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'web_stories_enhancer' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:39.000000Z"}, {"uuid": "09e3a9ee-24e3-416f-b32b-f9addc34d8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13718", "type": "seen", "source": "https://t.me/cvedetector/18297", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13718 - WooCommerce Flexible Wishlist CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13718 \nPublished : Feb. 18, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The Flexible Wishlist for WooCommerce \u2013 Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.26. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to modify/update/create other user's wishlists via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:31.000000Z"}, {"uuid": "04286d3b-db7a-4084-8bab-976332e9f248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13582", "type": "seen", "source": "https://t.me/cvedetector/18294", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13582 - WPBakery Page Builder Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13582 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdo_simple_pricing_table_free' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:17:10.000000Z"}, {"uuid": "91c6a96e-09d9-477f-8adf-f2d4ba06e1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13316", "type": "seen", "source": "https://t.me/cvedetector/18295", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13316 - WordPress Scratch & Win Coupon Creation Remote Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13316 \nPublished : Feb. 18, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The Scratch & Win \u2013 Giveaways and Contests. Boost subscribers, traffic, repeat visits,  referrals, sales and more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the apmswn_create_discount() function in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated attackers to create coupons. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:29.000000Z"}, {"uuid": "648ad143-0e98-4a8f-baee-c901397df58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13579", "type": "seen", "source": "https://t.me/cvedetector/18292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13579 - WordPress WP-Asambleas Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13579 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The WP-Asambleas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'polls_popup' shortcode in all versions up to, and including, 2.85.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:17:06.000000Z"}, {"uuid": "a9345eb2-7233-467b-b010-1113b37ead96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13581", "type": "seen", "source": "https://t.me/cvedetector/18293", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13581 - WordPress Simple Charts Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13581 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Simple Charts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'simple_chart' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:17:06.000000Z"}, {"uuid": "31f4806e-7754-4472-81f7-2ee5cf968f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13595", "type": "seen", "source": "https://t.me/cvedetector/18291", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13595 - WordPress Simple Signup Form SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13595 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:17:05.000000Z"}, {"uuid": "1c77fece-e18a-490e-8753-416834f415bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13852", "type": "seen", "source": "https://t.me/cvedetector/18281", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13852 - WordPress Option Editor CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13852 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Option Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the plugin_page() function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:51.000000Z"}, {"uuid": "197915de-e512-4db3-ab6e-33ab06f8338f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13848", "type": "seen", "source": "https://t.me/cvedetector/18280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13848 - WordPress Reaction Buttons Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13848 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Reaction Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:50.000000Z"}, {"uuid": "73bb26f8-0ba8-4034-9c02-6d8be5ed58c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13438", "type": "seen", "source": "https://t.me/cvedetector/18278", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13438 - \"SpeedSize WordPress Plugin CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13438 \nPublished : Feb. 18, 2025, 6:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : The SpeedSize Image & Video AI-Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the 'speedsize_clear_css_cache_action' function. This makes it possible for unauthenticated attackers to clear the plugins cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:48.000000Z"}, {"uuid": "ed78a9eb-0396-4860-ac4c-28f91a5bc3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13677", "type": "seen", "source": "https://t.me/cvedetector/18286", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13677 - GetBookingsWP WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13677 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The GetBookingsWP \u2013 Appointments Booking Calendar Plugin For WordPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.27. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:58.000000Z"}, {"uuid": "bedba189-d357-4a72-9a6d-70c399a7a165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13812", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13577", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13812\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-04-26T08:23:19.926Z\n\ud83d\udccf Modified: 2025-04-26T08:23:19.926Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5349096b-4897-4019-9eba-a959a42f03f0?source=cve\n2. https://anpsthemes.com/", "creation_timestamp": "2025-04-26T09:08:36.000000Z"}, {"uuid": "03069ca2-9310-4bbc-9e20-f83b5e3e9605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13829", "type": "seen", "source": "https://t.me/cvedetector/17276", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13829 - Tripetto WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13829 \nPublished : Feb. 5, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The WordPress form builder plugin for contact forms, surveys and quizzes \u2013 Tripetto plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.0.8 via the 'attachments.php' file. This makes it possible for unauthenticated attackers to extract sensitive data including files uploaded via forms. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T09:07:12.000000Z"}, {"uuid": "26845917-ace1-4b10-a4b2-5dc3af357165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13750", "type": "seen", "source": "https://t.me/cvedetector/19210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13750 - WordPress WooCommerce Multilevel Referral Affiliate Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13750 \nPublished : March 1, 2025, 5:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Multilevel Referral Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.27 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:05.000000Z"}, {"uuid": "745f0db3-8bdb-4689-97be-a6b5624cf130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13746", "type": "seen", "source": "https://t.me/cvedetector/19209", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13746 - Booking Calendar and Notification Plugin Unauthenticated Remote Code Execution and Data Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13746 \nPublished : March 1, 2025, 5:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Booking Calendar and Notification plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on the wpcb_all_bookings(), wpcb_update_booking_post(), and wpcb_delete_posts() functions in all versions up to, and including, 4.0.3. This makes it possible for unauthenticated attackers to extract data, create or update bookings, or  delete arbitrary posts. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:05.000000Z"}, {"uuid": "4c2671b5-1015-4efd-b42d-325d68b94b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13901", "type": "seen", "source": "https://t.me/cvedetector/19208", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13901 - WordPress Counter Box: DOM-Based Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13901 \nPublished : March 1, 2025, 6:15 a.m. | 28\u00a0minutes ago \nDescription : The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:04.000000Z"}, {"uuid": "880cbeee-218b-4534-a14d-1d4b69d9b99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13806", "type": "seen", "source": "https://t.me/cvedetector/19221", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13806 - WordPress Authors List Plugin Arbitrary Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13806 \nPublished : March 1, 2025, 8:15 a.m. | 31\u00a0minutes ago \nDescription : The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:35.000000Z"}, {"uuid": "28728030-3a0e-47b0-b00c-f080eb04501f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13611", "type": "seen", "source": "https://t.me/cvedetector/19230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13611 - Better Messages WordPress Plugin Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13611 \nPublished : March 1, 2025, 9:15 a.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : The Better Messages \u2013 Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/bp-better-messages directory which can contain file attachments included in chat messages. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T12:16:05.000000Z"}, {"uuid": "79192050-551a-4f34-a15e-a72da5e9f765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13833", "type": "seen", "source": "https://t.me/cvedetector/19235", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13833 - WordPress Gallery Plugin PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13833 \nPublished : March 1, 2025, 12:15 p.m. | 37\u00a0minutes ago \nDescription : The Album Gallery \u2013 WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserialization of untrusted input from gallery meta. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T13:56:31.000000Z"}, {"uuid": "dec45d7f-f8e9-413e-85cb-768124ef661f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13697", "type": "seen", "source": "https://t.me/cvedetector/19231", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13697 - Better Messages - Live Chat for WordPress Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13697 \nPublished : March 1, 2025, 9:15 a.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : The Better Messages \u2013 Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nice_links'. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Successful exploitation requires the \"Enable link previews\" to be enabled (default). \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T12:16:06.000000Z"}, {"uuid": "31119701-155e-46f9-a1e8-7f583f377f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13910", "type": "seen", "source": "https://t.me/cvedetector/19232", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13910 - WordPress Database Backup and Check Tables Automated With Scheduler Plugin File Deletion Vulnerability (Arbitrary File Deletion)\", \n  \"Content\": \"CVE ID : CVE-2024-13910 \nPublished : March 1, 2025, 9:15 a.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'database_backup_ajax_delete' function in all versions up to, and including, 2.35. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The vulnerability was partially patched in version 2.36. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T12:16:06.000000Z"}, {"uuid": "98f561cc-f8e5-425a-a878-8d4df1898807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13546", "type": "seen", "source": "https://t.me/cvedetector/19229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13546 - GenerateBlocks WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13546 \nPublished : March 1, 2025, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.1 via the 'get_image_description' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of private, draft, and scheduled posts and pages. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T12:16:04.000000Z"}, {"uuid": "c6f7a593-27ce-4213-ad57-e783e34e5694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13911", "type": "seen", "source": "https://t.me/cvedetector/19222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13911 - WordPress Database Backup and Check Tables Automated With Scheduler Plugin Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13911 \nPublished : March 1, 2025, 8:15 a.m. | 31\u00a0minutes ago \nDescription : The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35 via the /dashboard/backup.php file. This makes it possible for authenticated attackers, with Administrator-level access and above, to extract sensitive data including full database credentials. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:39.000000Z"}, {"uuid": "fc90dd41-22c9-4220-a792-88272089530e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13559", "type": "seen", "source": "https://t.me/cvedetector/19214", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13559 - WordPress TemplatesNext ToolKit Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13559 \nPublished : March 1, 2025, 5:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The TemplatesNext ToolKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tx_woo_wishlist_table' shortcode in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:11.000000Z"}, {"uuid": "89793434-23ed-4bc7-bc1f-af2ad4328e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13518", "type": "seen", "source": "https://t.me/cvedetector/19216", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13518 - SimplePress WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13518 \nPublished : March 1, 2025, 5:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Simple:Press Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.10.11. This is due to missing or incorrect nonce validation on the 'sp_save_edited_post' function. This makes it possible for unauthenticated attackers to modify a forum post via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:13.000000Z"}, {"uuid": "43c31114-2e16-4405-b560-bdc2192a9e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13568", "type": "seen", "source": "https://t.me/cvedetector/19215", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13568 - WordPress Fluent Support Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13568 \nPublished : March 1, 2025, 5:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Fluent Support \u2013 Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/fluent-support directory which can contain file attachments included in support tickets. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:12.000000Z"}, {"uuid": "947853bb-b1b0-418b-94c9-d9f16054b5c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13358", "type": "seen", "source": "https://t.me/cvedetector/19200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13358 - BuddyPress WooCommerce Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13358 \nPublished : March 1, 2025, 4:15 a.m. | 26\u00a0minutes ago \nDescription : The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bp_delete_page() function in all versions up to, and including, 3.4.24. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins page setting. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T06:24:37.000000Z"}, {"uuid": "c1c17dfc-803c-4b19-b6fa-2d15c6449880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13469", "type": "seen", "source": "https://t.me/cvedetector/19146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13469 - WordPress PickPlugins Pricing Table Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13469 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The Pricing Table by PickPlugins plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button Link in all versions up to, and including, 1.12.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T11:10:39.000000Z"}, {"uuid": "b9ba4ebf-d848-484b-9d4b-80263a53eac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13832", "type": "seen", "source": "https://t.me/cvedetector/19145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13832 - Elementor Ultra Addons Lite WordPress Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13832 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'ut_elementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T11:10:38.000000Z"}, {"uuid": "e84ab3df-6a1b-4e61-aa54-e473fab1be55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13638", "type": "seen", "source": "https://t.me/cvedetector/19144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13638 - WooCommerce Order Attachments Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13638 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file attachments added to orders. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T11:10:34.000000Z"}, {"uuid": "b259c047-f18f-44c0-865b-3a5b204e7b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13851", "type": "seen", "source": "https://t.me/cvedetector/19142", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13851 - \"WordPress Modal Portfolio Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13851 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The Modal Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T11:10:33.000000Z"}, {"uuid": "ff0b8920-35cd-464e-9f1e-c0292a499f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13831", "type": "seen", "source": "https://t.me/cvedetector/19141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13831 - WooCommerce Tabs for WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13831 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'product_has_custom_tabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T11:10:32.000000Z"}, {"uuid": "5214b615-f6c0-4fb3-8fdd-71725200f6cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13716", "type": "seen", "source": "https://t.me/cvedetector/19140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13716 - \"WordPress Forex Calculators Plugin Unauthorized Data Modification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13716 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The Forex Calculators plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_settings_callback() function in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T11:10:31.000000Z"}, {"uuid": "051f439c-bb75-49d7-a41a-803567910fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13796", "type": "seen", "source": "https://t.me/cvedetector/19121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13796 - ComboBlocks WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13796 \nPublished : Feb. 28, 2025, 5:15 a.m. | 44\u00a0minutes ago \nDescription : The Post Grid and Gutenberg Blocks \u2013 ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the /wp-json/post-grid/v2/get_users REST API This makes it possible for unauthenticated attackers to extract sensitive data including including emails and other user data. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T07:49:36.000000Z"}, {"uuid": "bdbaa2ff-b489-46b2-afbe-367a389a317e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13402", "type": "seen", "source": "https://t.me/cvedetector/19046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13402 - Buddyboss Platform WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13402 \nPublished : Feb. 27, 2025, 1:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_title\u2019 parameter in all versions up to, and including, 2.7.70 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T16:45:13.000000Z"}, {"uuid": "ed604adb-2626-4cf3-a0d2-6e288a402010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13217", "type": "seen", "source": "https://t.me/cvedetector/19036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13217 - Jeg Elementor Kit WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13217 \nPublished : Feb. 27, 2025, 12:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11 via the 'expired_data' and 'build_content' functions. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T14:33:54.000000Z"}, {"uuid": "9b45cd97-1ceb-47a6-a3d0-4fd282ccd121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13734", "type": "seen", "source": "https://t.me/cvedetector/19032", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13734 - Elementor Card Elements Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13734 \nPublished : Feb. 27, 2025, 10:15 a.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T12:52:29.000000Z"}, {"uuid": "e28df39b-a725-4c40-baae-09458637c14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13907", "type": "seen", "source": "https://t.me/cvedetector/19029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13907 - BoldGrid WordPress Backup Plugin SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13907 \nPublished : Feb. 27, 2025, 7:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : The Total Upkeep \u2013 WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.16.8 via the 'download' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T10:22:18.000000Z"}, {"uuid": "48ef994b-effa-4039-9e73-c410e9a6d662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "https://t.me/cvedetector/17597", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13059 - Apache Anything-LLM Path Traversal RCE\", \n  \"Content\": \"CVE ID : CVE-2024-13059 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling of non-ASCII filenames in the multer library. This vulnerability can lead to arbitrary file write, which can subsequently result in remote code execution. The issue arises when the filename transformation introduces '../' sequences, which are not sanitized by multer, allowing attackers with manager or admin roles to write files to arbitrary locations on the server. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:47.000000Z"}, {"uuid": "826f4fe5-429d-4c60-a246-2991646420d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13011", "type": "seen", "source": "https://t.me/cvedetector/17596", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13011 - \"Apache WP Foodbakery Remote Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13011 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image' function in versions up to, and including, 4.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:46.000000Z"}, {"uuid": "f7a72dc8-0760-43d1-b4d3-bbce4f80b934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13010", "type": "seen", "source": "https://t.me/cvedetector/17595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13010 - WordPress Foodbakery Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13010 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : The WP Foodbakery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.7 due to insufficient input sanitization and output escaping on the 'search_type' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:46.000000Z"}, {"uuid": "32ce1b93-b347-4084-94b2-6b6b3c05816a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13905", "type": "seen", "source": "https://t.me/cvedetector/19023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13905 - OneStore Sites WordPress SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13905 \nPublished : Feb. 27, 2025, 5:15 a.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.1.1 via the class-export.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T08:42:10.000000Z"}, {"uuid": "19b7ecda-40ea-40b1-b323-fd5c39eb1e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13647", "type": "seen", "source": "https://t.me/cvedetector/19022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13647 - SakolaWP WordPress Plugin Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-13647 \nPublished : Feb. 27, 2025, 5:15 a.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : The School Management System \u2013 SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing or incorrect nonce validation on the 'save_exam_setting' and 'delete_exam_setting' actions. This makes it possible for unauthenticated attackers to update exam settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T08:42:06.000000Z"}, {"uuid": "6c9c3565-5bdb-4181-9b1e-b8c6698feb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13494", "type": "seen", "source": "https://t.me/cvedetector/18858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13494 - WordPress File Upload CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13494 \nPublished : Feb. 25, 2025, 8:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. This is due to missing or incorrect nonce validation on the 'wfu_file_details' function. This makes it possible for unauthenticated attackers to modify user data details associated with uploaded files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T10:41:14.000000Z"}, {"uuid": "02b57414-2276-4749-8627-0dc676e09358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13850", "type": "seen", "source": "https://t.me/cvedetector/17536", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13850 - \"WordPress Simple Add Pages/Posts Stored XSS Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13850 \nPublished : Feb. 8, 2025, 1:15 p.m. | 48\u00a0minutes ago \nDescription : The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T15:44:48.000000Z"}, {"uuid": "c137741b-ce83-4aca-b409-4e7d63e45f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13525", "type": "seen", "source": "https://t.me/cvedetector/18170", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13525 - WooCommerce Customer Email Verification Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13525 \nPublished : Feb. 15, 2025, 9:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including emails as well as hashed passwords of any user. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T12:41:31.000000Z"}, {"uuid": "eaa179ca-0816-45a7-9d04-0525e83dbfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13373", "type": "seen", "source": "Telegram/FNAUweDxS0rq3tXYE_HNTu0nsFH5FIBbsCUd6h7t_2fwz_ch", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "917724b6-eac5-425d-b84d-bb4b6ef928e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13693", "type": "seen", "source": "https://t.me/cvedetector/18864", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13693 - Enfold WordPress Unauthorized Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13693 \nPublished : Feb. 25, 2025, 10:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-export-class.php in all versions up to, and including, 6.0.9. This makes it possible for unauthenticated attackers to export all avia settings which may included sensitive information such as the Mailchimp API Key, reCAPTCHA Secret Key, or Envato private token if they are set. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T13:11:46.000000Z"}, {"uuid": "82d6dfe1-f5b3-4ef8-b27c-59eeff6ef72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13695", "type": "seen", "source": "https://t.me/cvedetector/18863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13695 - Enfold WordPress SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13695 \nPublished : Feb. 25, 2025, 10:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Enfold theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.9 via the 'attachment_id' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T13:11:45.000000Z"}, {"uuid": "d789e1f1-8d6d-4c5b-8987-521dd950d8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13626", "type": "seen", "source": "https://t.me/cvedetector/18233", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13626 - \"VR-Frases WordPress Plugin Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13626 \nPublished : Feb. 17, 2025, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The VR-Frases (collect & share quotes) WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T08:11:01.000000Z"}, {"uuid": "b7d4efaa-4414-4745-b439-082fd29f6899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13601", "type": "seen", "source": "https://t.me/cvedetector/17813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13601 - Majestic Support WordPress Plugin Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13601 \nPublished : Feb. 12, 2025, 6:15 a.m. | 26\u00a0minutes ago \nDescription : The Majestic Support \u2013 The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export ticket data for any user. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:22.000000Z"}, {"uuid": "753f3a54-2a03-458c-90c1-05abddf4b58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13374", "type": "seen", "source": "https://t.me/cvedetector/17812", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13374 - WordPress Table Manager Unauthenticated Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-13374 \nPublished : Feb. 12, 2025, 6:15 a.m. | 26\u00a0minutes ago \nDescription : The WP Table Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on thewptm_getFolders AJAX action in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read arbitrary file names and directories. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:22.000000Z"}, {"uuid": "9115b5c3-97c1-4344-a5b5-c024978d0d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13749", "type": "seen", "source": "https://t.me/cvedetector/17807", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13749 - WordPress StaffList CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13749 \nPublished : Feb. 12, 2025, 4:15 a.m. | 17\u00a0minutes ago \nDescription : The StaffList plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing or incorrect nonce validation on the 'stafflist' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T05:59:50.000000Z"}, {"uuid": "b2d397c3-c16c-4c5a-bc1f-f6121f9afda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13539", "type": "seen", "source": "https://t.me/cvedetector/17806", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13539 - AForms Eats WordPress Full Path Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-13539 \nPublished : Feb. 12, 2025, 4:15 a.m. | 17\u00a0minutes ago \nDescription : The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-interface/phpunit.php file being publicly accessible and displaying error messages. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T05:59:49.000000Z"}, {"uuid": "0f3bff24-f7cf-4570-ac51-7f2a79237958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13654", "type": "seen", "source": "https://t.me/cvedetector/17823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13654 - ZoxPress WordPress Theme - Unauthenticated Data Modification Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13654 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' function in all versions up to, and including, 2.12.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:36.000000Z"}, {"uuid": "a7e9f935-72e9-4f2e-b091-27887fd8b3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13653", "type": "seen", "source": "https://t.me/cvedetector/17822", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13653 - ZoxPress WordPress Theme Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13653 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' function in all versions up to, and including, 2.12.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:35.000000Z"}, {"uuid": "0ccc3893-919a-4d25-be90-86f9c8fb9e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "https://t.me/cvedetector/17821", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13421 - Real Estate 7 WordPress Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-13421 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to register a new administrative user account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:31.000000Z"}, {"uuid": "db3d6844-700c-41c9-adaa-82601d9db4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13800", "type": "seen", "source": "https://t.me/cvedetector/17820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13800 - WordPress ConvertPlus Unauthenticated AJAX Capability Check Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-13800 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cp_dismiss_notice' AJAX endpoint in all versions up to, and including, 3.5.30. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to '1' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:30.000000Z"}, {"uuid": "21c70a01-fcfb-4cf9-9d55-5da3ddcfe91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13769", "type": "seen", "source": "https://t.me/cvedetector/17819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13769 - WP Magazine / Review with Store WordPress Theme Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13769 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'theme_options_ajax_post_action' AJAX action in all versions up to, and including, 4.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings and inject malicious web scripts. The developer opted to remove the software from the repository, so an update is not available and it is recommended to find a replacement software. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:30.000000Z"}, {"uuid": "9688cfe8-b763-4d12-a5f1-289ff44027eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13665", "type": "seen", "source": "https://t.me/cvedetector/17818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13665 - WordPress Admire Extra Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13665 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:29.000000Z"}, {"uuid": "4d9ae964-cf54-46b8-b06e-15978b52a1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13658", "type": "seen", "source": "https://t.me/cvedetector/17817", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13658 - \"NGG Smart Image Search Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13658 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:28.000000Z"}, {"uuid": "85ab592a-6561-42cb-838b-3f239e7896fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13656", "type": "seen", "source": "https://t.me/cvedetector/17816", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13656 - ClickMag WordPress Theme - Unauthenticated Option Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13656 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions up to, and including, 3.6.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:25.000000Z"}, {"uuid": "a793596c-da1f-4a2d-aff2-20343d9a7599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "https://t.me/cvedetector/17815", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13714 - All-Images.ai for WordPress - Unvalidated File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13714 \nPublished : Feb. 12, 2025, 6:15 a.m. | 26\u00a0minutes ago \nDescription : The All-Images.ai \u2013 IA Image Bank and Custom Image creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the '_get_image_by_url' function in all versions up to, and including, 1.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:24.000000Z"}, {"uuid": "89423dca-d330-4442-a604-0947dea73b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13600", "type": "seen", "source": "https://t.me/cvedetector/17814", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13600 - Majestic Support WordPress Plugin Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13600 \nPublished : Feb. 12, 2025, 6:15 a.m. | 26\u00a0minutes ago \nDescription : The Majestic Support \u2013 The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/majesticsupportdata directory which can contain file attachments included in support tickets. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:23.000000Z"}, {"uuid": "c5105bcc-6469-4020-b6fe-1230947aac72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13701", "type": "seen", "source": "https://t.me/cvedetector/17810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13701 - WordPress Liveticker Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13701 \nPublished : Feb. 12, 2025, 4:15 a.m. | 17\u00a0minutes ago \nDescription : The Liveticker (by stklcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'liveticker' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T05:59:52.000000Z"}, {"uuid": "fe930375-e52e-42c7-a73e-0d669deb8371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13554", "type": "seen", "source": "https://t.me/cvedetector/17809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13554 - WordPress WP Extended Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13554 \nPublished : Feb. 12, 2025, 4:15 a.m. | 17\u00a0minutes ago \nDescription : The The Ultimate WordPress Toolkit \u2013 WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorder_route() function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T05:59:51.000000Z"}, {"uuid": "cc49abef-5ab0-4c53-b2b2-081ed1501d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13541", "type": "seen", "source": "https://t.me/cvedetector/17808", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13541 - \"Directory Listing Plugin for WordPress Arbitrary Post Deletion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13541 \nPublished : Feb. 12, 2025, 4:15 a.m. | 17\u00a0minutes ago \nDescription : The aDirectory \u2013 WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the adqs_delete_listing() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T05:59:50.000000Z"}, {"uuid": "3cb0d81d-fd69-4b55-8953-a64914f43e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13643", "type": "seen", "source": "https://t.me/cvedetector/17682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13643 - Zox News - WordPress News & Magazine Theme Plugin Unauthenticated Option Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13643 \nPublished : Feb. 11, 2025, 8:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification. This vulnerability can lead to privilege escalation and denial of service conditions due to missing capability checks on the backup_options() and reset_options() functions in all versions up to and including 3.17.0. This vulnerability allows authenticated attackers with Subscriber-level access and above to update and delete arbitrary option values on the WordPress site. Attackers can exploit this issue to update the default user role for registration to Administrator and enable user registration, thereby gaining administrative access to the vulnerable site. Additionally, they could delete critical options, causing errors that may disrupt the site's functionality and deny service to legitimate users. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T11:29:59.000000Z"}, {"uuid": "e66f9178-06e1-4b29-942e-bca63089d653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13506", "type": "seen", "source": "https://t.me/cvedetector/17705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13506 - GeoDirectory - WP Business Directory Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13506 \nPublished : Feb. 11, 2025, 11:15 a.m. | 52\u00a0minutes ago \nDescription : The GeoDirectory \u2013 WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the display_name profile parameter in all versions up to, and including, 2.8.97 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T13:11:14.000000Z"}, {"uuid": "44b320a3-5dd1-442b-aa95-1b2e54a1fae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13440", "type": "seen", "source": "https://t.me/cvedetector/17546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13440 - WordPress Super Store Finder Unauthenticated SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13440 \nPublished : Feb. 9, 2025, 5:15 a.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the \u2018ssf_wp_user_name\u2019 parameter in all versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into an already existing query to store cross-site scripting in store reviews. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-09T07:38:09.000000Z"}, {"uuid": "37ccc253-7a52-4bb2-a21c-fd86900bb124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13570", "type": "seen", "source": "https://t.me/cvedetector/17674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13570 - WordPress Stray Random Quotes Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13570 \nPublished : Feb. 11, 2025, 6:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Stray Random Quotes WordPress plugin through 1.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T09:49:34.000000Z"}, {"uuid": "7f3ed41c-66cd-4fb4-a819-6e0ba739d0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13544", "type": "seen", "source": "https://t.me/cvedetector/17673", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13544 - Zarinpal Paid Download File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13544 \nPublished : Feb. 11, 2025, 6:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T09:49:33.000000Z"}, {"uuid": "324b353a-e9f4-4b20-8933-7cc3d0dd885f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13543", "type": "seen", "source": "https://t.me/cvedetector/17672", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13543 - Zarinpal Paid Download WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13543 \nPublished : Feb. 11, 2025, 6:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T09:49:32.000000Z"}, {"uuid": "3c49c9c2-0532-497d-bc3d-2a996a2a7187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13901", "type": "seen", "source": "Telegram/0uyFsjxtvx_kcuYXCUEmobN-MzXraYGbEHFoq4b206KKPOtc", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "fc35d2f8-275a-449f-834e-cf604e48c027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13417", "type": "seen", "source": "https://t.me/cvedetector/17421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13417 - Cisco RFID Reader Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-13417 \nPublished : Feb. 6, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it gets back to fully working state. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:24.000000Z"}, {"uuid": "8cbfde4e-05c4-4482-94f4-904906e31bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1313", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-vr63-2695-ppff\n\ud83d\udd17 Aliases: CVE-2024-13137\n\ud83d\udd39 Details: A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T12:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T12:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1313\n2. https://github.com/wangl1989/mysiteforme/issues/54\n3. https://github.com/wangl1989/mysiteforme/issues/54#issue-256532\n4. https://vuldb.com/?ctiid.290211\n5. https://vuldb.com/?id.290211\n6. https://vuldb.com/?submit.46843", "creation_timestamp": "2025-01-05T12:39:32.000000Z"}, {"uuid": "b213eb3b-225c-4d8d-a0e4-1471415585d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13408", "type": "seen", "source": "https://t.me/cvedetector/16271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13408 - WordPress Post Grid, Slider & Carousel Ultimate Local File Inclusion\", \n  \"Content\": \"CVE ID : CVE-2024-13408 \nPublished : Jan. 24, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : The Post Grid, Slider & Carousel Ultimate \u2013 with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' attribute of the `pgcu` shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php files can be uploaded and included. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T12:44:03.000000Z"}, {"uuid": "48a04b68-95ad-4717-b05c-5c39f313d6e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13594", "type": "seen", "source": "https://t.me/cvedetector/16274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13594 - WordPress Simple Downloads List SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13594 \nPublished : Jan. 24, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : The Simple Downloads List plugin for WordPress is vulnerable to SQL Injection via the 'category' attribute of the 'neofix_sdl' shortcode in all versions up to, and including, 1.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T12:44:09.000000Z"}, {"uuid": "36e29da8-a50a-4d15-85d9-631a2d455f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13542", "type": "seen", "source": "https://t.me/cvedetector/16272", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13542 - WordPress Google Street View Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13542 \nPublished : Jan. 24, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : The WP Google Street View (with 360\u00b0 virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpgsv' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T12:44:07.000000Z"}, {"uuid": "943bb7eb-0fce-4680-b783-6baeaead57e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13152", "type": "seen", "source": "Telegram/rZOB5HJh1Wg-Kt1Gw9ZIpiU3CB9mHY7rAyq1sKMHN2ncEvUc", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "8fe6b513-22e2-43a4-9fb8-8f8b5b13009a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13841", "type": "seen", "source": "https://t.me/cvedetector/17469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13841 - Elementor Builder Shortcodes Collections Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13841 \nPublished : Feb. 7, 2025, 7:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Builder Shortcode Extras \u2013 WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private and draft posts created with Elementor that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T10:28:20.000000Z"}, {"uuid": "b9cfa2a9-56a7-4d44-a7c3-40b02fbf8a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13557", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9536", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13557\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Shortcodes by United Themes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-03-29T07:03:31.749Z\n\ud83d\udccf Modified: 2025-03-29T07:03:31.749Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e4ca7dad-bfe2-443e-b575-362d8ff93242?source=cve\n2. https://unitedthemes.com/", "creation_timestamp": "2025-03-29T07:28:41.000000Z"}, {"uuid": "b15b30fe-259c-4ab9-b168-9a24850acc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13352", "type": "seen", "source": "https://t.me/cvedetector/17465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13352 - Legull WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13352 \nPublished : Feb. 7, 2025, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Legull WordPress plugin through 1.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T07:57:37.000000Z"}, {"uuid": "8ba3a528-14d5-40b6-a66c-e0904285bb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13492", "type": "seen", "source": "https://t.me/cvedetector/17464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13492 - WordPress Guten Free Options XSS Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-13492 \nPublished : Feb. 7, 2025, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Guten Free Options WordPress plugin through 0.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T07:57:36.000000Z"}, {"uuid": "c9b129dd-7d8a-4860-9675-b33da3275dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13791", "type": "seen", "source": "Telegram/uytY2toEG9W3wF_Wamnh4Zob4aHqZzx-OQr9lTL9FkFJBAcY", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "4c130200-50c0-42ff-9a3a-e962d5cd862d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13735", "type": "seen", "source": "Telegram/emm7IAFSZkS4XDdWXGiZoN-jd3Ni3lqpbyvUpr3FWVPy6IPz", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "4bc279e5-8b53-418e-818b-179aa4338a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13416", "type": "seen", "source": "https://t.me/cvedetector/17430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13416 - 2N OS Token Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13416 \nPublished : Feb. 6, 2025, 7:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:37.000000Z"}, {"uuid": "a6afa811-ec3e-4599-96ca-af93378134ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2883", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13683\n\ud83d\udd39 Description: The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation on the 'automate_hub' page. This makes it possible for unauthenticated attackers to update an activation status via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-24T07:04:09.519Z\n\ud83d\udccf Modified: 2025-01-24T07:04:09.519Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f6d90ca3-dc24-4634-9f98-83a909e3e093?source=cve\n2. https://wordpress.org/plugins/automate-hub-free-by-sperse-io/\n3. https://plugins.trac.wordpress.org/browser/automate-hub-free-by-sperse-io/trunk/apps/s/sperse/sperse.php#L141", "creation_timestamp": "2025-01-24T08:03:57.000000Z"}, {"uuid": "bbbf6557-695b-4a33-8575-cffb35422532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13680", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2884", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13680\n\ud83d\udd39 Description: The Form Builder CP plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'CP_EASY_FORM_WILL_APPEAR_HERE' shortcode in all versions up to, and including, 1.2.41 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-24T07:04:08.504Z\n\ud83d\udccf Modified: 2025-01-24T07:04:08.504Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a018fcb1-b7a6-456f-ab0b-59ccc1fd5b67?source=cve\n2. https://plugins.trac.wordpress.org/browser/cp-easy-form-builder/tags/1.2.41/cp_easy_form_builder.php#L297\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3214984%40cp-easy-form-builder&new=3214984%40cp-easy-form-builder&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-24T08:03:57.000000Z"}, {"uuid": "c15081da-4fdd-42bd-bf94-8dc897ec51c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13857", "type": "seen", "source": "Telegram/nBki0DXBUKl37j3HGBXr4i9WlIHFlSXArqngbavIgCQbwHrH", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "e880ca03-a839-4433-9fe0-24fd41ef8789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13805", "type": "seen", "source": "Telegram/FeFQfPsIzNY4n2ciMF76puCptl9ABVeebL3KZ0290xcyhGLv", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "d86b895e-328f-4d1b-95fa-19f1e7029971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13552", "type": "seen", "source": "Telegram/0Cuv1QWlA-rLV6AiKmRGQwI5GWH-njWf7Atbn8q3bj-9DDbo", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "6f778ce9-82a8-4906-9f9a-b47481b76b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13625", "type": "seen", "source": "https://t.me/cvedetector/18232", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13625 - \"Tube Video Ads Lite WordPress Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13625 \nPublished : Feb. 17, 2025, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The Tube Video Ads Lite WordPress plugin through 1.5.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T08:11:00.000000Z"}, {"uuid": "b4dee50d-a581-4f43-98b5-021b8e99f114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13698", "type": "seen", "source": "https://t.me/cvedetector/16303", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13698 - Jobify WordPress Theme Unauthenticated Image Upload and AI Generation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13698 \nPublished : Jan. 24, 2025, 4:15 p.m. | 22\u00a0minutes ago \nDescription : The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'download_image_via_ai' and 'generate_image_via_ai' functions in all versions up to, and including, 4.2.7. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application to upload files in an image format, and to generate AI images using the site's OpenAI key. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T17:45:21.000000Z"}, {"uuid": "2afa2e5a-f8f8-4895-8fe3-c5d7120822ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13655", "type": "seen", "source": "Telegram/WizLkRBIrwSdfwdXzZmDTlmxL-h_1ocoSK3xFbutIlRq028h", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "05cc92d9-96ee-4aa3-9040-81febc2fe808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13092", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/219", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13092\n\ud83d\udd39 Description: A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /_parse/_call_job/search_ajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-02T08:31:05.202Z\n\ud83d\udccf Modified: 2025-01-06T20:24:46.965Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289900\n2. https://vuldb.com/?ctiid.289900\n3. https://vuldb.com/?submit.472441\n4. https://github.com/UnrealdDei/cve/blob/main/sql9.md\n5. https://code-projects.org/", "creation_timestamp": "2025-01-06T20:49:23.000000Z"}, {"uuid": "fd686937-1db0-4e55-acb7-8a21774cb275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13320", "type": "seen", "source": "Telegram/Tz89o9pY-YSxFc0JO-GTIKqLZNZ2hGHFAeThZ_tV6qQkmLLD", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "751da04b-bed4-44b4-8688-f940c8f9d5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13614", "type": "seen", "source": "https://t.me/cvedetector/17415", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13614 - Kaspersky Kernel Memory Buffer Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13614 \nPublished : Feb. 6, 2025, 5:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T20:15:13.000000Z"}, {"uuid": "9f746e09-4522-4f1c-ab7f-5bba8291a7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13868", "type": "seen", "source": "Telegram/CtdztYBb8pns69z9Cs5MX17mMkZTDa-WXujZ5442YfHeFUWO", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "261f55d0-e9d9-4bce-b03f-d17c3d74f731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13526", "type": "seen", "source": "Telegram/pA1hhKvf3_JJ_EuRrigiNmdRIHzO3qdWKJ_cAFG0ON9iL-mh", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "2a25fe21-a244-4e30-9681-8c1a82ef7ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13187", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/841", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13187\n\ud83d\udd39 Description: A vulnerability was found in Kingsoft WPS Office 6.14.0 on macOS. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component TCC Handler. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-08T16:31:04.785Z\n\ud83d\udccf Modified: 2025-01-08T20:38:46.481Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290779\n2. https://vuldb.com/?ctiid.290779\n3. https://vuldb.com/?submit.468013\n4. https://github.com/Rsec-1/wps", "creation_timestamp": "2025-01-08T21:14:08.000000Z"}, {"uuid": "ca4bfb9d-ce71-4b9d-a4df-33a07f70fbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13134", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-5pqj-phv8-qxmc\n\ud83d\udd17 Aliases: CVE-2024-13134\n\ud83d\udd39 Details: A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T09:30:42Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T09:30:42Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-284\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13134\n2. https://github.com/ZeroWdd/studentmanager/issues/16\n3. https://github.com/ZeroWdd/studentmanager/issues/16#issue-2553409\n4. https://vuldb.com/?ctiid.290208\n5. https://vuldb.com/?id.290208\n6. https://vuldb.com/?submit.46916", "creation_timestamp": "2025-01-05T09:36:41.000000Z"}, {"uuid": "9b637cfe-939b-4d14-9002-ae2e869cbcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13139", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/129", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-7whx-v52v-gg25\n\ud83d\udd17 Aliases: CVE-2024-13139\n\ud83d\udd39 Details: A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main/java/com/mysiteform/admin/controller/system/FileController. The manipulation of the argument content leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T12:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T12:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-918\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13139\n2. https://github.com/wangl1989/mysiteforme/issues/56\n3. https://github.com/wangl1989/mysiteforme/issues/56#issue-2586365\n4. https://vuldb.com/?ctiid.290213\n5. https://vuldb.com/?id.290213\n6. https://vuldb.com/?submit.468513", "creation_timestamp": "2025-01-05T12:39:43.000000Z"}, {"uuid": "315409e5-6c33-492f-b0b6-827a732da3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-jh2f-9mvc-3m3p\n\ud83d\udd17 Aliases: CVE-2024-13140\n\ud83d\udd39 Details: A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T12:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T12:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13140\n2. https://github.com/emlog/emlog/issues/312\n3. https://github.com/emlog/emlog/issues/312#issue-25854683\n4. https://vuldb.com/?ctiid.290214\n5. https://vuldb.com/?id.290214\n6. https://vuldb.com/?submit.46853", "creation_timestamp": "2025-01-05T12:39:38.000000Z"}, {"uuid": "938c76e5-73ee-4974-bcdd-fc3fbed9eff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13254\n\ud83d\udd39 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1.\n\ud83d\udccf Published: 2025-01-09T18:59:46.386Z\n\ud83d\udccf Modified: 2025-01-09T18:59:46.386Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-018", "creation_timestamp": "2025-01-09T19:16:54.000000Z"}, {"uuid": "ba1eb90e-f79a-4929-a641-bf91a78575c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13255\n\ud83d\udd39 Description: Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.\n\ud83d\udccf Published: 2025-01-09T19:00:43.339Z\n\ud83d\udccf Modified: 2025-01-09T19:00:43.339Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-019", "creation_timestamp": "2025-01-09T19:16:31.000000Z"}, {"uuid": "0bcde775-a9dc-416d-9f26-9d04e45c5881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13256\n\ud83d\udd39 Description: Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4.\n\ud83d\udccf Published: 2025-01-09T19:03:47.618Z\n\ud83d\udccf Modified: 2025-01-09T19:03:47.618Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-020", "creation_timestamp": "2025-01-09T19:16:03.000000Z"}, {"uuid": "fc84b348-327f-4ece-b3aa-7805157a7c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-9hmm-3g3p-p327\n\ud83d\udd17 Aliases: CVE-2024-13135\n\ud83d\udd39 Details: A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T09:30:42Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T09:30:42Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13135\n2. https://github.com/emlog/emlog/issues/311\n3. https://github.com/emlog/emlog/issues/311#issue-255404584\n4. https://vuldb.com/?ctiid.290209\n5. https://vuldb.com/?id.290209\n6. https://vuldb.com/?submit.46929", "creation_timestamp": "2025-01-05T09:36:34.000000Z"}, {"uuid": "dc0009b0-e6ae-4484-ba65-80d259d71180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13136", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/123", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-9v62-r8m2-76m8\n\ud83d\udd17 Aliases: CVE-2024-13136\n\ud83d\udd39 Details: A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the file src/main/java/com/mysiteforme/admin/config/ShiroConfig.java. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T09:30:42Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T09:30:42Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-20\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13136\n2. https://github.com/wangl1989/mysiteforme/issues/52\n3. https://github.com/wangl1989/mysiteforme/issues/52#issue-25682365\n4. https://vuldb.com/?ctiid.290210\n5. https://vuldb.com/?id.290210\n6. https://vuldb.com/?submit.468391", "creation_timestamp": "2025-01-05T09:36:28.000000Z"}, {"uuid": "e219bd41-238f-4e85-a14e-7d050ccccb87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13138", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-wq4v-g552-cgfg\n\ud83d\udd17 Aliases: CVE-2024-13138\n\ud83d\udd39 Details: A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/LocalUploadServiceImpl. The manipulation of the argument test leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T12:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T12:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-284\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13138\n2. https://github.com/wangl1989/mysiteforme/issues/55\n3. https://github.com/wangl1989/mysiteforme/issues/55#issue-25868654\n4. https://vuldb.com/?ctiid.290212\n5. https://vuldb.com/?id.290212\n6. https://vuldb.com/?submit.468511", "creation_timestamp": "2025-01-05T12:39:26.000000Z"}, {"uuid": "a95cdccd-234b-4829-91dd-056d5b465f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13190", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/833", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13190\n\ud83d\udd39 Description: A vulnerability classified as critical was found in ZeroWdd myblog 1.0. This vulnerability affects unknown code of the file src/main/resources/mapper/BlogMapper.xml. The manipulation of the argument findBlogList/getTotalBlogs leads to xml injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-08T21:00:11.283Z\n\ud83d\udccf Modified: 2025-01-08T21:00:11.283Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290782\n2. https://vuldb.com/?ctiid.290782\n3. https://vuldb.com/?submit.469226\n4. https://github.com/ZeroWdd/myblog/issues/2\n5. https://github.com/ZeroWdd/myblog/issues/2#issue-2759833644", "creation_timestamp": "2025-01-08T21:13:22.000000Z"}, {"uuid": "bbff28a1-d82c-40b5-80ad-b6f69e97bcfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13210", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/886", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13210\n\ud83d\udd39 Description: A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T03:31:04.605Z\n\ud83d\udccf Modified: 2025-01-09T03:31:04.605Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290815\n2. https://vuldb.com/?ctiid.290815\n3. https://vuldb.com/?submit.469686\n4. https://github.com/donglight/bookstore/issues/10\n5. https://github.com/donglight/bookstore/issues/10#issue-2760923048", "creation_timestamp": "2025-01-09T04:14:36.000000Z"}, {"uuid": "f7fba1ad-7be5-428f-899b-160d28ea03ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13211", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13211\n\ud83d\udd39 Description: A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminController.java. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T03:31:06.175Z\n\ud83d\udccf Modified: 2025-01-09T03:31:06.175Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290816\n2. https://vuldb.com/?ctiid.290816\n3. https://vuldb.com/?submit.471427\n4. https://github.com/SingMR/HouseRent/issues/12\n5. https://github.com/SingMR/HouseRent/issues/12#issue-2762124045", "creation_timestamp": "2025-01-09T04:14:31.000000Z"}, {"uuid": "5b3ecf59-1cbd-433f-8a4b-c1e86c79d88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13131", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-cqgx-q2fg-hwxm\n\ud83d\udd17 Aliases: CVE-2024-13131\n\ud83d\udd39 Details: A vulnerability classified as problematic has been found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T03:30:29Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T03:30:29Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-200\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13131\n2. https://netsecfish.notion.site/IntelBras-IP-Camera-Information-isclosure-15e6b683e6c80a89f89daf59daa9ea8?pvs=3\n3. https://vuldb.com/?ctiid.290205\n4. https://vuldb.com/?id.290205\n5. https://vuldb.com/?submit.464258", "creation_timestamp": "2025-01-05T03:36:04.000000Z"}, {"uuid": "66db01ee-2fe6-4db5-b519-903b4079dd1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13130", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/117", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-fq22-566f-cfhj\n\ud83d\udd17 Aliases: CVE-2024-13130\n\ud83d\udd39 Details: A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T03:30:29Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T03:30:29Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-23\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13130\n2. https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e6c80809442ee3425f53b?pvs=4\n3. https://vuldb.com/?ctiid.290204\n4. https://vuldb.com/?id.290204\n5. https://vuldb.com/?submit.464260", "creation_timestamp": "2025-01-05T03:35:57.000000Z"}, {"uuid": "ac0f9e8a-d68b-439b-a475-d9afc78d9728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13133", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-c37c-p2gq-c2g7\n\ud83d\udd17 Aliases: CVE-2024-13133\n\ud83d\udd39 Details: A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T06:30:29Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T06:30:29Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-284\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13133\n2. https://github.com/ZeroWdd/studentmanager/issues/16\n3. https://github.com/ZeroWdd/studentmanager/issues/16#issue-2553409\n4. https://vuldb.com/?ctiid.29020\n5. https://vuldb.com/?id.29020", "creation_timestamp": "2025-01-05T06:38:45.000000Z"}, {"uuid": "ce7cbcb9-eb6c-4eaa-8eb5-675c787e57ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13132", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/120", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-j98j-8r2w-j3gq\n\ud83d\udd17 Aliases: CVE-2024-13132\n\ud83d\udd39 Details: A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T06:30:29Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T06:30:29Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13132\n2. https://github.com/emlog/emlog/issues/309\n3. https://github.com/emlog/emlog/issues/309#issue-25531359\n4. https://vuldb.com/?ctiid.290206\n5. https://vuldb.com/?id.290206\n6. https://vuldb.com/?submit.46912", "creation_timestamp": "2025-01-05T06:38:39.000000Z"}, {"uuid": "c1ed0a70-0c8b-4bcc-89a4-1b143f4470ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13137", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-vr63-2695-ppff\n\ud83d\udd17 Aliases: CVE-2024-13137\n\ud83d\udd39 Details: A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T12:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T12:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1313\n2. https://github.com/wangl1989/mysiteforme/issues/54\n3. https://github.com/wangl1989/mysiteforme/issues/54#issue-256532\n4. https://vuldb.com/?ctiid.290211\n5. https://vuldb.com/?id.290211\n6. https://vuldb.com/?submit.46843", "creation_timestamp": "2025-01-05T12:39:32.000000Z"}, {"uuid": "013a1b63-196f-46bd-99e1-85a500575145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-cmmx-wwp2-x696\n\ud83d\udd17 Aliases: CVE-2024-13141\n\ud83d\udd39 Details: A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T15:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T15:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13141\n2. https://github.com/Hebing123/cve/issues/83\n3. https://vuldb.com/?ctiid.290224\n4. https://vuldb.com/?id.290224\n5. https://vuldb.com/?submit.468645", "creation_timestamp": "2025-01-05T15:38:11.000000Z"}, {"uuid": "5ccf66b8-c153-4753-bef0-5288d695b032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-q7wx-v3rg-fjvx\n\ud83d\udd17 Aliases: CVE-2024-13142\n\ud83d\udd39 Details: A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T00:30:41Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T00:30:41Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13142\n2. https://github.com/ZeroWdd/manager-system/issues/6\n3. https://vuldb.com/?ctiid.290230\n4. https://vuldb.com/?id.290230\n5. https://vuldb.com/?submit.469213", "creation_timestamp": "2025-01-06T00:35:49.000000Z"}, {"uuid": "15eea860-37ec-4586-9020-d0345879a479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-x83j-h8x8-cj5h\n\ud83d\udd17 Aliases: CVE-2024-13145\n\ud83d\udd39 Details: A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T03:30:39Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T03:30:39Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-284\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13145\n2. https://github.com/ZHENFENG13/My-Blog/issues/141\n3. https://github.com/ZHENFENG13/My-Blog/issues/141#issue-259820153\n4. https://vuldb.com/?ctiid.290233\n5. https://vuldb.com/?id.290233\n6. https://vuldb.com/?submit.469221", "creation_timestamp": "2025-01-06T03:37:27.000000Z"}, {"uuid": "e4ed9c14-163f-4b84-b116-f07626ef6ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/145", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-j4jc-69x3-7rr6\n\ud83d\udd17 Aliases: CVE-2024-13143\n\ud83d\udd39 Details: A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T00:30:41Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T00:30:41Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13143\n2. https://github.com/ZeroWdd/manager-system/issues/\n3. https://vuldb.com/?ctiid.290231\n4. https://vuldb.com/?id.290231\n5. https://vuldb.com/?submit.46921", "creation_timestamp": "2025-01-06T00:35:52.000000Z"}, {"uuid": "f7618f77-a7be-48e7-92f4-d927e2636dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-8464-8v52-xm79\n\ud83d\udd17 Aliases: CVE-2024-13144\n\ud83d\udd39 Details: A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T00:30:41Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T00:30:41Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-284\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13144\n2. https://github.com/ZHENFENG13/My-Blog/issues/140\n3. https://github.com/ZHENFENG13/My-Blog/issues/140#issue-259813820\n4. https://vuldb.com/?ctiid.290232\n5. https://vuldb.com/?id.290232\n6. https://vuldb.com/?submit.469220", "creation_timestamp": "2025-01-06T00:35:56.000000Z"}, {"uuid": "0ead9622-77da-4538-8f45-31cdc19f54f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13195", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/862", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13195\n\ud83d\udd39 Description: A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-08T23:31:06.435Z\n\ud83d\udccf Modified: 2025-01-08T23:31:06.435Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290787\n2. https://vuldb.com/?ctiid.290787\n3. https://vuldb.com/?submit.469689\n4. https://github.com/donglight/bookstore/issues/11\n5. https://github.com/donglight/bookstore/issues/11#issue-2760929273", "creation_timestamp": "2025-01-09T00:13:22.000000Z"}, {"uuid": "d1e5f9fe-4bb9-4277-973d-fee00c3aae27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13186", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13186\n\ud83d\udd39 Description: The MinigameCenter  module has insufficient restrictions on loading URLs, which may lead to some information leakage.\n\ud83d\udccf Published: 2025-01-08T08:28:21.455Z\n\ud83d\udccf Modified: 2025-01-08T08:28:21.455Z\n\ud83d\udd17 References:\n1. https://www.vivo.com/en/support/security-advisory-detail?id=16", "creation_timestamp": "2025-01-08T09:12:31.000000Z"}, {"uuid": "df0b3d47-4697-42ff-8b88-95465967a760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13246", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13246\n\ud83d\udd39 Description: Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 0.0.0 before 2.0.2.\n\ud83d\udccf Published: 2025-01-09T18:52:31.142Z\n\ud83d\udccf Modified: 2025-01-09T18:52:31.142Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-010", "creation_timestamp": "2025-01-09T19:21:26.000000Z"}, {"uuid": "a51148e7-0c59-476e-bd3a-03639f1025fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13247", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13247\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.0.\n\ud83d\udccf Published: 2025-01-09T18:53:15.187Z\n\ud83d\udccf Modified: 2025-01-09T18:53:15.187Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-011", "creation_timestamp": "2025-01-09T19:20:28.000000Z"}, {"uuid": "af61a241-aba5-465c-8552-06cdba7e6e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13243", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13243\n\ud83d\udd39 Description: Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1.\n\ud83d\udccf Published: 2025-01-09T18:49:49.688Z\n\ud83d\udccf Modified: 2025-01-09T18:49:49.688Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-007", "creation_timestamp": "2025-01-09T19:22:41.000000Z"}, {"uuid": "74862cea-6321-468d-af8c-bd9374f676e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13310", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1091", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13310\n\ud83d\udd39 Description: Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal: *.*.\n\ud83d\udccf Published: 2025-01-09T20:27:59.058Z\n\ud83d\udccf Modified: 2025-01-09T20:27:59.058Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-074", "creation_timestamp": "2025-01-09T21:17:29.000000Z"}, {"uuid": "adebc223-5d09-453e-94b9-2be220b5ef6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13311", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1090", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13311\n\ud83d\udd39 Description: Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*.\n\ud83d\udccf Published: 2025-01-09T20:28:24.722Z\n\ud83d\udccf Modified: 2025-01-09T20:28:24.722Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-075", "creation_timestamp": "2025-01-09T21:17:25.000000Z"}, {"uuid": "b30ec988-e9c0-461c-83b1-38167f62f0e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13312", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1089", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13312\n\ud83d\udd39 Description: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.\n\ud83d\udccf Published: 2025-01-09T20:28:53.431Z\n\ud83d\udccf Modified: 2025-01-09T20:28:53.431Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-076", "creation_timestamp": "2025-01-09T21:17:22.000000Z"}, {"uuid": "fa69b81b-06c2-416c-86f9-7262595c4544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13201", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/878", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13201\n\ud83d\udd39 Description: A vulnerability has been found in wander-chu SpringBoot-Blog 1.0 and classified as critical. This vulnerability affects the function upload of the file src/main/java/com/my/blog/website/controller/admin/AttachtController.java of the component Admin Attachment Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T01:31:04.761Z\n\ud83d\udccf Modified: 2025-01-09T01:31:04.761Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290794\n2. https://vuldb.com/?ctiid.290794\n3. https://vuldb.com/?submit.470910\n4. https://github.com/wander-chu/SpringBoot-Blog/issues/6\n5. https://github.com/wander-chu/SpringBoot-Blog/issues/6#issue-2761640788", "creation_timestamp": "2025-01-09T03:13:12.000000Z"}, {"uuid": "30eec73f-6980-4276-96f0-0948dee5d8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13172", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2868", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13172\n\ud83d\udd39 Description: Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.\n\ud83d\udccf Published: 2025-01-14T17:16:17.218Z\n\ud83d\udccf Modified: 2025-01-24T04:55:51.479Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-24T05:03:28.000000Z"}, {"uuid": "5f34b7db-0667-49a6-a440-b46a7feb4d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13212", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/882", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13212\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in SingMR HouseRent 1.0. This affects the function singleUpload/upload of the file src/main/java/com/house/wym/controller/AddHouseController.java. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T04:00:12.875Z\n\ud83d\udccf Modified: 2025-01-09T04:00:12.875Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290817\n2. https://vuldb.com/?ctiid.290817\n3. https://vuldb.com/?submit.471441\n4. https://github.com/SingMR/HouseRent/issues/13\n5. https://github.com/SingMR/HouseRent/issues/13#issue-2762125363", "creation_timestamp": "2025-01-09T04:14:14.000000Z"}, {"uuid": "845cc08c-a591-492a-9c90-0df82b60cbb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13206", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/963", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13206\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T03:00:09.484Z\n\ud83d\udccf Modified: 2025-01-09T15:58:14.785Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290799\n2. https://vuldb.com/?ctiid.290799\n3. https://vuldb.com/?submit.471160\n4. https://github.com/hawkteam404/RnD_Public/blob/main/reve_av_multiple_vuln.md", "creation_timestamp": "2025-01-09T16:16:08.000000Z"}, {"uuid": "a0f6151e-e10d-4f35-980c-5c41f6cd0d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13173", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/677", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13173\n\ud83d\udd39 Description: The health module has insufficient restrictions on loading URLs, which may lead to some information leakage.\n\ud83d\udccf Published: 2025-01-08T07:44:48.592Z\n\ud83d\udccf Modified: 2025-01-08T07:44:48.592Z\n\ud83d\udd17 References:\n1. https://www.vivo.com/en/support/security-advisory-detail?id=14", "creation_timestamp": "2025-01-08T08:12:22.000000Z"}, {"uuid": "abe14d69-a816-45dc-931f-d21cf3ed6a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13185", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/686", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13185\n\ud83d\udd39 Description: The MinigameCenter  module has insufficient restrictions on loading URLs, which may lead to some information leakage.\n\ud83d\udccf Published: 2025-01-08T08:08:12.559Z\n\ud83d\udccf Modified: 2025-01-08T08:08:12.559Z\n\ud83d\udd17 References:\n1. https://www.vivo.com/en/support/security-advisory-detail?id=15", "creation_timestamp": "2025-01-08T09:13:10.000000Z"}, {"uuid": "4951e67d-4d4f-40e5-b373-e833d9fd1dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13387", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13387\n\ud83d\udd39 Description: The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-16T09:39:13.521Z\n\ud83d\udccf Modified: 2025-01-16T09:39:13.521Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/39e58875-2f6e-453e-b33f-3d7a2a62b7b6?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222481%40wp-responsive-tabs&new=3222481%40wp-responsive-tabs&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-16T09:55:37.000000Z"}, {"uuid": "e0e5e798-5cd0-464c-a16a-51eb6196cc53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13205", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/874", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13205\n\ud83d\udd39 Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/create_product.php of the component Create Product Page. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T02:31:04.629Z\n\ud83d\udccf Modified: 2025-01-09T02:31:04.629Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290798\n2. https://vuldb.com/?ctiid.290798\n3. https://vuldb.com/?submit.471233\n4. https://www.websecurityinsights.my.id/2024/12/ecommerce-php-by-kurniaramadhan-sql.html?m=1", "creation_timestamp": "2025-01-09T03:12:54.000000Z"}, {"uuid": "0c2a1fd3-18ea-44e5-984d-f3997421b406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13198", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/873", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13198\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T00:31:04.928Z\n\ud83d\udccf Modified: 2025-01-09T00:31:04.928Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290790\n2. https://vuldb.com/?ctiid.290790\n3. https://vuldb.com/?submit.470429\n4. https://github.com/cydtseng/Vulnerability-Research/blob/main/mblog/ObservableDiscrepancy-UserLogin.md", "creation_timestamp": "2025-01-09T01:17:30.000000Z"}, {"uuid": "c495b5fb-b850-4aae-b352-61327c855a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13188", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13188\n\ud83d\udd39 Description: A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-08T19:00:14.454Z\n\ud83d\udccf Modified: 2025-01-08T19:00:14.454Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290780\n2. https://vuldb.com/?ctiid.290780\n3. https://vuldb.com/?submit.468796\n4. https://github.com/hawkteam404/RnD_Public/blob/main/escan_incorrect_default_perm.md", "creation_timestamp": "2025-01-08T19:14:12.000000Z"}, {"uuid": "f042605d-52f7-41f2-9674-cf1b8b802cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13191", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/852", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13191\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-08T22:31:04.729Z\n\ud83d\udccf Modified: 2025-01-08T22:31:04.729Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290783\n2. https://vuldb.com/?ctiid.290783\n3. https://vuldb.com/?submit.469229\n4. https://github.com/ZeroWdd/myblog/issues/3\n5. https://github.com/ZeroWdd/myblog/issues/3#issue-2759839215", "creation_timestamp": "2025-01-08T23:13:48.000000Z"}, {"uuid": "8a029204-d52c-419c-b1fc-fd7c934c4fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13192", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/851", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13192\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in ZeroWdd myblog 1.0. Affected is the function update of the file src/main/java/com/wdd/myblog/controller/admin/BlogController.java. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-08T23:00:15.430Z\n\ud83d\udccf Modified: 2025-01-08T23:00:15.430Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290784\n2. https://vuldb.com/?ctiid.290784\n3. https://vuldb.com/?submit.469232\n4. https://github.com/ZeroWdd/myblog/issues/4\n5. https://github.com/ZeroWdd/myblog/issues/4#issue-2759845658", "creation_timestamp": "2025-01-08T23:13:46.000000Z"}, {"uuid": "2b5ecca9-0d4d-4fd9-89c5-31a5c9da31dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13193", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13193\n\ud83d\udd39 Description: A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Images.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-08T23:00:17.162Z\n\ud83d\udccf Modified: 2025-01-08T23:00:17.162Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290785\n2. https://vuldb.com/?ctiid.290785\n3. https://vuldb.com/?submit.469563\n4. https://github.com/Upgradeextension/SEMCMS/blob/main/README.md", "creation_timestamp": "2025-01-08T23:13:42.000000Z"}, {"uuid": "7ca5b835-99ae-4b74-b52f-e19c3ed9ad04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13200", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/879", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13200\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the function preHandle of the file src/main/java/com/my/blog/website/interceptor/BaseInterceptor.java of the component HTTP POST Request Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T01:00:14.956Z\n\ud83d\udccf Modified: 2025-01-09T01:00:14.956Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290793\n2. https://vuldb.com/?ctiid.290793\n3. https://vuldb.com/?submit.470902\n4. https://github.com/wander-chu/SpringBoot-Blog/issues/4\n5. https://github.com/wander-chu/SpringBoot-Blog/issues/4#issue-2761636207", "creation_timestamp": "2025-01-09T03:13:16.000000Z"}, {"uuid": "a662ecda-320c-400a-91a6-af9701e90064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13189", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13189\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-08T20:00:09.819Z\n\ud83d\udccf Modified: 2025-01-08T20:00:09.819Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290781\n2. https://vuldb.com/?ctiid.290781\n3. https://vuldb.com/?submit.469223\n4. https://github.com/ZeroWdd/myblog/issues/1\n5. https://github.com/ZeroWdd/myblog/issues/1#issue-2759828006", "creation_timestamp": "2025-01-08T20:13:57.000000Z"}, {"uuid": "115a365a-7423-4ef5-8cd2-d61d89593486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13583", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2887", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13583\n\ud83d\udd39 Description: The Simple Gallery with Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'c2tw_sgwf' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T09:21:51.358Z\n\ud83d\udccf Modified: 2025-01-24T09:21:51.358Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1c088264-64a2-4a36-ae3b-fdf60f3837e2?source=cve\n2. https://plugins.trac.wordpress.org/browser/simple-gallery-with-filter/trunk/simple-gallery-with-filter.php#L377\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227234%40simple-gallery-with-filter&new=3227234%40simple-gallery-with-filter&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-24T10:03:59.000000Z"}, {"uuid": "681848ff-5660-4df1-aa52-4456f6ff5f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13594", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2895", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13594\n\ud83d\udd39 Description: The Simple Downloads List plugin for WordPress is vulnerable to SQL Injection via the 'category' attribute of the 'neofix_sdl' shortcode in all versions up to, and including, 1.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-24T11:07:31.734Z\n\ud83d\udccf Modified: 2025-01-24T11:07:31.734Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/49f5bb21-d18f-453b-bef4-e3b234d162c8?source=cve\n2. https://plugins.trac.wordpress.org/browser/simple-downloads-list/trunk/lists/list_1/download_list_1.php#L20\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226486%40simple-downloads-list&new=3226486%40simple-downloads-list&sfp_email=&sfph_mail=#file14", "creation_timestamp": "2025-01-24T12:04:48.000000Z"}, {"uuid": "2a80d7ed-d621-475c-b923-52f6f4ec4452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13542", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2894", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13542\n\ud83d\udd39 Description: The WP Google Street View (with 360\u00b0 virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpgsv' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T11:07:32.108Z\n\ud83d\udccf Modified: 2025-01-24T11:07:32.108Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4b1944a9-4bc4-4ac2-83c3-55d6d61f405c?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227140%40wp-google-street-view&new=3227140%40wp-google-street-view&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-24T12:04:47.000000Z"}, {"uuid": "1cedf8b5-c6a2-4aa8-82f3-dc29ffc633b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13335", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13335\n\ud83d\udd39 Description: The Spexo Addons for Elementor \u2013 Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the tmpcoder_theme_install_func() function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install a theme.\n\ud83d\udccf Published: 2025-01-24T11:07:32.551Z\n\ud83d\udccf Modified: 2025-01-24T11:07:32.551Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4edc7ef9-33db-4433-8ef2-cd06089ee8d5?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3227353/sastra-essential-addons-for-elementor/trunk/inc/wizard/wizard-ajax-api.php", "creation_timestamp": "2025-01-24T12:04:46.000000Z"}, {"uuid": "ffb48122-97c2-46e5-a868-0587c3ecd60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13354", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13354\n\ud83d\udd39 Description: The Responsive Addons for Elementor \u2013 Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in several widgets in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T11:07:32.947Z\n\ud83d\udccf Modified: 2025-01-24T11:07:32.947Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c46d71fb-ccf1-4cbe-8088-edb7fba225e9?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226779%40responsive-addons-for-elementor&new=3226779%40responsive-addons-for-elementor&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-24T12:04:46.000000Z"}, {"uuid": "7c1c399b-2ed3-4cb4-ba91-fd2a3767594e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13196", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/860", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13196\n\ud83d\udd39 Description: A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T00:00:15.649Z\n\ud83d\udccf Modified: 2025-01-09T00:00:15.649Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290788\n2. https://vuldb.com/?ctiid.290788\n3. https://vuldb.com/?submit.469771\n4. https://github.com/donglight/bookstore/issues/12\n5. https://github.com/donglight/bookstore/issues/12#issue-2760934170", "creation_timestamp": "2025-01-09T00:13:06.000000Z"}, {"uuid": "585592c9-589c-4858-b135-110111fbb7bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13197", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/859", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13197\n\ud83d\udd39 Description: A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0.0. It has been rated as problematic. This issue affects the function updateUser of the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T00:00:17.447Z\n\ud83d\udccf Modified: 2025-01-09T00:00:17.447Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290789\n2. https://vuldb.com/?ctiid.290789\n3. https://vuldb.com/?submit.469772\n4. https://github.com/donglight/bookstore/issues/13\n5. https://github.com/donglight/bookstore/issues/13#issue-2760943787", "creation_timestamp": "2025-01-09T00:12:59.000000Z"}, {"uuid": "8701587f-7e0f-482a-9143-c575f60d23e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13203", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/876", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13203\n\ud83d\udd39 Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T02:00:15.952Z\n\ud83d\udccf Modified: 2025-01-09T02:00:15.952Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290796\n2. https://vuldb.com/?ctiid.290796\n3. https://www.websecurityinsights.my.id/2024/12/ecommerce-php-by-kurniaramadhan-sql.html?m=1", "creation_timestamp": "2025-01-09T03:13:02.000000Z"}, {"uuid": "ac84b9d7-be85-4d12-9663-1788ad5d1ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13204", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/875", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13204\n\ud83d\udd39 Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blog_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T02:00:17.765Z\n\ud83d\udccf Modified: 2025-01-09T02:00:17.765Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290797\n2. https://vuldb.com/?ctiid.290797\n3. https://www.websecurityinsights.my.id/2024/12/ecommerce-php-by-kurniaramadhan-sql.html?m=1", "creation_timestamp": "2025-01-09T03:12:59.000000Z"}, {"uuid": "66fa143a-5824-4c41-b63c-76615ca159e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13194", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/863", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13194\n\ud83d\udd39 Description: A vulnerability was found in Sucms 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/admin_members.php?ac=search. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-08T23:31:04.850Z\n\ud83d\udccf Modified: 2025-01-08T23:31:04.850Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290786\n2. https://vuldb.com/?ctiid.290786\n3. https://vuldb.com/?submit.469566\n4. https://github.com/Upgradeextension/Sucms-v1.0SQLinjection/blob/main/README.md", "creation_timestamp": "2025-01-09T00:13:27.000000Z"}, {"uuid": "ca0d050f-f410-4aa7-b9cc-19bafd444e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13199", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/872", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13199\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in langhsu Mblog Blog System 3.5.0. Affected by this vulnerability is an unknown functionality of the file /search of the component Search Bar. The manipulation of the argument kw leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T00:31:06.388Z\n\ud83d\udccf Modified: 2025-01-09T00:31:06.388Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290791\n2. https://vuldb.com/?ctiid.290791\n3. https://vuldb.com/?submit.470430\n4. https://github.com/cydtseng/Vulnerability-Research/blob/main/mblog/ReflectedXSS-Search.md", "creation_timestamp": "2025-01-09T01:17:05.000000Z"}, {"uuid": "5d6026de-fdb7-4538-9c07-6e94795f12c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13202", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/877", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13202\n\ud83d\udd39 Description: A vulnerability was found in wander-chu SpringBoot-Blog 1.0 and classified as problematic. This issue affects the function modifiyArticle of the file src/main/java/com/my/blog/website/controller/admin/PageController.java of the component Blog Article Handler. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T01:31:06.386Z\n\ud83d\udccf Modified: 2025-01-09T01:31:06.386Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290795\n2. https://vuldb.com/?ctiid.290795\n3. https://vuldb.com/?submit.470914\n4. https://github.com/wander-chu/SpringBoot-Blog/issues/7\n5. https://github.com/wander-chu/SpringBoot-Blog/issues/7#issue-2761643235", "creation_timestamp": "2025-01-09T03:13:06.000000Z"}, {"uuid": "5154e623-1c01-4f0f-9923-21ed8fa71a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13213", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/881", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13213\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T04:00:15.391Z\n\ud83d\udccf Modified: 2025-01-09T04:00:15.391Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290818\n2. https://vuldb.com/?ctiid.290818\n3. https://vuldb.com/?submit.471444\n4. https://github.com/SingMR/HouseRent/issues/15\n5. https://github.com/SingMR/HouseRent/issues/15#issue-2762127702", "creation_timestamp": "2025-01-09T04:14:08.000000Z"}, {"uuid": "d86b33e0-550f-46ee-b138-735fa5e1846d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13517", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13517\n\ud83d\udd39 Description: The Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title value in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-18T07:05:09.175Z\n\ud83d\udccf Modified: 2025-01-18T07:05:09.175Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8d745937-4b0a-480a-9771-8af3288ee98f?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3131805%40easy-digital-downloads&new=3131805%40easy-digital-downloads&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T07:57:22.000000Z"}, {"uuid": "69e134ee-69d2-4c60-8e28-fd9b0e8c4ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13209", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/964", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13209\n\ud83d\udd39 Description: A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the component Structure Management Page. The manipulation of the argument Article Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T03:00:15.362Z\n\ud83d\udccf Modified: 2025-01-09T15:50:00.953Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290814\n2. https://vuldb.com/?ctiid.290814\n3. https://vuldb.com/?submit.466396\n4. https://geochen.medium.com/redaxo-cms-5-18-1-cross-site-scripting-7c9a872c72f6", "creation_timestamp": "2025-01-09T16:17:20.000000Z"}, {"uuid": "1f50bece-2136-4f23-9524-9e4f3f79760b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13248", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13248\n\ud83d\udd39 Description: Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0.\n\ud83d\udccf Published: 2025-01-09T18:53:58.956Z\n\ud83d\udccf Modified: 2025-01-09T18:53:58.956Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-012", "creation_timestamp": "2025-01-09T19:19:59.000000Z"}, {"uuid": "cd4a49db-41f2-46f1-a9b1-9319e03896bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13242", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1039", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13242\n\ud83d\udd39 Description: Exposed Dangerous Method or Function vulnerability in Drupal Swift Mailer allows Resource Location Spoofing.This issue affects Swift Mailer: *.*.\n\ud83d\udccf Published: 2025-01-09T18:49:16.322Z\n\ud83d\udccf Modified: 2025-01-09T18:49:16.322Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-006", "creation_timestamp": "2025-01-09T19:22:56.000000Z"}, {"uuid": "8c2b0b0c-7697-4273-b81f-b8bce726c079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13288", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1149", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13288\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.\n\ud83d\udccf Published: 2025-01-09T20:14:17.954Z\n\ud83d\udccf Modified: 2025-01-10T14:51:10.361Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-052", "creation_timestamp": "2025-01-10T15:03:44.000000Z"}, {"uuid": "90259810-5cb1-464a-b584-0bc958ad9f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13260", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13260\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate queue importer allows Cross Site Request Forgery.This issue affects Migrate queue importer: from 0.0.0 before 2.1.1.\n\ud83d\udccf Published: 2025-01-09T19:12:11.941Z\n\ud83d\udccf Modified: 2025-01-10T16:42:29.368Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-024", "creation_timestamp": "2025-01-10T17:03:56.000000Z"}, {"uuid": "fc7bf77c-b68e-4b26-9245-a653260d9993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13251\n\ud83d\udd39 Description: Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1.\n\ud83d\udccf Published: 2025-01-09T18:58:16.356Z\n\ud83d\udccf Modified: 2025-01-09T18:58:16.356Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-015", "creation_timestamp": "2025-01-09T19:17:54.000000Z"}, {"uuid": "4b6b6738-e083-40a5-977c-96d3045c82cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13244", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13244\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate Tools allows Cross Site Request Forgery.This issue affects Migrate Tools: from 0.0.0 before 6.0.3.\n\ud83d\udccf Published: 2025-01-09T18:50:23.406Z\n\ud83d\udccf Modified: 2025-01-09T18:50:23.406Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-008", "creation_timestamp": "2025-01-09T19:22:27.000000Z"}, {"uuid": "7e403a50-836e-465f-bce8-21dc1d7e22dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13245", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1036", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13245\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting (XSS).This issue affects CKEditor 4 LTS - WYSIWYG HTML editor: from 1.0.0 before 1.0.1.\n\ud83d\udccf Published: 2025-01-09T18:51:18.052Z\n\ud83d\udccf Modified: 2025-01-09T18:51:18.052Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-009", "creation_timestamp": "2025-01-09T19:22:12.000000Z"}, {"uuid": "cd57ef9a-a143-431f-95ae-1b81f20fd2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13259\n\ud83d\udd39 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.\n\ud83d\udccf Published: 2025-01-09T19:11:25.339Z\n\ud83d\udccf Modified: 2025-01-09T19:11:25.339Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-023", "creation_timestamp": "2025-01-09T19:15:03.000000Z"}, {"uuid": "a25d24df-4974-421b-8538-b6affc457d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1022", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13257\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3.\n\ud83d\udccf Published: 2025-01-09T19:04:57.424Z\n\ud83d\udccf Modified: 2025-01-09T19:04:57.424Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-021", "creation_timestamp": "2025-01-09T19:15:42.000000Z"}, {"uuid": "fd439d89-e70a-4cba-ac66-a0469f0adab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13258\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13.\n\ud83d\udccf Published: 2025-01-09T19:05:29.925Z\n\ud83d\udccf Modified: 2025-01-09T19:05:29.925Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-022", "creation_timestamp": "2025-01-09T19:15:31.000000Z"}, {"uuid": "7328e0ff-76ba-4e71-85d7-98fc5ee947d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13249", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1030", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13249\n\ud83d\udd39 Description: Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1.2.\n\ud83d\udccf Published: 2025-01-09T18:55:21.700Z\n\ud83d\udccf Modified: 2025-01-09T18:55:21.700Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-013", "creation_timestamp": "2025-01-09T19:18:34.000000Z"}, {"uuid": "1426c358-40dc-4f19-8616-8dc32a14c696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13250\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6.\n\ud83d\udccf Published: 2025-01-09T18:57:50.019Z\n\ud83d\udccf Modified: 2025-01-09T18:57:50.019Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-014", "creation_timestamp": "2025-01-09T19:18:08.000000Z"}, {"uuid": "9ad559ca-7264-424c-83f4-6d78e7e9ddb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1027", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13252\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0.\n\ud83d\udccf Published: 2025-01-09T18:58:53.806Z\n\ud83d\udccf Modified: 2025-01-09T18:58:53.806Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-016", "creation_timestamp": "2025-01-09T19:17:30.000000Z"}, {"uuid": "6c6bb277-40fc-42b3-95dd-ba6511dc2e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1026", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13253\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0.\n\ud83d\udccf Published: 2025-01-09T18:59:22.054Z\n\ud83d\udccf Modified: 2025-01-09T18:59:22.054Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-017", "creation_timestamp": "2025-01-09T19:17:09.000000Z"}, {"uuid": "2a8bb7b2-e42f-4dd8-99e2-1677ff78ff7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13237", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13237\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Scripting (XSS).This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.38.\n\ud83d\udccf Published: 2025-01-09T18:15:23.691Z\n\ud83d\udccf Modified: 2025-01-09T20:58:24.055Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-001", "creation_timestamp": "2025-01-09T21:15:33.000000Z"}, {"uuid": "7c7c0fc3-fd22-49c1-bffe-ad50163caab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13282", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1063", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13282\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0.\n\ud83d\udccf Published: 2025-01-09T19:35:48.354Z\n\ud83d\udccf Modified: 2025-01-09T19:35:48.354Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-046", "creation_timestamp": "2025-01-09T20:17:42.000000Z"}, {"uuid": "3f077399-ad15-42ba-b4c4-9c7e34bde850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13283", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1062", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13283\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.\n\ud83d\udccf Published: 2025-01-09T19:36:22.779Z\n\ud83d\udccf Modified: 2025-01-09T19:36:22.779Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-047", "creation_timestamp": "2025-01-09T20:17:40.000000Z"}, {"uuid": "cc858389-dae7-43c8-b6a1-05c2e33b2fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13284", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1061", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13284\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Gutenberg allows Cross Site Request Forgery.This issue affects Gutenberg: from 0.0.0 before 2.13.0, from 3.0.0 before 3.0.5.\n\ud83d\udccf Published: 2025-01-09T19:36:54.376Z\n\ud83d\udccf Modified: 2025-01-09T19:36:54.376Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-048", "creation_timestamp": "2025-01-09T20:17:37.000000Z"}, {"uuid": "dfa023df-470e-4e3a-b17f-939d345f7061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13280", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13280\n\ud83d\udd39 Description: Insufficient Session Expiration vulnerability in Drupal Persistent Login allows Forceful Browsing.This issue affects Persistent Login: from 0.0.0 before 1.8.0, from 2.0.* before 2.2.2.\n\ud83d\udccf Published: 2025-01-09T19:34:03.443Z\n\ud83d\udccf Modified: 2025-01-09T19:34:03.443Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-044", "creation_timestamp": "2025-01-09T20:17:57.000000Z"}, {"uuid": "0f66de87-bebd-4bc3-b5e5-b41bc2d50b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13281", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13281\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.\n\ud83d\udccf Published: 2025-01-09T19:35:17.772Z\n\ud83d\udccf Modified: 2025-01-09T19:35:17.772Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-045", "creation_timestamp": "2025-01-09T20:17:47.000000Z"}, {"uuid": "76f0bf83-2800-4f2d-91a6-b4f1272d105f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13238", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1070", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13238\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Typogrify allows Cross-Site Scripting (XSS).This issue affects Typogrify: from 0.0.0 before 1.3.0.\n\ud83d\udccf Published: 2025-01-09T18:33:30.339Z\n\ud83d\udccf Modified: 2025-01-09T21:01:34.194Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-002", "creation_timestamp": "2025-01-09T21:15:22.000000Z"}, {"uuid": "0c631bdf-dfd3-4260-8332-95c5bfc5bac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13892", "type": "seen", "source": "Telegram/DEIiyQ8B1O6r1F6bVJHeWwE7deeSDUv4jQQ7VPKtsMYCeXrN", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "a70ed348-3361-4b2a-bd36-209590fc9522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13309", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1092", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13309\n\ud83d\udd39 Description: Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1.\n\ud83d\udccf Published: 2025-01-09T20:27:35.812Z\n\ud83d\udccf Modified: 2025-01-09T20:27:35.812Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-073", "creation_timestamp": "2025-01-09T21:17:57.000000Z"}, {"uuid": "b94a5fa8-0733-4507-a30d-a456fadc75cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13183", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13183\n\ud83d\udd39 Description: The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018title_tag\u2019 parameter in all versions up to, and including, 2.10.43 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-10T07:21:46.542Z\n\ud83d\udccf Modified: 2025-01-10T07:21:46.542Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d0f6be2b-5eb6-4828-ae95-7f2253700ee9?source=cve\n2. https://wordpress.org/plugins/themeisle-companion/#developers\n3. https://plugins.trac.wordpress.org/browser/themeisle-companion/trunk/obfx_modules/elementor-extra-widgets/widgets/elementor/pricing-table.php#L118\n4. https://plugins.trac.wordpress.org/changeset/3219568/\n5. https://github.com/Codeinwp/themeisle-companion/commit/47a17c86934cebbfc3f1a812f1afcaa20515c1f7", "creation_timestamp": "2025-01-10T08:15:40.000000Z"}, {"uuid": "2b9e9fab-d577-44a1-8296-c7b917aaa4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13287", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13287\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting (XSS).This issue affects Views SVG Animation: from 0.0.0 before 1.0.1.\n\ud83d\udccf Published: 2025-01-09T20:13:41.775Z\n\ud83d\udccf Modified: 2025-01-10T16:56:41.515Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-051", "creation_timestamp": "2025-01-10T17:03:23.000000Z"}, {"uuid": "e7ff6a80-3d92-44b8-b720-62047b99bad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13308", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1093", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13308\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Back Button allows Cross-Site Scripting (XSS).This issue affects Browser Back Button: from 1.0.0 before 2.0.2.\n\ud83d\udccf Published: 2025-01-09T20:27:03.983Z\n\ud83d\udccf Modified: 2025-01-09T20:27:03.983Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-072", "creation_timestamp": "2025-01-09T21:18:03.000000Z"}, {"uuid": "db79ec88-4063-4237-92ca-0911c85e957d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13318", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13318\n\ud83d\udd39 Description: The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary pages and posts.\n\ud83d\udccf Published: 2025-01-10T11:10:45.380Z\n\ud83d\udccf Modified: 2025-01-10T11:10:45.380Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6a1a9e22-d174-43fc-aab6-f6968067a290?source=cve\n2. https://plugins.trac.wordpress.org/browser/essential-wp-real-estate/trunk/src/Common/Ajax/Ajax.php#L724", "creation_timestamp": "2025-01-10T12:05:18.000000Z"}, {"uuid": "0d056cb0-78c8-4803-bd3f-21a9adf50574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13130", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1134", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13130\n\ud83d\udd39 Description: A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-05T01:00:12.751Z\n\ud83d\udccf Modified: 2025-01-10T13:16:54.363Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290204\n2. https://vuldb.com/?ctiid.290204\n3. https://vuldb.com/?submit.464260\n4. https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4", "creation_timestamp": "2025-01-10T14:05:45.000000Z"}, {"uuid": "91d242ff-56ce-4736-9891-625696f6f306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13131", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1133", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13131\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-05T03:00:14.594Z\n\ud83d\udccf Modified: 2025-01-10T13:16:56.472Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290205\n2. https://vuldb.com/?ctiid.290205\n3. https://vuldb.com/?submit.464258\n4. https://netsecfish.notion.site/IntelBras-IP-Camera-Information-Disclosure-15e6b683e67c80a89f89daf59daa9ea8?pvs=73", "creation_timestamp": "2025-01-10T14:05:39.000000Z"}, {"uuid": "95697d8f-34b4-4e04-9e33-8684a8a76e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13572", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13572\n\ud83d\udd39 Description: The Precious Metals Charts and Widgets for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nfusion-widget' shortcode in all versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T11:07:31.292Z\n\ud83d\udccf Modified: 2025-01-24T11:07:31.292Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3f2c8c5f-2017-4b22-a864-dc142b3b1afb?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227123%40precious-metals-chart-and-widgets&new=3227123%40precious-metals-chart-and-widgets&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-24T12:04:52.000000Z"}, {"uuid": "d1e86541-9a11-432e-a2a2-666ed2085580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13279", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13279\n\ud83d\udd39 Description: Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.\n\ud83d\udccf Published: 2025-01-09T19:31:45.632Z\n\ud83d\udccf Modified: 2025-01-10T16:29:51.281Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-043", "creation_timestamp": "2025-01-10T17:05:41.000000Z"}, {"uuid": "48376304-9e6c-4bee-9ce8-5fe4f013d342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13278", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1185", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13278\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0.\n\ud83d\udccf Published: 2025-01-09T19:31:12.862Z\n\ud83d\udccf Modified: 2025-01-10T16:31:14.194Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-042", "creation_timestamp": "2025-01-10T17:05:21.000000Z"}, {"uuid": "a14e6fe8-fc78-4b7e-af62-c1fbe89f98ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13289", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1184", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13289\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Cookiebot + GTM allows Cross-Site Scripting (XSS).This issue affects Cookiebot + GTM: from 0.0.0 before 1.0.18.\n\ud83d\udccf Published: 2025-01-09T20:15:15.665Z\n\ud83d\udccf Modified: 2025-01-10T16:32:37.239Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-055", "creation_timestamp": "2025-01-10T17:05:11.000000Z"}, {"uuid": "89b40741-8907-46af-a7cd-495b0f8eedc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13304", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1191", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13304\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3.\n\ud83d\udccf Published: 2025-01-09T20:25:04.098Z\n\ud83d\udccf Modified: 2025-01-10T17:53:34.294Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-070", "creation_timestamp": "2025-01-10T18:03:22.000000Z"}, {"uuid": "9867f11b-b9e1-4a64-9fd0-6e1d29015ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13277", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1182", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13277\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Smart IP Ban allows Forceful Browsing.This issue affects Smart IP Ban: from 7.X-1.0 before 7.X-1.1.\n\ud83d\udccf Published: 2025-01-09T19:29:22.124Z\n\ud83d\udccf Modified: 2025-01-10T16:32:51.861Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-041", "creation_timestamp": "2025-01-10T17:04:48.000000Z"}, {"uuid": "4a32b42e-4700-451f-87c4-5edb2dd8a03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13276", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1181", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13276\n\ud83d\udd39 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity (fieldable files) allows Forceful Browsing.This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.39.\n\ud83d\udccf Published: 2025-01-09T19:28:40.601Z\n\ud83d\udccf Modified: 2025-01-10T16:34:18.557Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-040", "creation_timestamp": "2025-01-10T17:04:37.000000Z"}, {"uuid": "0cb0e0fe-3dad-4d82-ac6b-c68a4a111eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13264", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1179", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13264\n\ud83d\udd39 Description: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno module allows PHP Local File Inclusion.This issue affects Opigno module: from 0.0.0 before 3.1.2.\n\ud83d\udccf Published: 2025-01-09T19:15:52.754Z\n\ud83d\udccf Modified: 2025-01-10T16:36:51.312Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-028", "creation_timestamp": "2025-01-10T17:04:25.000000Z"}, {"uuid": "2ce5773d-c401-4713-9999-e740f3d96c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13239", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1208", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13239\n\ud83d\udd39 Description: Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.\n\ud83d\udccf Published: 2025-01-09T18:35:46.333Z\n\ud83d\udccf Modified: 2025-01-10T17:18:02.874Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-003", "creation_timestamp": "2025-01-10T18:04:29.000000Z"}, {"uuid": "d75b0d1a-7f09-4b65-8617-6644c63a7821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13303", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13303\n\ud83d\udd39 Description: Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2.\n\ud83d\udccf Published: 2025-01-09T20:24:30.952Z\n\ud83d\udccf Modified: 2025-01-10T17:55:12.067Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-069", "creation_timestamp": "2025-01-10T18:03:20.000000Z"}, {"uuid": "7a482933-bb59-433a-9e99-40240de7f9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13302", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13302\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3.\n\ud83d\udccf Published: 2025-01-09T20:24:05.171Z\n\ud83d\udccf Modified: 2025-01-10T17:56:17.360Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-068", "creation_timestamp": "2025-01-10T18:03:17.000000Z"}, {"uuid": "f0170121-290e-41e4-af1c-b006a96e6266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13902", "type": "seen", "source": "Telegram/P3HZdf4vbH8p2-v6dd089xCuFCjXn2k-dOnSPH94E7lbu_Xy", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "94d6fe62-2a00-41b8-9d05-1e40e4f4b9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1394", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-01-13T08:35:31.150Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "creation_timestamp": "2025-01-13T09:11:16.000000Z"}, {"uuid": "06a3655c-d678-46b0-9da7-c43c1f9d2bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13502", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2129", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13502\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19.\n\n\nThe `commit_multicast` page used to configure multicasts in the modem's web administration interface uses improperly parses incoming data from the request before passing it to an `eval` statement in a bash script. This allows attackers to inject arbitrary shell commands.\n\ud83d\udccf Published: 2025-01-17T14:01:03.084Z\n\ud83d\udccf Modified: 2025-01-17T14:49:20.740Z\n\ud83d\udd17 References:\n1. https://doi.org/10.1145/3643833.3656139\n2. https://www.youtube.com/watch?v=-pxmly8xeas", "creation_timestamp": "2025-01-17T14:56:39.000000Z"}, {"uuid": "3a94d1b7-ab87-4a13-9b93-d14b6e0e75c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13897", "type": "seen", "source": "Telegram/4JQLWnQNXJFGISSo9VMJyBDgNGLwnrHcvMFhkQuQwLVRERnP", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "9062b62d-6625-4762-ba1a-2c68b586c9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13179", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1534", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13179\n\ud83d\udd39 Description: Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.\n\ud83d\udccf Published: 2025-01-14T16:51:57.334Z\n\ud83d\udccf Modified: 2025-01-14T16:51:57.334Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs", "creation_timestamp": "2025-01-14T17:21:19.000000Z"}, {"uuid": "c8e5c2d8-bdb1-499c-8d92-fd83353e9fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13180", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1532", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13180\n\ud83d\udd39 Description: Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011.\n\ud83d\udccf Published: 2025-01-14T16:52:41.501Z\n\ud83d\udccf Modified: 2025-01-14T16:52:41.501Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs", "creation_timestamp": "2025-01-14T17:21:13.000000Z"}, {"uuid": "254f2e14-d071-4065-ad1f-b626eae2d840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13324", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13324\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-01-13T20:43:52.377Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-01-13T21:12:10.000000Z"}, {"uuid": "ba8107c6-5023-4142-80e0-000ac8adc5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13323", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1460", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13323\n\ud83d\udd39 Description: The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'booking' shortcode in all versions up to, and including, 10.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-14T05:24:39.032Z\n\ud83d\udccf Modified: 2025-01-14T05:24:39.032Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/37731e51-33ce-4ef3-8a13-976c005dc983?source=cve\n2. https://plugins.trac.wordpress.org/browser/booking/trunk/js/client.js#L270\n3. https://plugins.trac.wordpress.org/changeset/3220625/", "creation_timestamp": "2025-01-14T06:09:42.000000Z"}, {"uuid": "ee9d7909-c675-4129-b8a8-77fa544652d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13266", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13266\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4.\n\ud83d\udccf Published: 2025-01-09T19:16:43.918Z\n\ud83d\udccf Modified: 2025-01-14T16:56:00.804Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-030", "creation_timestamp": "2025-01-14T17:20:41.000000Z"}, {"uuid": "dfaf841e-4107-4066-8f6f-658009e2eb9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13156", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1467", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13156\n\ud83d\udd39 Description: The HTML5 Video Player \u2013 mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the \u2018heading\u2019 parameter in all versions up to, and including, 2.5.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-14T08:23:14.833Z\n\ud83d\udccf Modified: 2025-01-14T08:23:14.833Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e0b26af2-d559-49bf-841a-1974360b3ad6?source=cve\n2. https://plugins.trac.wordpress.org/browser/html5-video-player/trunk/dist/frontend.js\n3. https://wordpress.org/plugins/html5-video-player/#developers\n4. https://plugins.trac.wordpress.org/changeset/3221089/", "creation_timestamp": "2025-01-14T09:10:39.000000Z"}, {"uuid": "ea9e5915-14b9-4b80-8ea9-3c0bd1dbf684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13300", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1490", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13300\n\ud83d\udd39 Description: Vulnerability in Drupal Print Anything.This issue affects Print Anything: *.*.\n\ud83d\udccf Published: 2025-01-09T20:23:03.508Z\n\ud83d\udccf Modified: 2025-01-14T15:00:16.586Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-066", "creation_timestamp": "2025-01-14T15:11:20.000000Z"}, {"uuid": "687b6b9b-4052-4077-bbb6-eaea996b5e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13181", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1529", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13181\n\ud83d\udd39 Description: Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.\n\ud83d\udccf Published: 2025-01-14T16:53:36.325Z\n\ud83d\udccf Modified: 2025-01-14T16:53:36.325Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs", "creation_timestamp": "2025-01-14T17:21:04.000000Z"}, {"uuid": "281dd4f4-56cd-4712-8954-cbb4f626a364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13162", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1559", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13162\n\ud83d\udd39 Description: SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848.\n\ud83d\udccf Published: 2025-01-14T17:23:48.256Z\n\ud83d\udccf Modified: 2025-01-14T17:23:48.256Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-14T18:10:14.000000Z"}, {"uuid": "201db468-678d-4909-8819-15543f320406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13164", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1562", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13164\n\ud83d\udd39 Description: An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.\n\ud83d\udccf Published: 2025-01-14T17:22:49.382Z\n\ud83d\udccf Modified: 2025-01-14T17:22:49.382Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-14T18:10:41.000000Z"}, {"uuid": "cb5cbdcb-764b-4f16-ae53-7a616a9cc631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13163", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1561", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13163\n\ud83d\udd39 Description: Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.\n\ud83d\udccf Published: 2025-01-14T17:23:13.781Z\n\ud83d\udccf Modified: 2025-01-14T17:23:13.781Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-14T18:10:34.000000Z"}, {"uuid": "e40f666f-1eb7-436a-a2e2-c8ae0a5168d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13351", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1714", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13351\n\ud83d\udd39 Description: The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rw_image_badge1' shortcode in all versions up to, and including, 5.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-15T09:25:56.149Z\n\ud83d\udccf Modified: 2025-01-15T09:25:56.149Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ff7ead53-4b20-48ba-95cd-118fb4eab330?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3222107/social-testimonials-and-reviews-widget/trunk/social-testimonials-and-reviews-widget.php", "creation_timestamp": "2025-01-15T10:11:12.000000Z"}, {"uuid": "0c39cd4a-a7c3-4706-87c7-f061a0ddcd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13319", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2524", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13319\n\ud83d\udd39 Description: The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 7.6.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-22T07:29:40.540Z\n\ud83d\udccf Modified: 2025-01-22T07:29:40.540Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/69ac1e37-4e31-4dce-a2d6-07a4299995c5?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3224684/themify-builder/trunk/themify/themify-admin.php", "creation_timestamp": "2025-01-22T08:02:00.000000Z"}, {"uuid": "475cd875-254c-45dd-8aa0-858927bf4c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2897", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13409\n\ud83d\udd39 Description: The Post Grid, Slider & Carousel Ultimate \u2013 with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' parameter of the post_type_ajax_handler() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-01-24T11:07:30.708Z\n\ud83d\udccf Modified: 2025-01-24T11:07:30.708Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/38672a45-b7a7-445f-9e77-7050df6920fa?source=cve\n2. https://plugins.trac.wordpress.org/browser/post-grid-carousel-ultimate/tags/1.6.10/includes/classes/ajax.php\n3. https://ja.wordpress.org/plugins/post-grid-carousel-ultimate/\n4. https://plugins.trac.wordpress.org/changeset/3227281/post-grid-carousel-ultimate/tags/1.7/includes/classes/ajax.php", "creation_timestamp": "2025-01-24T12:04:53.000000Z"}, {"uuid": "6a47890a-5fe6-4a72-b67a-26985db84519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13334", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1699", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13334\n\ud83d\udd39 Description: The Car Demon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search_condition' parameter in all versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-15T03:22:29.099Z\n\ud83d\udccf Modified: 2025-01-15T03:22:29.099Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6d50b1c0-9687-4ce2-bfba-c2d6a2fc28dd?source=cve\n2. https://plugins.trac.wordpress.org/browser/car-demon/trunk/search/search-form.php", "creation_timestamp": "2025-01-15T04:14:44.000000Z"}, {"uuid": "2ddeebaa-953d-452f-9871-0b286d8520a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13394", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1705", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13394\n\ud83d\udd39 Description: The ViewMedica 9 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'viewmedica' shortcode in all versions up to, and including, 1.4.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-15T05:24:54.278Z\n\ud83d\udccf Modified: 2025-01-15T05:24:54.278Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b32c1b63-564c-4c38-a149-d5adabda8a8b?source=cve\n2. https://plugins.trac.wordpress.org/browser/viewmedica/trunk/swarm.php\n3. https://wordpress.org/plugins/viewmedica/", "creation_timestamp": "2025-01-15T06:10:52.000000Z"}, {"uuid": "a3e4d023-97b2-4ada-89b3-ee753a89ac36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13215", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13215\n\ud83d\udd39 Description: The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in modules/modal-popup/widgets/modal-popup.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data.\n\ud83d\udccf Published: 2025-01-15T12:44:26.972Z\n\ud83d\udccf Modified: 2025-01-15T12:44:26.972Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4feacb75-0533-4f53-8ce9-3e45ee8336e2?source=cve\n2. https://plugins.trac.wordpress.org/browser/addon-elements-for-elementor-page-builder/trunk/modules/modal-popup/widgets/modal-popup.php#L1058\n3. https://plugins.trac.wordpress.org/changeset/3221982/", "creation_timestamp": "2025-01-15T13:12:04.000000Z"}, {"uuid": "060f705c-953d-4576-b6b1-37fb79fcb9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13355", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1931", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13355\n\ud83d\udd39 Description: The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to limited file uploads due to insufficient file type validation in the upload_file() function in all versions up to, and including, 13.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files on the affected site's server which may make remote code execution possible and is confirmed to make Cross-Site Scripting possible.\n\ud83d\udccf Published: 2025-01-16T09:39:14.156Z\n\ud83d\udccf Modified: 2025-01-16T09:39:14.156Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/82cee07d-871a-4579-aa53-ca0d14315458?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222601%40admin-and-client-message-after-order-for-woocommerce&new=3222601%40admin-and-client-message-after-order-for-woocommerce&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-16T09:55:33.000000Z"}, {"uuid": "c8998f73-2459-4956-a279-d703177e3209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13367", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2105", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13367\n\ud83d\udd39 Description: The Sandbox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the export_download action in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download an entire copy of a sandbox environment which can contain sensitive information like the wp-config.php file.\n\ud83d\udccf Published: 2025-01-17T07:01:27.847Z\n\ud83d\udccf Modified: 2025-01-17T07:01:27.847Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/59880d92-5d75-432f-9fb5-d74b13d101ff?source=cve\n2. https://plugins.trac.wordpress.org/browser/sandbox/trunk/sandbox-ajax.php#L21", "creation_timestamp": "2025-01-17T07:56:38.000000Z"}, {"uuid": "9fa6fff8-360d-4563-a734-6868b16c050c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13169", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2866", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13169\n\ud83d\udd39 Description: An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.\n\ud83d\udccf Published: 2025-01-14T17:18:28.069Z\n\ud83d\udccf Modified: 2025-01-24T04:55:54.205Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-24T05:03:27.000000Z"}, {"uuid": "ee2d5395-0c75-4f93-bb37-a39e245855aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13586", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3057", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13586\n\ud83d\udd39 Description: The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:17.804Z\n\ud83d\udccf Modified: 2025-01-25T07:24:17.804Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b865df96-335c-4856-a5e5-e728fb0645d3?source=cve\n2. https://plugins.trac.wordpress.org/browser/masy-gallery/trunk/inc/masygal-justified-shortcode.php#L33", "creation_timestamp": "2025-01-25T08:05:34.000000Z"}, {"uuid": "fb5274c2-706c-4387-8c49-c92242292460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13378", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2113", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13378\n\ud83d\udd39 Description: The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018style_settings\u2019 parameter in versions 2.9.0.1 up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The attack is only successful in the Chrome web browser, and requires directly browsing the media file via the attachment post.\n\ud83d\udccf Published: 2025-01-17T09:36:39.054Z\n\ud83d\udccf Modified: 2025-01-17T09:36:39.054Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f884ea43-e1a5-4b44-8a24-f68f71b0fcfb?source=cve\n2. https://docs.gravityforms.com/gravityforms-change-log/", "creation_timestamp": "2025-01-17T09:56:18.000000Z"}, {"uuid": "e90c4c2f-8ca0-4c7d-a314-0500163d4da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13333", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2098", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13333\n\ud83d\udd39 Description: The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above and upload permissions granted by an administrator, to upload arbitrary files on the affected site's server which may make remote code execution possible. The function can be exploited only if the \"Display .htaccess?\" setting is enabled.\n\ud83d\udccf Published: 2025-01-17T05:29:27.068Z\n\ud83d\udccf Modified: 2025-01-17T05:29:27.068Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1c8bcbf8-1848-4f7a-89d8-5894de0bb18b?source=cve\n2. https://plugins.trac.wordpress.org/browser/file-manager-advanced/trunk/application/class_fma_connector.php?rev=3200092#L78\n3. https://plugins.trac.wordpress.org/changeset/3222740/", "creation_timestamp": "2025-01-17T05:56:42.000000Z"}, {"uuid": "8b1afece-3c89-4846-ac76-384829bbed72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13366", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2107", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13366\n\ud83d\udd39 Description: The Sandbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'debug' parameter in all versions up to, and including, 0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-17T07:01:27.064Z\n\ud83d\udccf Modified: 2025-01-17T07:01:27.064Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3fc752bb-3f1d-4106-9df1-361564905a55?source=cve\n2. https://wordpress.org/plugins/sandbox/", "creation_timestamp": "2025-01-17T07:56:40.000000Z"}, {"uuid": "e6e5ed49-c252-4773-b98c-cea7209d9764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13386", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2106", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13386\n\ud83d\udd39 Description: The quote-posttype-plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Author field in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T07:01:27.447Z\n\ud83d\udccf Modified: 2025-01-17T07:01:27.447Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4aa09e5b-fc3d-4409-bf2c-dd8aae69eeda?source=cve\n2. https://wordpress.org/plugins/quote-post-type-plugin/", "creation_timestamp": "2025-01-17T07:56:39.000000Z"}, {"uuid": "242246bd-e43f-4662-8554-1e20ff17582d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13398", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2094", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13398\n\ud83d\udd39 Description: The Checkout for PayPal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'checkout_for_paypal' shortcode in all versions up to, and including, 1.0.32 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T04:30:20.060Z\n\ud83d\udccf Modified: 2025-01-17T04:30:20.060Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c2e552b8-84ad-436d-b029-f7dd4534f7d5?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223256%40checkout-for-paypal&new=3223256%40checkout-for-paypal&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-17T04:56:28.000000Z"}, {"uuid": "03ce8394-c07f-4e54-a2de-09bdc2dae452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13401", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2096", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13401\n\ud83d\udd39 Description: The Payment Button for PayPal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_paypal_checkout' shortcode in all versions up to, and including, 1.2.3.35 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T04:30:18.971Z\n\ud83d\udccf Modified: 2025-01-17T04:30:18.971Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/20fc675c-08a4-4d77-9872-335d23146906?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-paypal/trunk/main.php#L72\n3. https://plugins.trac.wordpress.org/browser/wp-paypal/trunk/wp-paypal-checkout.php#L3\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223257%40wp-paypal&new=3223257%40wp-paypal&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-17T04:56:29.000000Z"}, {"uuid": "8c908b2e-3117-4be6-9cd2-d993b81b7d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13434", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2095", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13434\n\ud83d\udd39 Description: The WP Inventory Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-17T04:30:19.689Z\n\ud83d\udccf Modified: 2025-01-17T04:30:19.689Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7e3069d4-12b8-4949-9daf-0e01590799da?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223184%40wp-inventory-manager&new=3223184%40wp-inventory-manager&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-17T04:56:28.000000Z"}, {"uuid": "6e72ba67-5ef2-4560-90fa-252d726ca86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13377", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2114", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13377\n\ud83d\udd39 Description: The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018alt\u2019 parameter in all versions up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T09:36:38.486Z\n\ud83d\udccf Modified: 2025-01-17T09:36:38.486Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/03623f00-2c3c-4590-92fe-a5eaac15b944?source=cve\n2. https://docs.gravityforms.com/gravityforms-change-log/", "creation_timestamp": "2025-01-17T09:56:19.000000Z"}, {"uuid": "a0501bbb-357d-4f10-bf3f-f35e2bce92df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13590", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2514", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13590\n\ud83d\udd39 Description: The Ketchup Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spacer' shortcode in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-22T03:21:31.885Z\n\ud83d\udccf Modified: 2025-01-22T03:21:31.885Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4d25e292-b62b-493e-976c-a5eb95505065?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3222176/", "creation_timestamp": "2025-01-22T04:00:59.000000Z"}, {"uuid": "28cf6cee-bf92-4288-b778-0ce5e613f88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13503", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13503\n\ud83d\udd39 Description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM (Updating signaling process in the swdownload binary modules) allows Local Execution of Code, Remote Code Inclusion.\nThis issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The issue is both present on the PowerPC versions of the modem and the ARM versions.\n\nA stack buffer buffer overflow in the swdownload binary allows attackers to execute arbitrary code. The parse_INFO function uses an unrestricted `sscanf` to read a string of an incoming network packet into a statically sized buffer.\n\ud83d\udccf Published: 2025-01-17T13:52:35.803Z\n\ud83d\udccf Modified: 2025-01-17T16:01:06.569Z\n\ud83d\udd17 References:\n1. https://doi.org/10.1145/3643833.3656139\n2. https://www.youtube.com/watch?v=-pxmly8xeas", "creation_timestamp": "2025-01-17T16:57:08.000000Z"}, {"uuid": "873dc4bc-3b81-4ff1-998d-0d0b154da6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13444", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2411", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13444\n\ud83d\udd39 Description: The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-21T11:09:47.099Z\n\ud83d\udccf Modified: 2025-01-21T14:49:02.298Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dafc40bf-833a-4d42-b9bc-c7cf2b234ef5?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-form.php#L253\n3. https://wordpress.org/plugins/wp-greet/#developers\n4. https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-admin.php#L124\n5. https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-admin.php#L350\n6. https://plugins.trac.wordpress.org/changeset/3225035/", "creation_timestamp": "2025-01-21T15:00:48.000000Z"}, {"uuid": "8b84499a-e0fc-47cb-a7c6-349734c80024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2291", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13375\n\ud83d\udd39 Description: The Adifier System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.1.7. This is due to the plugin not properly validating a user's identity prior to updating their details like password through the adifier_recover() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-01-18T08:26:39.825Z\n\ud83d\udccf Modified: 2025-01-18T08:26:39.825Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fbf2aeed-0f18-4ef6-aff8-9e8c4531d789?source=cve\n2. https://themeforest.net/item/adifier-classified-ads-wordpress-theme/21633950", "creation_timestamp": "2025-01-18T08:58:13.000000Z"}, {"uuid": "cb6d375e-0e7a-437e-91f6-1434c8614dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13391", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13391\n\ud83d\udd39 Description: The MicroPayments \u2013 Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_content_upload_guest' shortcode in all versions up to, and including, 2.9.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:05:06.023Z\n\ud83d\udccf Modified: 2025-01-18T07:05:06.023Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1b3948ef-11be-450d-ad20-e4bebc16e790?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3224254%40paid-membership&new=3224254%40paid-membership&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T07:57:29.000000Z"}, {"uuid": "483ad264-bce1-48e6-824b-47905bb9a80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13393", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2279", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13393\n\ud83d\udd39 Description: The Video Share VOD \u2013 Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_videos' shortcode in all versions up to, and including, 2.6.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:05:10.788Z\n\ud83d\udccf Modified: 2025-01-18T07:05:10.788Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f9e85d85-76cd-4606-918b-87f07098c967?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3224274%40video-share-vod&new=3224274%40video-share-vod&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T07:57:15.000000Z"}, {"uuid": "25624142-fe90-4a93-9d99-ea7189824049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13433", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2278", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13433\n\ud83d\udd39 Description: The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:05:11.206Z\n\ud83d\udccf Modified: 2025-01-18T07:05:11.206Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fe82b7ee-d09b-4eeb-a7d6-914b8b24368b?source=cve\n2. https://wordpress.org/plugins/utilities-for-mtg/", "creation_timestamp": "2025-01-18T07:57:15.000000Z"}, {"uuid": "48d13936-6550-4ba0-923d-fbdf78565b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13392", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2277", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13392\n\ud83d\udd39 Description: The Rate Star Review Vote \u2013 AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_reviews' shortcode in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:11:24.414Z\n\ud83d\udccf Modified: 2025-01-18T07:11:24.414Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/eb5a85ba-9545-4d64-ac7c-6b856e4ab354?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3224268%40rate-star-review&new=3224268%40rate-star-review&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T07:57:14.000000Z"}, {"uuid": "f20ea38e-0b8f-4762-9681-de83092ba513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13515", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2274", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13515\n\ud83d\udd39 Description: The Image Source Control Lite \u2013 Show Image Credits and Captions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'path' parameter in all versions up to, and including, 2.28.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-18T05:33:49.723Z\n\ud83d\udccf Modified: 2025-01-18T05:33:49.723Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c4debc89-d5ea-4cf1-8e69-197a75794d0b?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3188412%40image-source-control-isc&new=3188412%40image-source-control-isc&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3172639%40image-source-control-isc&new=3172639%40image-source-control-isc&sfp_email=&sfph_mail=\n4. https://github.com/webzunft/image-source-control/commit/d1461b886ed2991281c2eb95e98c9b211e737a93", "creation_timestamp": "2025-01-18T05:57:12.000000Z"}, {"uuid": "51a839f8-07dd-4d7c-9fe8-27fd3e155caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13516", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13516\n\ud83d\udd39 Description: The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-18T05:33:50.087Z\n\ud83d\udccf Modified: 2025-01-18T05:33:50.087Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d2246fac-0d95-4ff5-ad1e-aa1fefa03b4d?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3186251/kubio/trunk/static/kubio-iframe-loader.html", "creation_timestamp": "2025-01-18T05:57:11.000000Z"}, {"uuid": "0d00dbd7-d206-4e1b-ab50-f5353977216d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13385", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13385\n\ud83d\udd39 Description: The JSM Screenshot Machine Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ssm' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:05:09.598Z\n\ud83d\udccf Modified: 2025-01-18T07:05:09.598Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/91019c36-bf33-4cd6-ac54-86c118d086fe?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3224419%40screenshot-machine-shortcode&new=3224419%40screenshot-machine-shortcode&sfp_email=&sfph_mail=\n3. https://github.com/jsmoriss/screenshot-machine-shortcode/blob/main/screenshot-machine-shortcode.php#L92-L119", "creation_timestamp": "2025-01-18T07:57:21.000000Z"}, {"uuid": "c64a8176-1122-4aca-bd3d-d492903df928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13432", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13432\n\ud83d\udd39 Description: The Webcamconsult plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-18T07:05:06.715Z\n\ud83d\udccf Modified: 2025-01-18T07:05:06.715Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3cdad887-dafa-4cf8-ac78-87b9b9b989e2?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223211%40webcamconsult&new=3223211%40webcamconsult&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T07:57:29.000000Z"}, {"uuid": "8ac92d6d-8137-4cb4-9df3-fec11c72014b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13317", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13317\n\ud83d\udd39 Description: The ShipWorks Connector for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.5. This is due to missing or incorrect nonce validation on the 'shipworks-wordpress' page. This makes it possible for unauthenticated attackers to update the services username and password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-18T07:05:07.700Z\n\ud83d\udccf Modified: 2025-01-18T07:05:07.700Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/503c00f5-59e5-4ca2-ac3d-a3f38a993f0d?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223835%40shipworks-e-commerce-bridge&new=3223835%40shipworks-e-commerce-bridge&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T07:57:24.000000Z"}, {"uuid": "ebb3f716-6a17-4b3a-8646-a4d8974b4263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2285", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13519\n\ud83d\udd39 Description: The MarketKing \u2014 Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.9.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Shop Manager-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-18T07:05:08.206Z\n\ud83d\udccf Modified: 2025-01-18T07:05:08.206Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5061e0be-1785-476a-9528-d6f95656bd61?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3180752%40marketking-multivendor-marketplace-for-woocommerce&new=3180752%40marketking-multivendor-marketplace-for-woocommerce&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T07:57:23.000000Z"}, {"uuid": "5a097d17-d8b9-4c4a-a755-a8866651bd96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13184", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13184\n\ud83d\udd39 Description: The The Ultimate WordPress Toolkit \u2013 WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-18T08:26:39.182Z\n\ud83d\udccf Modified: 2025-01-18T08:26:39.182Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/abab29c7-88a9-4c6f-9691-ed9087cde2ff?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/modules/core_extensions/wpext_limit_login_attempts/wpext_limit_login_attempts.php#L105\n3. https://wordpress.org/plugins/wpextended/#developers\n4. https://plugins.trac.wordpress.org/changeset/3220003/", "creation_timestamp": "2025-01-18T08:58:13.000000Z"}, {"uuid": "a802bb5a-7c2c-4214-b07d-72bb35aa188f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13360", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2526", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13360\n\ud83d\udd39 Description: The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector(). This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-01-22T07:29:39.434Z\n\ud83d\udccf Modified: 2025-01-22T07:29:39.434Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5cf6cbba-0e0c-4d2c-90d0-d7e0a5222df2?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3224162/", "creation_timestamp": "2025-01-22T08:02:01.000000Z"}, {"uuid": "20d1371f-5723-4e94-acc1-3f8dbce88d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13495", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2535", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13495\n\ud83d\udd39 Description: The The GamiPress \u2013 Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipress_ajax_get_logs() function in all versions up to, and including, 7.2.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-01-22T11:07:57.323Z\n\ud83d\udccf Modified: 2025-01-22T11:07:57.323Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/55fa8423-9a41-4afe-9401-03d232caa656?source=cve\n2. https://wordpress.org/plugins/gamipress/#developers\n3. https://plugins.trac.wordpress.org/browser/gamipress/trunk/includes/ajax-functions.php#L39\n4. https://plugins.trac.wordpress.org/changeset/3226227/", "creation_timestamp": "2025-01-22T12:01:58.000000Z"}, {"uuid": "a1bbee35-ff32-413b-bf52-d5959b247742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13236", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2725", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13236\n\ud83d\udd39 Description: The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.21.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-23T11:13:28.519Z\n\ud83d\udccf Modified: 2025-01-23T11:13:28.519Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9638fb98-045b-44ec-8b53-15cfa3693ee7?source=cve\n2. https://plugins.trac.wordpress.org/browser/tainacan/tags/0.21.12/classes/api/endpoints/class-tainacan-rest-reports-controller.php#L707\n3. https://plugins.trac.wordpress.org/browser/tainacan/tags/0.21.12/classes/api/endpoints/class-tainacan-rest-reports-controller.php#L732\n4. https://plugins.trac.wordpress.org/changeset/3226475/tainacan/trunk/classes/api/endpoints/class-tainacan-rest-reports-controller.php", "creation_timestamp": "2025-01-23T12:03:37.000000Z"}, {"uuid": "62257381-26a2-41fe-b0e6-a42cf13ee4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13422", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2724", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13422\n\ud83d\udd39 Description: The SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 0.4.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-23T11:13:28.888Z\n\ud83d\udccf Modified: 2025-01-23T11:13:28.888Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a3e095b5-9c0b-45ac-a78d-e50feda348cb?source=cve\n2. https://plugins.trac.wordpress.org/browser/seo-blogger-to-wordpress-301-redirector/trunk/seo-blogger-to-wordpress.php#L356", "creation_timestamp": "2025-01-23T12:03:33.000000Z"}, {"uuid": "87ce4c21-7b1a-4411-80ed-bc73e8c7127c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2360", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13176\n\ud83d\udd39 Description: Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\ud83d\udccf Published: 2025-01-20T13:29:57.047Z\n\ud83d\udccf Modified: 2025-01-20T13:29:57.047Z\n\ud83d\udd17 References:\n1. https://openssl-library.org/news/secadv/20250120.txt\n2. https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f\n3. https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902\n4. https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65\n5. https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467\n6. https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844\n7. https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86\n8. https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded", "creation_timestamp": "2025-01-20T13:59:24.000000Z"}, {"uuid": "08b674d4-bf20-4d6a-9de1-c262ed51560b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13536", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2376", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13536\n\ud83d\udd39 Description: The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.\n\ud83d\udccf Published: 2025-01-21T04:20:57.518Z\n\ud83d\udccf Modified: 2025-01-21T04:20:57.518Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cfbc90b9-af91-49ac-ad3d-a37c17e8ba6d?source=cve\n2. https://plugins.trac.wordpress.org/browser/1003-mortgage-application/trunk/inc/class/fnm/export.php", "creation_timestamp": "2025-01-21T05:01:20.000000Z"}, {"uuid": "356fdbda-a6b9-4b9c-8a04-7036ab8f099a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13406", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2530", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13406\n\ud83d\udd39 Description: The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feed_id' parameter in all versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-22T07:03:51.822Z\n\ud83d\udccf Modified: 2025-01-22T07:03:51.822Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/070f66ae-65aa-4670-8b69-103070a000a4?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226403%40xml-for-google-merchant-center&new=3226403%40xml-for-google-merchant-center&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-22T08:02:08.000000Z"}, {"uuid": "35abc1f4-1513-4304-b3d3-41ad37fccee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13404", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2381", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13404\n\ud83d\udd39 Description: The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-21T09:21:10.545Z\n\ud83d\udccf Modified: 2025-01-21T09:21:10.545Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f01362dc-4f3d-4b77-b802-01b436287237?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225694%40link-library&new=3225694%40link-library&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-21T10:01:17.000000Z"}, {"uuid": "59efa7bf-16ea-436b-86e3-b1b0be706f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13361", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2527", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13361\n\ud83d\udd39 Description: The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload image files and embed shortcode attributes in the image_alt value that will execute when sending a POST request to the attachment page.\n\ud83d\udccf Published: 2025-01-22T07:29:38.809Z\n\ud83d\udccf Modified: 2025-01-22T07:29:38.809Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/11d49c89-43be-4e12-86b5-aa7a72a89803?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3224162/gpt3-ai-content-generator/trunk/classes/wpaicg_image.php", "creation_timestamp": "2025-01-22T08:02:05.000000Z"}, {"uuid": "2853a928-c4c4-4e4e-9896-ac9fe4d64a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13171", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2867", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13171\n\ud83d\udd39 Description: Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.\n\ud83d\udccf Published: 2025-01-14T17:16:48.419Z\n\ud83d\udccf Modified: 2025-01-24T04:55:52.846Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-24T05:03:27.000000Z"}, {"uuid": "cc96c354-57ee-43d8-abe0-972fd5436c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13408", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2891", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13408\n\ud83d\udd39 Description: The Post Grid, Slider & Carousel Ultimate \u2013 with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' attribute of the `pgcu` shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php files can be uploaded and included.\n\ud83d\udccf Published: 2025-01-24T11:07:33.334Z\n\ud83d\udccf Modified: 2025-01-24T11:07:33.334Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ff346465-62c2-4a2b-8a4a-c88558d7cabd?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3227281/post-grid-carousel-ultimate/tags/1.7/includes/classes/shortcode.php", "creation_timestamp": "2025-01-24T12:04:45.000000Z"}, {"uuid": "79cc65cf-2d2f-413f-8dd3-0d4d44ade105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13584", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2515", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13584\n\ud83d\udd39 Description: The Picture Gallery \u2013 Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_pictures' shortcode in all versions up to, and including, 1.5.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-22T03:21:31.223Z\n\ud83d\udccf Modified: 2025-01-22T03:21:31.223Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0f721733-2245-4d8d-9881-91cc0b48551b?source=cve\n2. https://plugins.trac.wordpress.org/browser/picture-gallery/trunk/inc/shortcodes.php#L49\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218329%40picture-gallery&new=3218329%40picture-gallery&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-22T04:00:59.000000Z"}, {"uuid": "b879f253-7e6a-4f83-87cb-3290b3ed32e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13426", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2513", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13426\n\ud83d\udd39 Description: The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries. Those queries are stored and results are not displayed to the attacker, which means they cannot be exploited to obtain any additional information about the database. However, a properly configured payload allows for the injection of malicious JavaScript resulting in Stored Cross-Site Scripting.\n\ud83d\udccf Published: 2025-01-22T02:20:24.893Z\n\ud83d\udccf Modified: 2025-01-22T02:20:24.893Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b76de574-2627-46cd-9817-134a009ac3bd?source=cve\n2. https://github.com/lesterchan/wp-polls/blob/97ab44c2d4c3a3d308ce8b87dae8b2a8f7147f0e/wp-polls.php#L1378\n3. https://github.com/lesterchan/wp-polls/blob/97ab44c2d4c3a3d308ce8b87dae8b2a8f7147f0e/wp-polls.php#L1416\n4. https://github.com/lesterchan/wp-polls/blob/97ab44c2d4c3a3d308ce8b87dae8b2a8f7147f0e/polls-logs.php#L97\n5. https://github.com/lesterchan/wp-polls/blob/97ab44c2d4c3a3d308ce8b87dae8b2a8f7147f0e/polls-logs.php#L294\n6. https://github.com/WordPress/wordpress-develop/blob/a82874058f58575dbba64ce09b6dcbd43ccf5fdc/src/wp-includes/default-constants.php#L249\n7. https://wordpress.org/plugins/wp-polls/\n8. https://github.com/lesterchan/wp-polls\n9. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3224709%40wp-polls%2Ftrunk&old=2949758%40wp-polls%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-22T03:01:39.000000Z"}, {"uuid": "eda9e81a-4a09-44e1-8e9a-c61d364b90fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13499", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2534", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13499\n\ud83d\udd39 Description: The The GamiPress \u2013 Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_do_shortcode() function in all versions up to, and including, 7.2.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-01-22T11:07:57.919Z\n\ud83d\udccf Modified: 2025-01-22T11:07:57.919Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b30ab159-ff3c-4d46-b182-f8938097b837?source=cve\n2. https://plugins.trac.wordpress.org/browser/gamipress/trunk/includes/functions.php\n3. https://plugins.trac.wordpress.org/browser/gamipress/trunk/includes/functions.php#L645\n4. https://wordpress.org/plugins/gamipress/#developers\n5. https://plugins.trac.wordpress.org/changeset/3226227/", "creation_timestamp": "2025-01-22T12:01:57.000000Z"}, {"uuid": "1bcdfde5-c34d-4022-b3de-fd9da8c304bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13447", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2533", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13447\n\ud83d\udd39 Description: The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hotel_booking_load_order_user AJAX action in all versions up to, and including, 2.1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve a list of registered user emails.\n\ud83d\udccf Published: 2025-01-22T11:07:58.320Z\n\ud83d\udccf Modified: 2025-01-22T11:07:58.320Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bc883e7e-af82-47e1-a0c0-122e6abd6b52?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-hotel-booking/trunk/assets/js/admin/admin.hotel-booking.js#L621\n3. https://wordpress.org/plugins/wp-hotel-booking/#developers\n4. https://plugins.trac.wordpress.org/changeset/3225879/", "creation_timestamp": "2025-01-22T12:01:56.000000Z"}, {"uuid": "d9068b1e-df90-42fd-a0f8-0372daa1d9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2532", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13496\n\ud83d\udd39 Description: The GamiPress \u2013 Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018orderby\u2019 parameter in all versions up to, and including, 7.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-22T11:07:58.693Z\n\ud83d\udccf Modified: 2025-01-22T11:07:58.693Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ea54436c-b623-4049-af19-9995c312476e?source=cve\n2. https://plugins.trac.wordpress.org/browser/gamipress/trunk/libraries/ct/includes/class-ct-query.php#L160\n3. https://plugins.trac.wordpress.org/browser/gamipress/trunk/includes/ajax-functions.php#L39\n4. https://wordpress.org/plugins/gamipress/#developers\n5. https://plugins.trac.wordpress.org/changeset/3226227/", "creation_timestamp": "2025-01-22T12:01:55.000000Z"}, {"uuid": "c99df3bd-24c7-44fe-8e5e-db21306d8262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13340", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2721", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13340\n\ud83d\udd39 Description: The MDTF \u2013 Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdf_results_by_ajax' shortcode in all versions up to, and including, 1.3.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:30.092Z\n\ud83d\udccf Modified: 2025-01-23T11:13:30.092Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fcaeae5b-4047-4f09-8197-6ce2c21cc812?source=cve\n2. https://wordpress.org/plugins/wp-meta-data-filter-and-taxonomy-filter/\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226055%40wp-meta-data-filter-and-taxonomy-filter&new=3226055%40wp-meta-data-filter-and-taxonomy-filter&sfp_email=&sfph_mail=\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3224186%40wp-meta-data-filter-and-taxonomy-filter&new=3224186%40wp-meta-data-filter-and-taxonomy-filter&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-23T12:03:31.000000Z"}, {"uuid": "1cb56a6d-518d-448e-8ed7-6ba22c833b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13593", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13593\n\ud83d\udd39 Description: The BMLT Meeting Map plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.0 via the 'bmlt_meeting_map' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-01-23T09:21:09.348Z\n\ud83d\udccf Modified: 2025-01-23T09:21:09.348Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c22e5765-54bd-4677-947c-8a7c48bdf65b?source=cve\n2. https://plugins.trac.wordpress.org/browser/bmlt-meeting-map/trunk/meeting_map.php#L510\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226454%40bmlt-meeting-map&new=3226454%40bmlt-meeting-map&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-23T10:03:16.000000Z"}, {"uuid": "cf13ae6b-de2b-41c4-b1e5-fb87dbe847fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13091", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13091\n\ud83d\udd39 Description: The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and including, 13.5.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The exploit requires thee ChatBot Conversational Forms plugin and the Conversational Form Builder Pro addon plugin.\n\ud83d\udccf Published: 2025-01-21T23:20:51.231Z\n\ud83d\udccf Modified: 2025-01-22T18:41:37.557Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0f9b6979-2662-4d2f-9656-b880dd80832c?source=cve\n2. https://www.wpbot.pro/", "creation_timestamp": "2025-01-22T19:02:46.000000Z"}, {"uuid": "7465ae91-d5a5-4ff5-bb7d-6a39ff1fca93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13234", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13234\n\ud83d\udd39 Description: The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-23T11:13:27.688Z\n\ud83d\udccf Modified: 2025-01-23T11:13:27.688Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/67db430e-d796-4ace-b5d1-de492edb8ea8?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3221872%40woo-product-tables&new=3221872%40woo-product-tables&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-23T12:03:39.000000Z"}, {"uuid": "e8393f6c-d781-4cd0-a0b7-8b7fbed7fc45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13511", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2718", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13511\n\ud83d\udd39 Description: The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality. The issue exists in the settings_init() function, which processes a reset action based on specific query parameters in the URL. The related delete_settings() function performs a faulty nonce validation check, making the reset operation insecure and susceptible to unauthorized access.\n\ud83d\udccf Published: 2025-01-23T09:21:08.768Z\n\ud83d\udccf Modified: 2025-01-23T09:21:08.768Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6c43b9b4-4394-428a-b381-d6a776fcd130?source=cve\n2. https://plugins.trac.wordpress.org/browser/th-variation-swatches/tags/1.3.1/inc/thvs-settings.php\n3. https://plugins.trac.wordpress.org/changeset/3226822/th-variation-swatches/trunk/inc/thvs-settings.php", "creation_timestamp": "2025-01-23T10:03:16.000000Z"}, {"uuid": "8662f3a8-b6e9-4dbe-b8da-63cdcfd7cf19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13389", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2723", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13389\n\ud83d\udd39 Description: The Cliptakes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cliptakes_input_email' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:29.293Z\n\ud83d\udccf Modified: 2025-01-23T11:13:29.293Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a939be31-7475-4626-ba1b-af9a9d6d5eda?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3226472/cliptakes/tags/1.3.5/public/class-cliptakes-public.php", "creation_timestamp": "2025-01-23T12:03:33.000000Z"}, {"uuid": "e2151115-dccf-4708-a4dd-db84a5d198d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13599", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3063", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13599\n\ud83d\udd39 Description: The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.2.7.5 due to insufficient input sanitization and output escaping of a lesson name. This makes it possible for authenticated attackers, with LP Instructor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:15.533Z\n\ud83d\udccf Modified: 2025-01-25T07:24:15.533Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/67709117-8912-4c09-afcb-0c07345d00e0?source=cve\n2. https://wordpress.org/plugins/learnpress/#developers\n3. https://plugins.trac.wordpress.org/changeset/3226650/", "creation_timestamp": "2025-01-25T08:05:42.000000Z"}, {"uuid": "7bd86282-e10a-451e-93c2-9bc064f00b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13458", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3062", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13458\n\ud83d\udd39 Description: The WordPress SEO Friendly Accordion FAQ with AI assisted content generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'noticefaq' shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:15.896Z\n\ud83d\udccf Modified: 2025-01-25T07:24:15.896Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/713f5bf5-f282-436e-8e8c-18543458bea1?source=cve\n2. https://plugins.trac.wordpress.org/browser/notice-faq/trunk/noticefaq.php#L49", "creation_timestamp": "2025-01-25T08:05:42.000000Z"}, {"uuid": "bc6c4611-fb57-4a7a-9bf9-f0c83efdd428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2871", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13161\n\ud83d\udd39 Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.\n\ud83d\udccf Published: 2025-01-14T17:11:32.061Z\n\ud83d\udccf Modified: 2025-01-24T04:55:44.993Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-24T05:03:33.000000Z"}, {"uuid": "104f81f9-83b7-4772-9941-c86dfb85247f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2870", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13160\n\ud83d\udd39 Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.\n\ud83d\udccf Published: 2025-01-14T17:12:23.237Z\n\ud83d\udccf Modified: 2025-01-24T04:55:46.846Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-24T05:03:33.000000Z"}, {"uuid": "1589ef4f-5d97-4ccc-8462-c51a8b289148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2869", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13158\n\ud83d\udd39 Description: An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.\n\ud83d\udccf Published: 2025-01-14T17:13:29.275Z\n\ud83d\udccf Modified: 2025-01-24T04:55:50.063Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-01-24T05:03:29.000000Z"}, {"uuid": "c1eb295c-08f3-46c4-96fe-a1d0a9c5c946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3134", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13505\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-26T12:15:28.613\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/survey-maker/tags/5.1.3.2/admin/partials/surveys/actions/partials/survey-maker-surveys-actions-tab1.php#L1160\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/fc3c22a2-b766-419c-a481-48e6a73b084c?source=cve", "creation_timestamp": "2025-01-26T13:14:24.000000Z"}, {"uuid": "c81d6915-08c0-4276-8b47-9cebf42c677e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13612", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13612\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Better Messages \u2013 Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'better_messages_live_chat_button' shortcode in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-01T15:32:58Z\n\ud83d\udccf Modified: 2025-02-01T15:32:58Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13612\n2. https://plugins.trac.wordpress.org/browser/bp-better-messages/trunk/inc/shortcodes.php#L125\n3. https://plugins.trac.wordpress.org/browser/bp-better-messages/trunk/inc/shortcodes.php#L127\n4. https://plugins.trac.wordpress.org/browser/bp-better-messages/trunk/inc/shortcodes.php#L84\n5. https://plugins.trac.wordpress.org/changeset/3228965\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/169a857f-1ae0-40f6-8a34-10c573af59c5?source=cve", "creation_timestamp": "2025-02-01T16:16:53.000000Z"}, {"uuid": "ceb339bc-36cc-442e-8e81-406f713537af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13775", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3768", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13775\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajax_delete_message', 'ajax_get_customers_partial_list', and 'ajax_get_admins_list' functions in all versions up to, and including, 17.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts, and read names, emails, and capabilities of all users.\n\ud83d\udccf Published: 2025-02-01T15:32:58Z\n\ud83d\udccf Modified: 2025-02-01T15:32:58Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13775\n2. https://codecanyon.net/item/woocommerce-support-ticket-system/17930050#item-description__change-log\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/72dc919a-c13d-49b4-927d-a0bb837b63dd?source=cve", "creation_timestamp": "2025-02-01T16:16:52.000000Z"}, {"uuid": "32018e1e-24f4-49d8-a56c-864e93d146d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13117", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3168", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-9hcf-78cf-xwqv\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Social Share Buttons for WordPress plugin through 2.7 allows an unauthenticated user to upload arbitrary images and change the path where they are uploaded\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13117\n2. https://wpscan.com/vulnerability/3234cdac-f328-4f1e-a1de-31fbd86aefb9", "creation_timestamp": "2025-01-27T07:08:00.000000Z"}, {"uuid": "599ccf08-1ae5-4a02-a94f-8b4a43d2edb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13052", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3169", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-9grv-p46v-p3fp\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Dental Optimizer Patient Generator App WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13052\n2. https://wpscan.com/vulnerability/671d5eef-c496-4047-9d01-8ab8a94cdc72", "creation_timestamp": "2025-01-27T07:08:00.000000Z"}, {"uuid": "3ec07b9a-baa5-4cd5-bc79-7090c1192bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13662", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3649", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13662\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The eHive Objects Image Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ehive_objects_image_grid' shortcode in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-31T12:33:02Z\n\ud83d\udccf Modified: 2025-01-31T12:33:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13662\n2. https://plugins.trac.wordpress.org/browser/ehive-objects-image-grid/trunk/templates/eHiveObjectsImageGrid.php#L22\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3230975%40ehive-objects-image-grid&new=3230975%40ehive-objects-image-grid&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/638d8ef6-dab0-4cfa-8ecc-af2ded3c6d79?source=cve", "creation_timestamp": "2025-01-31T13:15:00.000000Z"}, {"uuid": "7969f619-9c56-4d69-aa4a-3106237117b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13659", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2875", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13659\n\ud83d\udd39 Description: The Listamester plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T05:23:53.815Z\n\ud83d\udccf Modified: 2025-01-24T05:23:53.815Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/68b4358d-d4b4-415b-a19f-e58b155ceac9?source=cve\n2. https://plugins.trac.wordpress.org/browser/listamester/trunk/includes/class-listamester.php#L105\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225538%40listamester&new=3225538%40listamester&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-24T06:12:33.000000Z"}, {"uuid": "f0573ca4-0282-4f05-8187-d4a9d21e0128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13545", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13545\n\ud83d\udd39 Description: The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.9 via the path parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. If php://filter is enabled on the server, this issue may directly lead to Remote Code Execution.\n\ud83d\udccf Published: 2025-01-24T08:23:41.200Z\n\ud83d\udccf Modified: 2025-01-24T08:23:41.200Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ae07af10-e5fc-4f28-a343-f56c0e2bc324?source=cve\n2. https://themes.trac.wordpress.org/browser/bootstrap-ultimate/1.4.9/docs/index.php#L8", "creation_timestamp": "2025-01-24T09:03:35.000000Z"}, {"uuid": "3242a57d-f37b-4adf-92bf-acc14c96431b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3616", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13222\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13222\n2. https://wpscan.com/vulnerability/069e1f81-448d-4d27-b288-87111dade2f2", "creation_timestamp": "2025-01-31T08:15:08.000000Z"}, {"uuid": "b484cf61-9e22-4d7c-953d-a68a4a2180d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13717", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13717\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae and vcita_ajax_toggle_contact functions in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to enabled and disable widgets.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13717\n2. https://plugins.trac.wordpress.org/browser/lead-capturing-call-to-actions-by-vcita/trunk/vcita-ajax-function.php#L5\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/93800bd9-5d11-4d5b-99b2-4c5c78510af7?source=cve", "creation_timestamp": "2025-01-31T08:14:53.000000Z"}, {"uuid": "ababc704-b1f8-4499-a4d7-3acb1a69a3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3621", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13112\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13112\n2. https://wpscan.com/vulnerability/155df231-30ef-47bb-aa91-a7deb1779bd1", "creation_timestamp": "2025-01-31T08:15:15.000000Z"}, {"uuid": "1b257376-e3e8-4f4e-91d4-618299a15c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13472", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3643", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13472\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T10:15:07.630\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/wc-product-table-lite/trunk/main.php#L1843\n2. https://plugins.trac.wordpress.org/changeset/3231930/\n3. https://wordpress.org/plugins/wc-product-table-lite/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/4f1a1171-3d7b-46a4-982e-fe318e3017b7?source=cve", "creation_timestamp": "2025-01-31T11:24:13.000000Z"}, {"uuid": "1eaf397c-3c69-4ab4-b120-1adf3f9e5c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13732", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3678", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13732\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T09:15:08.363\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/responsive-block-editor-addons/trunk/src/blocks/post-carousel/index.php#L643\n2. https://plugins.trac.wordpress.org/changeset/3231017/\n3. https://wordpress.org/plugins/responsive-block-editor-addons\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/1c0e5c85-72c3-4f09-aade-ec5a82b9cc41?source=cve", "creation_timestamp": "2025-01-31T21:25:07.000000Z"}, {"uuid": "3ecda245-15f4-473c-ad83-990859de9c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13821", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4052", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13821\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and including, 10.10. This is due to the plugin not properly requiring re-verification after a booking has been made and a change is being attempted. This makes it possible for unauthenticated attackers to manipulate their confirmed bookings, even after they have been approved.\n\ud83d\udccf Published: 2025-02-12T09:31:44Z\n\ud83d\udccf Modified: 2025-02-12T09:31:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13821\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3234469%40booking&new=3234469%40booking&sfp_email=&sfph_mail=#file20\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/8a0b961e-ccc3-4da0-b007-bbafa133a3a8?source=cve", "creation_timestamp": "2025-02-12T10:09:04.000000Z"}, {"uuid": "9b432158-151f-4137-9aa9-0439d85dd8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13459", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13459\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:11.440\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wordpress.org/plugins/fusedesk/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/a69a99af-3d1d-4ad2-b6b5-e4fcea56be51?source=cve", "creation_timestamp": "2025-02-12T11:11:14.000000Z"}, {"uuid": "2de60d3b-7938-4ad0-8f49-0f80af6ea757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4232", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13346\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-02-13T09:31:25Z\n\ud83d\udccf Modified: 2025-02-13T09:31:25Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13346\n2. https://avada.com/documentation/avada-changelog\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/1f2f390b-332b-452c-9fe7-ccd1a45390dd?source=cve", "creation_timestamp": "2025-02-13T10:09:32.000000Z"}, {"uuid": "db333d4e-b995-4025-bd5b-0a300ac9c526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13415", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13415\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Food Menu \u2013 Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response() function in all versions up to, and including, 5.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13415\n2. https://plugins.svn.wordpress.org/tlp-food-menu/tags/5.1.4/app/Controllers/Admin/Ajax/Settings.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231030%40tlp-food-menu&new=3231030%40tlp-food-menu&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/ab6dd645-8831-49bc-b6b1-bb153ef79204?source=cve", "creation_timestamp": "2025-01-31T08:15:01.000000Z"}, {"uuid": "ce528ece-3149-48dd-bdac-5b8ca4ad65b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13424", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3610", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13424\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'niwoosc_ajax' AJAX endpoint in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings and modify commission amounts.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13424\n2. https://wordpress.org/plugins/ni-woo-sales-commission\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/ac4a026b-ed1c-4864-8900-1d70d95af6f4?source=cve", "creation_timestamp": "2025-01-31T08:15:01.000000Z"}, {"uuid": "119c95ef-3991-467e-ae08-33eb62488659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13827", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6508", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13827\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Razorpay Subscription Button Elementor Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg() and remove_query_arg() functions without appropriate escaping on the URL in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-05T08:21:56.052Z\n\ud83d\udccf Modified: 2025-03-05T08:21:56.052Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a8cdde8d-db43-4702-81c3-ea2d867baa8d?source=cve\n2. https://plugins.trac.wordpress.org/browser/razorpay-subscription-button-elementor/tags/1.0.3/includes/rzp-payment-buttons.php#L78\n3. https://wordpress.org/plugins/razorpay-subscription-button-elementor/#developers", "creation_timestamp": "2025-03-05T08:35:20.000000Z"}, {"uuid": "0b9824bc-1014-4ae1-b89b-6614b5f9d3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13370", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3052", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13370\n\ud83d\udd39 Description: The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the save_addon_key_license() function in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options to a value of a valid license key.\n\ud83d\udccf Published: 2025-01-25T07:24:19.893Z\n\ud83d\udccf Modified: 2025-01-25T07:24:19.893Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f234d676-86ac-47ab-b8b3-b0459cbb4538?source=cve\n2. https://plugins.trac.wordpress.org/browser/youzify/tags/1.3.2/includes/admin/class-youzify-admin.php?desc=1#L1348", "creation_timestamp": "2025-01-25T08:05:27.000000Z"}, {"uuid": "fe7aa463-49a6-40aa-89d5-985cdbc38f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4422", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13641\n\ud83d\udd25 CVSS Score: 5.8 (CVSS_V3)\n\ud83d\udd39 Description: The Return Refund and Exchange For WooCommerce \u2013 Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/attachment directory which can contain file attachments for order refunds.\n\ud83d\udccf Published: 2025-02-14T06:30:36Z\n\ud83d\udccf Modified: 2025-02-14T06:30:36Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13641\n2. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L127\n3. https://plugins.trac.wordpress.org/changeset/3236486\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/5f88a21d-28a9-4c91-9bf9-6b69f6a420e8?source=cve", "creation_timestamp": "2025-02-14T07:09:55.000000Z"}, {"uuid": "6e7834f1-07fd-4c7f-936e-90a58bfb90f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13467", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3058", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13467\n\ud83d\udd39 Description: The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-25T07:24:17.422Z\n\ud83d\udccf Modified: 2025-01-25T07:24:17.422Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b70a1344-2b55-40c9-a314-80d581e0b019?source=cve\n2. https://wordpress.org/plugins/wp-contact-form7-email-spam-blocker/", "creation_timestamp": "2025-01-25T08:05:35.000000Z"}, {"uuid": "f4c23255-dba0-423e-a543-a2d3a31977c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13721", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13721\n\ud83d\udd39 Description: The Plethora Plugins Tabs + Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the anchor parameter in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T05:30:07.128Z\n\ud83d\udccf Modified: 2025-01-25T05:30:07.128Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9755e5d4-dbf6-4778-84d6-cc967e8afb48?source=cve\n2. https://plugins.trac.wordpress.org/browser/plethora-tabs-accordions/trunk/plethoraplugins-tabs.php#L423", "creation_timestamp": "2025-01-25T06:05:28.000000Z"}, {"uuid": "7f868bbb-1882-43f5-aa60-8cc13e1c9bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13709", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3045", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13709\n\ud83d\udd39 Description: The Linear plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.1. This is due to missing or incorrect nonce validation on the 'linear-debug'. This makes it possible for unauthenticated attackers to reset the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-25T03:21:18.130Z\n\ud83d\udccf Modified: 2025-01-25T03:21:18.130Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/83af4ee4-2763-4706-8cb2-fa102a72be68?source=cve\n2. https://plugins.trac.wordpress.org/browser/linear/trunk/includes/class-linear-settings.php#L1874", "creation_timestamp": "2025-01-25T04:04:51.000000Z"}, {"uuid": "fcfe9388-c155-447e-aca2-dd81e0af7797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13055", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-c33j-w5w4-w9q4\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13055\n2. https://wpscan.com/vulnerability/91178272-ed7e-412c-a187-e360a1313004", "creation_timestamp": "2025-01-27T07:07:56.000000Z"}, {"uuid": "64637fbd-9af8-4414-9856-6f9d58f1b344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13715", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3514", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13715\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T14:15:36.513\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/zstore-manager-basic/trunk/zstore-manager.php#L441\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/974ffc87-369a-431e-b601-8c6679d963c3?source=cve", "creation_timestamp": "2025-01-30T19:19:49.000000Z"}, {"uuid": "3aeb4c68-7b3c-4ce6-a697-e827778b2614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13441", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13441\n\ud83d\udd39 Description: The Bilingual Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bl_otherlang_link_1 parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:18.755Z\n\ud83d\udccf Modified: 2025-01-25T07:24:18.755Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/daeda8d7-1bff-4258-9953-b4303f1778d0?source=cve\n2. https://plugins.trac.wordpress.org/browser/bilingual-linker/tags/2.4/bilingual-linker.php#L291", "creation_timestamp": "2025-01-25T08:05:30.000000Z"}, {"uuid": "81838a8c-80ea-421f-8ad1-5ac69418b824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13551", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3054", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13551\n\ud83d\udd39 Description: The ABC Notation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abcjs' shortcode in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:19.183Z\n\ud83d\udccf Modified: 2025-01-25T07:24:19.183Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e10930fd-fae0-4554-acf3-da81a124f79d?source=cve\n2. https://plugins.svn.wordpress.org/abc-notation/tags/6.1.3/abc-notation.php", "creation_timestamp": "2025-01-25T08:05:29.000000Z"}, {"uuid": "c35c9348-3dc1-4dfd-b0fe-d4926e781537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13550", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3053", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13550\n\ud83d\udd39 Description: The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the 'file' attribute of the 'abcjs' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-01-25T07:24:19.540Z\n\ud83d\udccf Modified: 2025-01-25T07:24:19.540Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e53a2b7a-7005-451a-88f2-c23d420b4aad?source=cve\n2. https://plugins.svn.wordpress.org/abc-notation/tags/6.1.3/abc-notation.php", "creation_timestamp": "2025-01-25T08:05:28.000000Z"}, {"uuid": "4e26ffba-330a-42a4-ad62-085f4221900e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13368", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3060", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13368\n\ud83d\udd39 Description: The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the youzify_offer_banner() function in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary site options to a value of one.\n\ud83d\udccf Published: 2025-01-25T07:24:16.664Z\n\ud83d\udccf Modified: 2025-01-25T07:24:16.664Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ad2abd5b-3067-4dcd-a650-b543fa03437b?source=cve\n2. https://plugins.trac.wordpress.org/browser/youzify/tags/1.3.2/includes/admin/core/functions/youzify-general-functions.php#L961", "creation_timestamp": "2025-01-25T08:05:37.000000Z"}, {"uuid": "c1a4c30a-9b09-40ef-a055-38738b090378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13548", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13548\n\ud83d\udd39 Description: The Power Ups for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'magic-button' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:15.155Z\n\ud83d\udccf Modified: 2025-01-25T07:24:15.155Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3b7ab552-1ec5-4479-84b9-3e44f6c0354d?source=cve\n2. https://plugins.trac.wordpress.org/browser/power-ups-for-elementor/trunk/modules/magic-buttons-for-elementor/magic_buttons_shortcodes.php\n3. https://wordpress.org/plugins/power-ups-for-elementor/", "creation_timestamp": "2025-01-25T08:05:43.000000Z"}, {"uuid": "cbf7132a-f8eb-4268-b4fc-df24c5d32d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13449", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13449\n\ud83d\udd39 Description: The Boom Fest plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'bf_admin_action' function in all versions up to, and including, 2.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings that change the appearance of the website.\n\ud83d\udccf Published: 2025-01-25T08:23:15.192Z\n\ud83d\udccf Modified: 2025-01-25T08:23:15.192Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/246a66ea-7f2f-44e6-825b-5556eacc33ab?source=cve\n2. https://plugins.trac.wordpress.org/browser/boom-fest/trunk/admin/class-boom-fest-admin.php#L174\n3. https://plugins.trac.wordpress.org/changeset/3227296/", "creation_timestamp": "2025-01-25T09:04:51.000000Z"}, {"uuid": "9f900244-81f3-4005-ad96-ede4fe445bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13450", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3070", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13450\n\ud83d\udd39 Description: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.17.4 via the Webhooks integration. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. The vulnerability can also be exploited in Multisite environments.\n\ud83d\udccf Published: 2025-01-25T08:23:15.871Z\n\ud83d\udccf Modified: 2025-01-25T08:23:15.871Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d935f4c5-5d69-42d9-be22-7a44d9aa885a?source=cve\n2. https://plugins.trac.wordpress.org/browser/bit-form/trunk/includes/Admin/Form/AdminFormHandler.php#L1072\n3. https://plugins.trac.wordpress.org/browser/bit-form/trunk/includes/Admin/Form/AdminFormHandler.php#L1312\n4. https://plugins.trac.wordpress.org/browser/bit-form/trunk/includes/Core/Integration/WebHooks/WebHooksHandler.php#L51\n5. https://plugins.trac.wordpress.org/browser/bit-form/trunk/includes/Core/Integration/WebHooks/WebHooksHandler.php#L96\n6. https://plugins.trac.wordpress.org/browser/bit-form/trunk/includes/Core/Integration/WebHooks/WebHooksHandler.php#L190\n7. https://plugins.trac.wordpress.org/changeset/3227207/", "creation_timestamp": "2025-01-25T09:04:50.000000Z"}, {"uuid": "f02a44c8-9f38-4754-b270-19cdce8cd5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13562\n\ud83d\udd39 Description: The Import WP \u2013 Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads directory. This makes it possible for unauthenticated attackers to extract sensitive data  stored insecurely in the /wp-content/uploads/ directory which can contain information like imported or local user data and files.\n\ud83d\udccf Published: 2025-01-25T11:22:35.290Z\n\ud83d\udccf Modified: 2025-01-25T11:22:35.290Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d6d69ffd-bb39-4fcc-9444-27d1a901e7c9?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3226495/", "creation_timestamp": "2025-01-25T12:05:53.000000Z"}, {"uuid": "ccece2ad-53c9-4ae8-a2bf-7a05372dd9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13094", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3166", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-c75v-42g3-xvcr\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13094\n2. https://wpscan.com/vulnerability/7a75809e-824e-458e-bd01-50dadcea7713", "creation_timestamp": "2025-01-27T07:07:55.000000Z"}, {"uuid": "aa51fa17-6090-4d7f-8165-31ed0a88f59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13396", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3561", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13396\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Frictionless plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'frictionless_form' shortcode[s] in all versions up to, and including, 0.0.23 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-31T03:32:13Z\n\ud83d\udccf Modified: 2025-01-31T03:32:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13396\n2. https://plugins.trac.wordpress.org/browser/frictionless/trunk/frictionless.php\n3. https://wordpress.org/plugins/frictionless\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/b1ec9dce-d0fb-4b7b-a8e4-4ccb474c9d57?source=cve", "creation_timestamp": "2025-01-31T04:12:49.000000Z"}, {"uuid": "c44d9414-90da-4ba9-a55d-3a0e011bda30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13494", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5261", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13494\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. This is due to missing or incorrect nonce validation on the 'wfu_file_details' function. This makes it possible for unauthenticated attackers to modify user data details associated with uploaded files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-25T07:30:31.044Z\n\ud83d\udccf Modified: 2025-02-25T07:30:31.044Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/595a6ab3-0731-4ef4-a385-5dfebbd917f4?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3241028/wp-file-upload", "creation_timestamp": "2025-02-25T08:25:38.000000Z"}, {"uuid": "be452c1c-2fda-42d5-b4fd-88ec955c5fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13505", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-fp6x-mq75-x6gh\n\ud83d\udd25 CVSS Score: N/A (CVSS_V3)\n\ud83d\udd39 Description: The Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018ays_sections[5][questions][8][title]\u2019 parameter in all versions up to, and including, 5.1.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-26T12:30:32Z\n\ud83d\udccf Modified: 2025-01-26T12:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13505\n2. https://plugins.trac.wordpress.org/browser/survey-maker/tags/5.1.3.2/admin/partials/surveys/actions/partials/survey-maker-surveys-actions-tab1.php#L1160\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/fc3c22a2-b766-419c-a481-48e6a73b084c?source=cve", "creation_timestamp": "2025-01-26T13:06:16.000000Z"}, {"uuid": "59072da5-8808-4a32-b961-4849b91bf2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13484", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13484\n\ud83d\udd25 CVSS Score: 8.3 (CVSS_V3)\n\ud83d\udd39 Description: A flaw was found in ArgoCD. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.\n\ud83d\udccf Published: 2025-01-28T18:31:28Z\n\ud83d\udccf Modified: 2025-01-28T20:40:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13484\n2. https://access.redhat.com/security/cve/CVE-2024-13484\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2269376\n4. https://github.com/argoproj/argo-cd", "creation_timestamp": "2025-01-28T21:09:42.000000Z"}, {"uuid": "c3a7a4cd-a878-4c57-8b26-7cd89fd47c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13116", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3159", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-v3w4-79rw-r73c\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Crelly Slider WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13116\n2. https://wpscan.com/vulnerability/1755c8ad-7620-4b12-bba0-013e80c2691b", "creation_timestamp": "2025-01-27T07:07:47.000000Z"}, {"uuid": "2ebbe64f-6dc9-41b2-9b91-fa2706b37256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13057", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3164", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-f5ph-j9m6-qjqc\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13057\n2. https://wpscan.com/vulnerability/6f869a3d-1ac1-4d31-8fe5-9b9795b15b5b", "creation_timestamp": "2025-01-27T07:07:53.000000Z"}, {"uuid": "a4e42527-e163-42a0-b360-838beb61f4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13095", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3170", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-7jq5-8rmw-j9wh\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13095\n2. https://wpscan.com/vulnerability/74e95fb5-025b-4d4d-a279-844b6ee3e57d", "creation_timestamp": "2025-01-27T07:08:01.000000Z"}, {"uuid": "0e33af02-3297-4bd0-ba9d-d87d108d09dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13521", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3247", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13521\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T08:15:29.583\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3060078%40mailup-auto-subscribtion%2Ftags%2F1.1.0&new=3229728%40mailup-auto-subscribtion%2Ftags%2F1.2.0\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/9ee9b2e9-e3fe-43b2-9caf-7246a4201fe9?source=cve", "creation_timestamp": "2025-01-28T09:16:58.000000Z"}, {"uuid": "e1d88d22-d9b4-4bf0-b973-f978d9600556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3366", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13696\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T08:15:19.677\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/flexible-wishlist/trunk/assets/js/front.js\n2. https://plugins.trac.wordpress.org/changeset/3230370/\n3. https://wordpress.org/plugins/flexible-wishlist/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/112456a9-8bb6-4007-87da-6d0fba912498?source=cve", "creation_timestamp": "2025-01-29T09:18:17.000000Z"}, {"uuid": "3a6537fa-ca62-4950-b5fa-6f03bf4a4623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3369", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13696\n\ud83d\udd25 CVSS Score: 7.4 (CVSS_V3)\n\ud83d\udd39 Description: The Flexible Wishlist for WooCommerce \u2013 Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018wishlist_name\u2019 parameter in all versions up to, and including, 1.2.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-29T09:31:42Z\n\ud83d\udccf Modified: 2025-01-29T09:31:42Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13696\n2. https://plugins.trac.wordpress.org/browser/flexible-wishlist/trunk/assets/js/front.js\n3. https://plugins.trac.wordpress.org/changeset/3230370\n4. https://wordpress.org/plugins/flexible-wishlist/#developers\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/112456a9-8bb6-4007-87da-6d0fba912498?source=cve", "creation_timestamp": "2025-01-29T10:10:10.000000Z"}, {"uuid": "bd5ff44c-1164-4353-afa0-2e11ba89e937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13706", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13706\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The WP Image Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'file' parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-30T12:31:18Z\n\ud83d\udccf Modified: 2025-01-30T12:31:19Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13706\n2. https://plugins.trac.wordpress.org/browser/wp-image-uploader/trunk/index.php#L85\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/fea1546c-1d8f-4478-81b7-20a9096e0217?source=cve", "creation_timestamp": "2025-01-30T13:11:26.000000Z"}, {"uuid": "02452bba-b543-4cac-9253-eea563f3547e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13457", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3470", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13457\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.18.1 via the tc-order-id parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view order details of orders they did not place, which includes ticket prices, user emails and order date.\n\ud83d\udccf Published: 2025-01-30T09:30:36Z\n\ud83d\udccf Modified: 2025-01-30T09:30:36Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13457\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3229935%40event-tickets%2Ftags%2F5.18.1.1&old=3227011%40event-tickets%2Ftags%2F5.18.1\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/0cc2261a-889e-40ec-8382-48de65b91b34?source=cve", "creation_timestamp": "2025-01-30T10:11:43.000000Z"}, {"uuid": "75ce6e64-88f3-4e87-a624-753c9c5ca26a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13470", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13470\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Ninja Forms \u2013 The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.8.24 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-30T09:30:37Z\n\ud83d\udccf Modified: 2025-01-30T09:30:37Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13470\n2. https://plugins.trac.wordpress.org/browser/ninja-forms/tags/3.8.23/includes/Display/Render.php#L708\n3. https://plugins.trac.wordpress.org/browser/ninja-forms/tags/3.8.23/includes/Display/Shortcodes.php#L8\n4. https://plugins.trac.wordpress.org/browser/ninja-forms/tags/3.8.23/ninja-forms.php#L953\n5. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3229932%40ninja-forms%2Ftrunk&old=3226451%40ninja-forms%2Ftrunk&sfp_email=&sfph_mail=\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/6f2b46a9-d228-43b4-84af-d56218076087?source=cve", "creation_timestamp": "2025-01-30T10:11:42.000000Z"}, {"uuid": "6e36169c-b3ac-4e52-920d-9c82995ec0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13758", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3467", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13758\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.52. This is due to missing or incorrect nonce validation on the cp_contact_form_paypal_check_init_actions() function. This makes it possible for unauthenticated attackers to add discount codes via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-30T09:30:37Z\n\ud83d\udccf Modified: 2025-01-30T09:30:37Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13758\n2. https://plugins.trac.wordpress.org/browser/cp-contact-form-with-paypal/trunk/cp_contactformpp_functions.php#L616\n3. https://plugins.trac.wordpress.org/changeset/3230873\n4. https://wordpress.org/plugins/cp-contact-form-with-paypal/#developers\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/495183b6-dc7c-4ff7-bc99-fc05a10d1269?source=cve", "creation_timestamp": "2025-01-30T10:11:37.000000Z"}, {"uuid": "75b96639-d0aa-442b-8b5e-c01fb55ae7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13758", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3476", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13758\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T09:15:08.547\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/cp-contact-form-with-paypal/trunk/cp_contactformpp_functions.php#L616\n2. https://plugins.trac.wordpress.org/changeset/3230873/\n3. https://wordpress.org/plugins/cp-contact-form-with-paypal/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/495183b6-dc7c-4ff7-bc99-fc05a10d1269?source=cve", "creation_timestamp": "2025-01-30T11:19:02.000000Z"}, {"uuid": "59ccbace-a5e3-4600-bed8-69072caee571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13767", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13767\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).\n\ud83d\udccf Published: 2025-01-31T03:32:14Z\n\ud83d\udccf Modified: 2025-01-31T03:32:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13767\n2. https://wordpress.org/plugins/live-2d\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/23c89d9f-8958-4333-8604-54173c31efac?source=cve", "creation_timestamp": "2025-01-31T04:12:52.000000Z"}, {"uuid": "28651003-1e2b-4c48-8ba1-fb88ae882dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13642", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3468", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13642\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Stratum \u2013 Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-30T09:30:37Z\n\ud83d\udccf Modified: 2025-01-30T09:30:37Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13642\n2. https://plugins.trac.wordpress.org/changeset/3228058#file6\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/7ccaee26-277e-4730-8242-9b5e6a281fcc?source=cve", "creation_timestamp": "2025-01-30T10:11:38.000000Z"}, {"uuid": "fc8cd3f0-b6dd-4014-b808-f23e51e1355e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13269", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3524", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13269\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-09T20:15:35.687\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-033", "creation_timestamp": "2025-01-30T23:19:51.000000Z"}, {"uuid": "1b6bbc6f-93a8-4c38-a3c1-9aea02eb22ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13096", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13096\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:30.837\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ca65c478-30bf-4109-93e0-3aedbf4a8264/", "creation_timestamp": "2025-02-01T07:25:45.000000Z"}, {"uuid": "60cc315d-1724-4ddf-b961-e5b7313405c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13098", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3738", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13098\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:31.010\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/eac71f70-993e-4353-8550-affb24c61c02/", "creation_timestamp": "2025-02-01T07:25:40.000000Z"}, {"uuid": "a48bf132-7878-46a4-a9a9-0aca8411fd0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13371", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13371\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T08:15:08.567\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/g1-nhantv/31b04bc057046ecc54c3552387eb7bca\n2. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/jobapply/model.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fjobapply%2Fmodel.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/a84a4c56-a44e-450d-91fc-024f8ddeedee?source=cve", "creation_timestamp": "2025-02-01T09:26:04.000000Z"}, {"uuid": "31e361e5-9ae7-4572-ad94-7101b250a93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13219", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13219\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13219\n2. https://wpscan.com/vulnerability/3ad02238-dce1-48ce-986f-fef36b110b2d", "creation_timestamp": "2025-01-31T08:15:00.000000Z"}, {"uuid": "e738c8a6-769e-47eb-b817-9584d19daa78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13218", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3617", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13218\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Fast Tube WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13218\n2. https://wpscan.com/vulnerability/79eb9432-3e3c-4a23-88a8-05aa3146061c", "creation_timestamp": "2025-01-31T08:15:09.000000Z"}, {"uuid": "de5c3ef7-fcf9-4284-984c-c2131154c099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13096", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3719", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13096\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13096\n2. https://wpscan.com/vulnerability/ca65c478-30bf-4109-93e0-3aedbf4a8264", "creation_timestamp": "2025-02-01T07:16:11.000000Z"}, {"uuid": "b7edabeb-14b7-4600-8a7d-e0b8da93570e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13343", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13343\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_assign_new_roles() function in all versions up to, and including, 31.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13343\n2. https://codecanyon.net/item/woocommerce-customers-manager/10965432\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/193c9fe9-17bc-47e7-b93d-dfcebcf8004d?source=cve", "creation_timestamp": "2025-02-01T07:16:23.000000Z"}, {"uuid": "379088ee-f004-4ef2-ac41-b347869968b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13732", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3465", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13732\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Responsive Blocks \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018section_tag\u2019 parameter in all versions up to, and including, 1.9.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-30T09:30:37Z\n\ud83d\udccf Modified: 2025-01-30T09:30:37Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13732\n2. https://plugins.trac.wordpress.org/browser/responsive-block-editor-addons/trunk/src/blocks/post-carousel/index.php#L643\n3. https://plugins.trac.wordpress.org/changeset/3231017\n4. https://wordpress.org/plugins/responsive-block-editor-addons\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/1c0e5c85-72c3-4f09-aade-ec5a82b9cc41?source=cve", "creation_timestamp": "2025-01-30T10:11:36.000000Z"}, {"uuid": "290d2d9c-1319-4b6d-9aa7-750920ad717a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13694", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3466", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13694\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the download_pdf_file() function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to extract data from wishlists that they should not have access to.\n\ud83d\udccf Published: 2025-01-30T09:30:37Z\n\ud83d\udccf Modified: 2025-01-30T09:30:37Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13694\n2. https://plugins.trac.wordpress.org/browser/smart-wishlist-for-more-convert/trunk/includes/class-wlfmc-form-handler.php#L607\n3. https://plugins.trac.wordpress.org/browser/smart-wishlist-for-more-convert/trunk/includes/class-wlfmc-wishlist.php#L529\n4. https://plugins.trac.wordpress.org/changeset/3229758\n5. https://wordpress.org/plugins/smart-wishlist-for-more-convert/#developers\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/59fe7630-ab94-419f-aca5-39b74d86ae4e?source=cve", "creation_timestamp": "2025-01-30T10:11:36.000000Z"}, {"uuid": "aa56f7a3-d68f-412a-a9f6-09b2a025bed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13226", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3589", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13226\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.210\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/dd09fe99-2334-4d6f-8a70-e1cd856b1486/", "creation_timestamp": "2025-01-31T07:24:07.000000Z"}, {"uuid": "2cfb5b28-94ad-4715-8689-95c767885033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13216", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3598", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13216\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:28.267\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/ht-event/trunk/includes/widgets/htevent_sponsor.php#L443\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/155f494b-be25-4269-9d3b-379309619bbe?source=cve", "creation_timestamp": "2025-01-31T07:24:19.000000Z"}, {"uuid": "e9dcb850-40ad-4b0a-a151-2bede59dfd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13220\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:28.623\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/33ef27b4-e88f-46ec-9b3f-0a3e16d6f82e/", "creation_timestamp": "2025-01-31T07:24:14.000000Z"}, {"uuid": "095cc23c-8fec-4d97-8e45-053ca6062451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13374", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4017", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13374\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The WP Table Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on thewptm_getFolders AJAX action in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read arbitrary file names and directories.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13374\n2. https://www.joomunited.com/wordpress-products/wp-table-manager\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/128bc7ee-9763-415f-b726-0e63d4b62271?source=cve", "creation_timestamp": "2025-02-12T07:09:34.000000Z"}, {"uuid": "57ec781c-731d-45de-b0c1-7fc5dcd57299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13656", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13656\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions up to, and including, 3.6.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13656\n2. https://themeforest.net/item/click-mag-viral-wordpress-news-magazineblog-theme/18081003\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/ee5df5fe-4213-4d36-aa8f-7eb2710c32b6?source=cve", "creation_timestamp": "2025-02-12T07:09:39.000000Z"}, {"uuid": "3f59dd41-4763-4feb-96f2-0458a70944e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13453", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3484", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13453\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: The The Contact Form & SMTP Plugin for WordPress by PirateForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-01-30T12:31:18Z\n\ud83d\udccf Modified: 2025-01-30T12:31:18Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13453\n2. https://plugins.trac.wordpress.org/browser/pirate-forms/tags/2.6.0/gutenberg/class-pirateforms-gutenberg.php#L145\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3225666%40pirate-forms&old=3219203%40pirate-forms&sfp_email=&sfph_mail=#file163\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/98859214-7acf-4d40-9291-b5669b9614b7?source=cve", "creation_timestamp": "2025-01-30T13:11:29.000000Z"}, {"uuid": "51e9fe94-027d-4760-af20-be279e4f000f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13225\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.117\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8efd7d62-3f74-4108-970e-bd5ed24914ff/", "creation_timestamp": "2025-01-31T07:24:07.000000Z"}, {"uuid": "42ba56c7-37ae-498c-b281-866f821c0200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3518", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13742\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T14:15:36.810\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/worpit-admin-dashboard-plugin/tags/4.4.5/lib/src/LegacyApi/RequestParameters.php#L42\n2. https://plugins.trac.wordpress.org/browser/worpit-admin-dashboard-plugin/tags/4.4.5/src/api/RequestParameters.php#L14\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/6f25b0cc-60ec-49a0-8356-fd3fba97e987?source=cve", "creation_timestamp": "2025-01-30T19:19:55.000000Z"}, {"uuid": "7ce2045a-adea-4555-95eb-fe5c0160f1bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13720", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13720\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T14:15:36.660\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/wp-image-uploader/trunk/index.php#L85\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/4af41f69-1335-4199-bf29-c9699de50a16?source=cve", "creation_timestamp": "2025-01-30T19:19:50.000000Z"}, {"uuid": "9c19adc9-45c4-46e9-a32f-68f19851d838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3608", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13225\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13225\n2. https://wpscan.com/vulnerability/8efd7d62-3f74-4108-970e-bd5ed24914ff", "creation_timestamp": "2025-01-31T08:14:59.000000Z"}, {"uuid": "e8261c6a-4bb2-4c14-bfbd-6daeacfecf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13100", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3601", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:27.970\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b9261010-ab55-4d18-8fd2-2003f8692ae8/", "creation_timestamp": "2025-01-31T07:24:22.000000Z"}, {"uuid": "336f7a08-6412-4a5a-a7e8-56fe80affd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13269", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3534", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13269\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Advanced Varnish allows Forceful Browsing.This issue affects Advanced Varnish: from 0.0.0 before 4.0.11.\n\ud83d\udccf Published: 2025-01-09T21:31:31Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13269\n2. https://www.drupal.org/sa-contrib-2024-033", "creation_timestamp": "2025-01-31T01:12:14.000000Z"}, {"uuid": "b38eb385-e0bd-4cfd-af84-056f2f56c2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13309", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3533", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13309\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1.\n\ud83d\udccf Published: 2025-01-09T21:31:32Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13309\n2. https://www.drupal.org/sa-contrib-2024-073", "creation_timestamp": "2025-01-31T01:12:14.000000Z"}, {"uuid": "5c66f039-852d-4922-bee2-74b0ce53b4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13308", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3537", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13308\n\ud83d\udd25 CVSS Score: 3.7 (CVSS_V3)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Back Button allows Cross-Site Scripting (XSS).This issue affects Browser Back Button: from 1.0.0 before 2.0.2.\n\ud83d\udccf Published: 2025-01-09T21:31:32Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13308\n2. https://www.drupal.org/sa-contrib-2024-072", "creation_timestamp": "2025-01-31T01:12:20.000000Z"}, {"uuid": "bc6d1b63-5a84-42c2-97ea-373fd462bf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13473", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13473\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:11.610\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-worldwide-express-edition/trunk/warehouse-dropship/wild/includes/wwe-ltl-wild-delivery-save.php#L264\n2. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-worldwide-express-edition/trunk/warehouse-dropship/wild/includes/wwe-ltl-wild-delivery-save.php#L387\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215844%40ltl-freight-quotes-worldwide-express-edition&new=3215844%40ltl-freight-quotes-worldwide-express-edition&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e72828e-a6f6-43fc-8a10-d9908004c0fc?source=cve", "creation_timestamp": "2025-02-12T11:11:12.000000Z"}, {"uuid": "b0d99da3-9b9c-49d8-98a0-eb4e88869290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13475", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4070", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13475\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:11.777\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3237693/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/c62680b5-e9e0-497f-b957-9b223a623917?source=cve", "creation_timestamp": "2025-02-12T11:11:09.000000Z"}, {"uuid": "6dee98e1-bee0-4b1a-b1de-f27cc18a5908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3599", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13112\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:28.160\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/155df231-30ef-47bb-aa91-a7deb1779bd1/", "creation_timestamp": "2025-01-31T07:24:20.000000Z"}, {"uuid": "35cd75cb-f943-4bbd-9275-9a689ea051c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3615", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13220\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WordPress Google Map Professional (Map In Your Language) WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13220\n2. https://wpscan.com/vulnerability/33ef27b4-e88f-46ec-9b3f-0a3e16d6f82e", "creation_timestamp": "2025-01-31T08:15:07.000000Z"}, {"uuid": "86607960-34db-4d0e-a480-453606d42292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13216", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13216\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The HT Event \u2013 WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via the 'render' function in /includes/widgets/htevent_sponsor.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13216\n2. https://plugins.trac.wordpress.org/browser/ht-event/trunk/includes/widgets/htevent_sponsor.php#L443\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/155f494b-be25-4269-9d3b-379309619bbe?source=cve", "creation_timestamp": "2025-01-31T08:15:07.000000Z"}, {"uuid": "56b6369c-2c5f-4c79-ad5c-28ddf3cb20c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13223", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3620", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13223\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Tabulate WordPress plugin through 2.10.3 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13223\n2. https://wpscan.com/vulnerability/e3a52af1-7cb6-4361-b1c7-a50e0cc62fb1", "creation_timestamp": "2025-01-31T08:15:14.000000Z"}, {"uuid": "fb7effd6-16b3-4a64-a5af-ea0f4c484f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13399", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13399\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Gosign \u2013 Posts Slider Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'posts-slider-block' block in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-31T03:32:13Z\n\ud83d\udccf Modified: 2025-01-31T03:32:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13399\n2. https://wordpress.org/plugins/gosign-posts-slider-block\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/0778c676-92e6-4813-a564-06463fc84eec?source=cve", "creation_timestamp": "2025-01-31T04:12:51.000000Z"}, {"uuid": "65b62179-d302-4423-af21-d25aecb96a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13397", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3570", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13397\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The WPRadio \u2013 WordPress Radio Streaming Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpradio_player' shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-31T03:32:13Z\n\ud83d\udccf Modified: 2025-01-31T03:32:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13397\n2. https://plugins.trac.wordpress.org/browser/wpradio/trunk/Frontend/Frontend.php#L140\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/f153174a-1226-4c16-ba8b-637be1d7e742?source=cve", "creation_timestamp": "2025-01-31T04:12:59.000000Z"}, {"uuid": "05fd73bb-373e-4a61-8e22-500cef2cc61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13101", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3600", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13101\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:28.070\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/03f51b54-0ec2-40ce-a0fa-ef0c4ab0ea99/", "creation_timestamp": "2025-01-31T07:24:21.000000Z"}, {"uuid": "d00ab401-c455-4679-8d90-67a19d1667ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13424", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3587", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13424\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.443\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wordpress.org/plugins/ni-woo-sales-commission/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/ac4a026b-ed1c-4864-8900-1d70d95af6f4?source=cve", "creation_timestamp": "2025-01-31T07:24:02.000000Z"}, {"uuid": "a64b947f-cc6f-4205-bc55-3657639269b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13504", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3586", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13504\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.603\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/shared-files/tags/1.7.40\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3231372%40shared-files%2Ftrunk&old=3229309%40shared-files%2Ftrunk&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/9f4210a0-5448-4ff6-876a-37db4ad9b23a?source=cve", "creation_timestamp": "2025-01-31T07:24:02.000000Z"}, {"uuid": "3b9f34c5-9f19-40e7-ae8d-a1dbb5456c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13717", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3585", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13717\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.770\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/lead-capturing-call-to-actions-by-vcita/trunk/vcita-ajax-function.php#L5\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/93800bd9-5d11-4d5b-99b2-4c5c78510af7?source=cve", "creation_timestamp": "2025-01-31T07:24:01.000000Z"}, {"uuid": "cd6d014c-8877-4e9d-bef7-fcc8fa3481a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13221", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3594", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13221\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:28.713\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/693f4cc4-a082-46bc-abc9-a08919f70157/", "creation_timestamp": "2025-01-31T07:24:13.000000Z"}, {"uuid": "a7ecc825-a41b-4054-b081-957b0256232f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13221", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3603", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13221\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13221\n2. https://wpscan.com/vulnerability/693f4cc4-a082-46bc-abc9-a08919f70157", "creation_timestamp": "2025-01-31T08:14:52.000000Z"}, {"uuid": "dd6165d9-e401-46d8-b36e-a08c4b2c5eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13101", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3606", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13101\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13101\n2. https://wpscan.com/vulnerability/03f51b54-0ec2-40ce-a0fa-ef0c4ab0ea99", "creation_timestamp": "2025-01-31T08:14:54.000000Z"}, {"uuid": "af832a10-c284-4c08-ae66-21ddb3551a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13463", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13463\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T04:15:07.497\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227873%40seatreg&new=3227873%40seatreg&sfp_email=&sfph_mail=#file1224\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/769bc1fa-4f41-431e-9907-6e03d2c921be?source=cve", "creation_timestamp": "2025-01-31T05:24:41.000000Z"}, {"uuid": "e5c65190-a679-4f9a-92c2-5ca8cf091f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13415", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3588", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13415\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.287\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.svn.wordpress.org/tlp-food-menu/tags/5.1.4/app/Controllers/Admin/Ajax/Settings.php\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231030%40tlp-food-menu&new=3231030%40tlp-food-menu&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/ab6dd645-8831-49bc-b6b1-bb153ef79204?source=cve", "creation_timestamp": "2025-01-31T07:24:06.000000Z"}, {"uuid": "303566be-c325-428e-98c6-6d68abb7bcbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13223", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13223\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:28.910\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e3a52af1-7cb6-4361-b1c7-a50e0cc62fb1/", "creation_timestamp": "2025-01-31T07:24:09.000000Z"}, {"uuid": "009ac801-1196-4e62-a838-955a2f64f05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13224", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3591", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13224\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:29.013\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/32a90907-e82f-41b3-b20e-d10a722e2999/", "creation_timestamp": "2025-01-31T07:24:08.000000Z"}, {"uuid": "0e5e271c-0ec1-445f-91bd-11558305d919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13504", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13504\n\ud83d\udd25 CVSS Score: 7.4 (CVSS_V3)\n\ud83d\udd39 Description: The Shared Files \u2013 Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the dfxp file. This issue affects only Apache-based environments, where dfxp files are handled by default.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13504\n2. https://plugins.trac.wordpress.org/browser/shared-files/tags/1.7.40\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3231372%40shared-files%2Ftrunk&old=3229309%40shared-files%2Ftrunk&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/9f4210a0-5448-4ff6-876a-37db4ad9b23a?source=cve", "creation_timestamp": "2025-01-31T08:14:55.000000Z"}, {"uuid": "b8eb5bdc-5f37-4932-b086-6c3a134ac211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13100", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3605", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The OPSI Israel Domestic Shipments WordPress plugin through 2.6.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13100\n2. https://wpscan.com/vulnerability/b9261010-ab55-4d18-8fd2-2003f8692ae8", "creation_timestamp": "2025-01-31T08:14:54.000000Z"}, {"uuid": "da657a24-f07c-4e9f-a1d3-d8f8fe413c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13800", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13800\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cp_dismiss_notice' AJAX endpoint in all versions up to, and including, 3.5.30. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to '1' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13800\n2. https://www.convertplug.com/plus/product/convertplug\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/580ae2da-76f2-42b3-a26c-62ad8d6d1686?source=cve", "creation_timestamp": "2025-02-12T07:09:44.000000Z"}, {"uuid": "bceec1f0-6939-40bb-bce3-0425869a1f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13749\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The StaffList plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing or incorrect nonce validation on the 'stafflist' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-12T06:30:31Z\n\ud83d\udccf Modified: 2025-02-12T06:30:31Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13749\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232922%40stafflist&new=3232922%40stafflist&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/b8da640d-8965-45bb-be68-57d4eb598759?source=cve", "creation_timestamp": "2025-02-12T07:11:42.000000Z"}, {"uuid": "8fe649e3-5870-4249-bf36-55a4be9905d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13541", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13541\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T04:15:09.347\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/adirectory/tags/1.3.4/inc/Frontend/Ajax.php#L115\n2. https://plugins.trac.wordpress.org/browser/adirectory/tags/1.9.5/inc/Frontend/Ajax.php#L115\n3. https://plugins.trac.wordpress.org/browser/adirectory/tags/2.1/inc/Frontend/Ajax.php#L113\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3235167%40adirectory&new=3235167%40adirectory&sfp_email=&sfph_mail=\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/c99b8a94-c35b-43a1-bb14-2ca97be421cc?source=cve", "creation_timestamp": "2025-02-12T05:06:53.000000Z"}, {"uuid": "f9c53a5f-1d3a-4d2c-8314-f8bc0de7a921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13821", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13821\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T08:15:08.660\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3234469%40booking&new=3234469%40booking&sfp_email=&sfph_mail=#file20\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/8a0b961e-ccc3-4da0-b007-bbafa133a3a8?source=cve", "creation_timestamp": "2025-02-12T09:08:24.000000Z"}, {"uuid": "36b7231d-d77a-482c-9485-fe4d3cb26bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13651", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13651\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The RapidLoad \u2013 Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_deactivate() function in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset some of the plugin's settings.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13651\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232560%40unusedcss&new=3232560%40unusedcss&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/87f9f052-2963-4548-9ff8-91dc2b4ecb43?source=cve", "creation_timestamp": "2025-02-01T07:16:25.000000Z"}, {"uuid": "c596348e-9384-463e-aca4-8c090d4758c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13371", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3762", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13371\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker() function in all versions up to, and including, 2.2.6. This makes it possible for unauthenticated attackers to send arbitrary emails with arbitrary content from the sites mail server.\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13371\n2. https://gist.github.com/g1-nhantv/31b04bc057046ecc54c3552387eb7bca\n3. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/jobapply/model.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fjobapply%2Fmodel.php\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/a84a4c56-a44e-450d-91fc-024f8ddeedee?source=cve", "creation_timestamp": "2025-02-01T10:15:54.000000Z"}, {"uuid": "22cd8a30-0a80-4145-a961-c073c9183233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13341", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3761", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13341\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13341\n2. https://codecanyon.net/item/woocommerce-multi-locations-inventory-management/28949586\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/8bb172cc-b7a6-401d-a246-1918702d654d?source=cve", "creation_timestamp": "2025-02-01T10:15:53.000000Z"}, {"uuid": "2cfc0734-fc3c-40d5-bbc9-9e7025801065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13343", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3712", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13343\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.717\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://codecanyon.net/item/woocommerce-customers-manager/10965432\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/193c9fe9-17bc-47e7-b93d-dfcebcf8004d?source=cve", "creation_timestamp": "2025-02-01T05:25:46.000000Z"}, {"uuid": "f41aa56b-1782-4954-ada1-40e834d110e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13547", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13547\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.857\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3230740/athemes-addons-for-elementor-lite/trunk/inc/modules/widgets/image-accordion/class-image-accordion.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/1e0f7686-1c8c-49d6-9d0b-3c8df6c24d0d?source=cve", "creation_timestamp": "2025-02-01T05:25:45.000000Z"}, {"uuid": "d97ab091-9107-4b6a-9e1e-263ec72533da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13651", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3710", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13651\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.997\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232560%40unusedcss&new=3232560%40unusedcss&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/87f9f052-2963-4548-9ff8-91dc2b4ecb43?source=cve", "creation_timestamp": "2025-02-01T05:25:45.000000Z"}, {"uuid": "02a066f5-cbed-46b4-98f4-7d4123ff7bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13098", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13098\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13098\n2. https://wpscan.com/vulnerability/eac71f70-993e-4353-8550-affb24c61c02", "creation_timestamp": "2025-02-01T07:16:10.000000Z"}, {"uuid": "a5879c99-4ff2-4368-b09f-75e9abacdeb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13097", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3725", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13097\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13097\n2. https://wpscan.com/vulnerability/d83d7274-55ae-4f35-b65e-6d6e19e36fac", "creation_timestamp": "2025-02-01T07:16:19.000000Z"}, {"uuid": "10baa1a7-c858-4fa9-a5df-b265dca66028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13099", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3737", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13099\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:31.100\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a0cabf5c-7b01-4163-834b-a134db3a90b4/", "creation_timestamp": "2025-02-01T07:25:40.000000Z"}, {"uuid": "0ed9e185-7f30-42d8-98e0-6d466c728488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13547", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3733", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13547\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13547\n2. https://plugins.trac.wordpress.org/changeset/3230740/athemes-addons-for-elementor-lite/trunk/inc/modules/widgets/image-accordion/class-image-accordion.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/1e0f7686-1c8c-49d6-9d0b-3c8df6c24d0d?source=cve", "creation_timestamp": "2025-02-01T07:16:31.000000Z"}, {"uuid": "1c5923b5-13dc-42bc-9570-2db6bd252b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13428", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3744", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13428\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T08:15:09.910\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/company/model.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fcompany%2Fmodel.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/a7c786fe-898e-4478-97b9-c1fb41c9081c?source=cve", "creation_timestamp": "2025-02-01T09:26:02.000000Z"}, {"uuid": "45b12b74-f52c-4753-a84b-a78ccc08e6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13429", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3743", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13429\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T08:15:10.340\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/job/controller.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fjob%2Fcontroller.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/9cbce69a-53d0-4b83-9b7a-893a6b9c39c4?source=cve", "creation_timestamp": "2025-02-01T09:26:01.000000Z"}, {"uuid": "90969c8c-5559-4808-b5eb-099be1e2e669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13099", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3723", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13099\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13099\n2. https://wpscan.com/vulnerability/a0cabf5c-7b01-4163-834b-a134db3a90b4", "creation_timestamp": "2025-02-01T07:16:17.000000Z"}, {"uuid": "e166f0a8-26c6-4010-bef2-509095b8feca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13665", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13665\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13665\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3233979%40admire-extra&new=3233979%40admire-extra\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf682127-4b97-44ce-a94d-3a237c5af1cc?source=cve", "creation_timestamp": "2025-02-12T07:09:32.000000Z"}, {"uuid": "61553da3-d27e-4bf3-88b9-e929b87a4e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13372", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13372\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T08:15:09.020\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/resume/controller.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fresume%2Fcontroller.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/e00e65ba-db58-4d13-8cb3-c4d62a2553fb?source=cve", "creation_timestamp": "2025-02-01T09:26:03.000000Z"}, {"uuid": "09b93dcf-8019-42c1-a663-35f943dbfac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13425", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13425\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T08:15:09.483\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/company/controller.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fcompany%2Fcontroller.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/a14e110f-0850-44f4-8de3-95a654096ae8?source=cve", "creation_timestamp": "2025-02-01T09:26:02.000000Z"}, {"uuid": "5e80edc7-088e-4ffb-9464-035917d462a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13841", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3794", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13841\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Builder Shortcode Extras \u2013 WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private and draft posts created with Elementor that they should not have access to.\n\ud83d\udccf Published: 2025-02-07T09:31:51Z\n\ud83d\udccf Modified: 2025-02-07T09:31:51Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13841\n2. https://plugins.trac.wordpress.org/browser/builder-shortcode-extras/tags/1.0.0/includes/shortcodes/elementor.php#L116\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/642dc1d3-a008-4af8-ba9e-dbdd37b93126?source=cve", "creation_timestamp": "2025-02-07T10:02:41.000000Z"}, {"uuid": "c8a011d5-e22d-4e9d-a38f-c1caa45b71e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13341", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3751", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13341\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T07:15:07.900\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://codecanyon.net/item/woocommerce-multi-locations-inventory-management/28949586\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/8bb172cc-b7a6-401d-a246-1918702d654d?source=cve", "creation_timestamp": "2025-02-01T09:26:10.000000Z"}, {"uuid": "20c1a0c2-f5c0-4c19-a768-a903595c97d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13372", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3757", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13372\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the getresumefiledownloadbyid() and getallresumefiles() functions due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to download users resumes without the appropriate authorization to do so.\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13372\n2. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/resume/controller.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fresume%2Fcontroller.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/e00e65ba-db58-4d13-8cb3-c4d62a2553fb?source=cve", "creation_timestamp": "2025-02-01T10:15:47.000000Z"}, {"uuid": "2c783457-a28e-4667-a87f-790365626be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13429", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3755", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13429\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the 'jobenforcedelete' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with employer-level access and above, to delete arbitrary\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13429\n2. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/job/controller.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fjob%2Fcontroller.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/9cbce69a-53d0-4b83-9b7a-893a6b9c39c4?source=cve", "creation_timestamp": "2025-02-01T10:15:46.000000Z"}, {"uuid": "4052496a-0e72-4d5f-ac01-bae0b197e082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13428", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13428\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the deleteCompanyLogo() due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to delete arbitrary company logos.\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13428\n2. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/company/model.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fcompany%2Fmodel.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/a7c786fe-898e-4478-97b9-c1fb41c9081c?source=cve", "creation_timestamp": "2025-02-01T10:15:44.000000Z"}, {"uuid": "ae9af09d-d905-485a-aaaa-458d9ff1d547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13358", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13358\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bp_delete_page() function in all versions up to, and including, 3.4.24. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins page setting.\n\ud83d\udccf Published: 2025-03-01T03:22:18.575Z\n\ud83d\udccf Modified: 2025-03-01T03:22:18.575Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2f526f3c-4e9b-4440-b3c3-8541c1be0ba0?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3244145%40wc4bp&new=3244145%40wc4bp&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-01T04:27:34.000000Z"}, {"uuid": "d92f8f41-f024-49e8-97aa-c99577549c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13425", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3758", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13425\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the enforcedelete() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Employer-level access and above, to delete other users companies.\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13425\n2. https://plugins.trac.wordpress.org/changeset/3229608/wp-job-portal/tags/2.2.7/modules/company/controller.php?old=3216415&old_path=wp-job-portal%2Ftags%2F2.2.6%2Fmodules%2Fcompany%2Fcontroller.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/a14e110f-0850-44f4-8de3-95a654096ae8?source=cve", "creation_timestamp": "2025-02-01T10:15:51.000000Z"}, {"uuid": "0a264fcb-0d46-44c8-b415-5ae013d94361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13612", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13612\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T13:15:21.320\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/bp-better-messages/trunk/inc/shortcodes.php#L125\n2. https://plugins.trac.wordpress.org/browser/bp-better-messages/trunk/inc/shortcodes.php#L127\n3. https://plugins.trac.wordpress.org/browser/bp-better-messages/trunk/inc/shortcodes.php#L84\n4. https://plugins.trac.wordpress.org/changeset/3228965/\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/169a857f-1ae0-40f6-8a34-10c573af59c5?source=cve", "creation_timestamp": "2025-02-01T15:25:39.000000Z"}, {"uuid": "023c9bd4-6762-4bea-8856-944afddada6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13021", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13021\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-12-29T20:15:05.043\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/shaturo1337/POCs/blob/main/Stored%20XSS%20Vulnerability%20in%20Road%20Accident%20Map%20Marker.md\n2. https://vuldb.com/?ctiid.289712\n3. https://vuldb.com/?id.289712\n4. https://vuldb.com/?submit.469267\n5. https://www.sourcecodester.com/\n6. https://github.com/shaturo1337/POCs/blob/main/Stored%20XSS%20Vulnerability%20in%20Road%20Accident%20Map%20Marker.md", "creation_timestamp": "2025-02-01T21:26:34.000000Z"}, {"uuid": "87e4441e-9e58-4cc4-808a-e5d125b39d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13352", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3825", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13352\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: The Legull WordPress plugin through 1.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-07T06:31:14Z\n\ud83d\udccf Modified: 2025-02-07T18:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13352\n2. https://wpscan.com/vulnerability/2c141cc0-f79e-42bd-97a6-98829647104c", "creation_timestamp": "2025-02-07T19:04:23.000000Z"}, {"uuid": "90e6ec3d-f731-4413-bae5-41774269adb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13749", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4009", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T04:15:09.793\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232922%40stafflist&new=3232922%40stafflist&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/b8da640d-8965-45bb-be68-57d4eb598759?source=cve", "creation_timestamp": "2025-02-12T05:06:45.000000Z"}, {"uuid": "d31e21c2-b4e6-482f-8f94-f7a09a715d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13850", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3876", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13850\n\ud83d\udd25 CVSS Score: 4.5 (CVSS_V3)\n\ud83d\udd39 Description: The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-02-08T15:30:31Z\n\ud83d\udccf Modified: 2025-02-08T15:30:31Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13850\n2. https://plugins.trac.wordpress.org/browser/simple-add-pages-or-posts/tags/2.0.0/form.php\n3. https://wordpress.org/plugins/simple-add-pages-or-posts/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/65a3604d-eb6b-484f-834a-b3d75fe3bda7?source=cve", "creation_timestamp": "2025-02-08T16:03:52.000000Z"}, {"uuid": "1f0134b9-736a-4509-809d-a0bab06a084d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13850", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3878", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13850\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-08T13:15:06.840\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/simple-add-pages-or-posts/tags/2.0.0/form.php\n2. https://wordpress.org/plugins/simple-add-pages-or-posts/#developers\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/65a3604d-eb6b-484f-834a-b3d75fe3bda7?source=cve", "creation_timestamp": "2025-02-08T16:03:53.000000Z"}, {"uuid": "23dc5b8c-58bd-4a7c-830b-fca0871f0db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13714\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T06:15:19.987\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231889%40all-images-ai&new=3231889%40all-images-ai&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/422c634c-5119-40ef-adf7-681c3d8c09a2?source=cve", "creation_timestamp": "2025-02-12T07:13:23.000000Z"}, {"uuid": "74b15264-c4a9-4bce-bc04-282f203dfcaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13539", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4033", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13539\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-interface/phpunit.php file being publicly accessible and displaying error messages. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.\n\ud83d\udccf Published: 2025-02-12T06:30:30Z\n\ud83d\udccf Modified: 2025-02-12T06:30:30Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13539\n2. https://plugins.trac.wordpress.org/browser/aforms-eats/trunk/vendor/aura/payload-interface/phpunit.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232963%40aforms-eats&new=3232963%40aforms-eats&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/5e1950c7-cc7c-48cf-974e-f691ef61d6be?source=cve", "creation_timestamp": "2025-02-12T07:11:58.000000Z"}, {"uuid": "aa490427-4c6b-4bfa-a090-beb3af484091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13701", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13701\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Liveticker (by stklcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'liveticker' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-12T06:30:31Z\n\ud83d\udccf Modified: 2025-02-12T06:30:31Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13701\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3234940%40stklcode-liveticker&new=3234940%40stklcode-liveticker&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/c4edf78c-cd17-42dd-90dc-10946e79d57b?source=cve", "creation_timestamp": "2025-02-12T07:11:54.000000Z"}, {"uuid": "414f0437-28a6-4c9c-9361-877df5c6065e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13554", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13554\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The The Ultimate WordPress Toolkit \u2013 WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorder_route() function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder posts.\n\ud83d\udccf Published: 2025-02-12T06:30:31Z\n\ud83d\udccf Modified: 2025-02-12T06:30:31Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13554\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3233951%40wpextended&new=3233951%40wpextended&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/136ecfa1-5591-4636-bc30-6c68ddc7f277?source=cve", "creation_timestamp": "2025-02-12T07:11:50.000000Z"}, {"uuid": "2c05cfe3-2376-4995-abec-1d373cc52b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4223", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13639\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary 'read more' posts.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13639\n2. https://plugins.trac.wordpress.org/browser/expand-maker/trunk/files/ReadMoreAdminPost.php#L9\n3. https://plugins.trac.wordpress.org/browser/expand-maker/trunk/files/ReadMoreAdminPost.php#L98\n4. https://plugins.trac.wordpress.org/changeset/3239533\n5. https://wordpress.org/plugins/expand-maker\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/65849267-8bb5-48fd-b95e-e89a1e744fe0?source=cve", "creation_timestamp": "2025-02-13T10:09:02.000000Z"}, {"uuid": "03c96686-eafa-4332-a403-d91b7655d3ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4236", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13606\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The JS Help Desk \u2013 The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/jssupportticketdata directory which can contain file attachments included in support tickets.\n\ud83d\udccf Published: 2025-02-13T12:31:06Z\n\ud83d\udccf Modified: 2025-02-13T12:31:06Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13606\n2. https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.8/includes/classes/uploads.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/e8ed5d5d-86b0-40ac-a093-31392dea13a2?source=cve", "creation_timestamp": "2025-02-13T13:12:09.000000Z"}, {"uuid": "0f560e80-321b-4aa3-a75a-109928cf9ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4234", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13606\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T10:15:09.310\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.8/includes/classes/uploads.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/e8ed5d5d-86b0-40ac-a093-31392dea13a2?source=cve", "creation_timestamp": "2025-02-13T11:11:35.000000Z"}, {"uuid": "d8293f92-5b77-45e4-84c0-3e9fb5f3c791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4233", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13867\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T10:15:09.847\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://themeforest.net/item/listivo-classified-ads-wordpress-theme/34032749\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/705c2322-bb52-4337-b0dd-6bf04bd1b0e0?source=cve", "creation_timestamp": "2025-02-13T11:11:33.000000Z"}, {"uuid": "976b0a41-6723-49bf-8119-d686873374b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13477", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4084", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13477\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The LTL Freight Quotes \u2013 Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:48Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13477\n2. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-unishippers-edition/trunk/shipping-rules/shipping-rules-save.php#L84\n3. https://plugins.trac.wordpress.org/changeset/3237773\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/7df452c9-4e73-40d7-88a3-d38ae1309d8f?source=cve", "creation_timestamp": "2025-02-12T13:10:38.000000Z"}, {"uuid": "67cd653b-f857-4902-8643-a6a0ac25993f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13532", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4083", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13532\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Small Package Quotes \u2013 Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-12T12:30:48Z\n\ud83d\udccf Modified: 2025-02-12T12:30:48Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13532\n2. https://plugins.trac.wordpress.org/browser/small-package-quotes-purolator-edition/trunk/warehouse-dropship/wild/includes/wild-delivery-save.php#L237\n3. https://plugins.trac.wordpress.org/browser/small-package-quotes-purolator-edition/trunk/warehouse-dropship/wild/includes/wild-delivery-save.php#L346\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/813fe9d2-913c-4e04-bcb7-443eef95c62e?source=cve", "creation_timestamp": "2025-02-12T13:10:37.000000Z"}, {"uuid": "79d03bb4-58b1-4f0e-ad71-3c2f3e44987c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13554", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4011", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13554\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T04:15:09.503\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3233951%40wpextended&new=3233951%40wpextended&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/136ecfa1-5591-4636-bc30-6c68ddc7f277?source=cve", "creation_timestamp": "2025-02-12T05:06:50.000000Z"}, {"uuid": "d1d9030c-9c63-46f7-baa1-78dec3eb2dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13701", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4010", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13701\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T04:15:09.647\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3234940%40stklcode-liveticker&new=3234940%40stklcode-liveticker&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/c4edf78c-cd17-42dd-90dc-10946e79d57b?source=cve", "creation_timestamp": "2025-02-12T05:06:48.000000Z"}, {"uuid": "a634636d-bb09-406d-ab1e-7e73538992cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13539", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13539\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T04:15:09.197\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/aforms-eats/trunk/vendor/aura/payload-interface/phpunit.php\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232963%40aforms-eats&new=3232963%40aforms-eats&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/5e1950c7-cc7c-48cf-974e-f691ef61d6be?source=cve", "creation_timestamp": "2025-02-12T05:06:56.000000Z"}, {"uuid": "279af1de-c6bb-44e8-9da8-148501bd000f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13374", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13374\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T06:15:19.303\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.joomunited.com/wordpress-products/wp-table-manager\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/128bc7ee-9763-415f-b726-0e63d4b62271?source=cve", "creation_timestamp": "2025-02-12T07:13:40.000000Z"}, {"uuid": "6de317ab-8ee0-46e3-84e7-ae9cc71e8c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13600", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4036", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13600\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T06:15:19.643\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/majestic-support/tags/1.0.5/includes/classes/uploads.php\n2. https://plugins.trac.wordpress.org/changeset/3231938/\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/c5a8fd90-49dd-4a5e-88f2-cd6b338da2d6?source=cve", "creation_timestamp": "2025-02-12T07:13:36.000000Z"}, {"uuid": "9c1ba002-5a90-41bd-830b-c59c9ff73e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13601", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4035", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13601\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T06:15:19.830\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/majestic-support/tags/1.0.5/modules/gdpr/controller.php#L110\n2. https://plugins.trac.wordpress.org/changeset/3231938/\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/ebf5537d-d80e-4844-8ed4-480f4a533439?source=cve", "creation_timestamp": "2025-02-12T07:13:28.000000Z"}, {"uuid": "917fd624-4a52-4789-8033-4c76690cefda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13658", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13658\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13658\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3233519%40ngg-smart-image-search&new=3233519%40ngg-smart-image-search&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/d916e320-e78b-4305-a4da-10c6fb8db41a?source=cve", "creation_timestamp": "2025-02-12T07:09:28.000000Z"}, {"uuid": "63fac6ae-0a01-41b9-9628-878de9e201d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13601", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4014", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13601\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Majestic Support \u2013 The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export ticket data for any user.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:34Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13601\n2. https://plugins.trac.wordpress.org/browser/majestic-support/tags/1.0.5/modules/gdpr/controller.php#L110\n3. https://plugins.trac.wordpress.org/changeset/3231938\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/ebf5537d-d80e-4844-8ed4-480f4a533439?source=cve", "creation_timestamp": "2025-02-12T07:09:24.000000Z"}, {"uuid": "413e2e55-a407-476a-8e51-da9c31793e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13600", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4022", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13600\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Majestic Support \u2013 The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/majesticsupportdata directory which can contain file attachments included in support tickets.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13600\n2. https://plugins.trac.wordpress.org/browser/majestic-support/tags/1.0.5/includes/classes/uploads.php\n3. https://plugins.trac.wordpress.org/changeset/3231938\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/c5a8fd90-49dd-4a5e-88f2-cd6b338da2d6?source=cve", "creation_timestamp": "2025-02-12T07:09:45.000000Z"}, {"uuid": "8568ba04-0b0e-4442-a977-61ed37e35cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13714\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The All-Images.ai \u2013 IA Image Bank and Custom Image creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the '_get_image_by_url' function in all versions up to, and including, 1.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13714\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231889%40all-images-ai&new=3231889%40all-images-ai&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/422c634c-5119-40ef-adf7-681c3d8c09a2?source=cve", "creation_timestamp": "2025-02-12T07:09:36.000000Z"}, {"uuid": "09eedf82-c9be-4fa6-9525-755d2efd2e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13769", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4020", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13769\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'theme_options_ajax_post_action' AJAX action in all versions up to, and including, 4.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings and inject malicious web scripts. The developer opted to remove the software from the repository, so an update is not available and it is recommended to find a replacement software.\n\ud83d\udccf Published: 2025-02-12T06:30:33Z\n\ud83d\udccf Modified: 2025-02-12T06:30:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13769\n2. https://themeforest.net/item/puzzles-wordpress-magazinereview-with-wooc/5690583\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/3c22d064-348d-4335-beaf-22dcdcf88518?source=cve", "creation_timestamp": "2025-02-12T07:09:41.000000Z"}, {"uuid": "a2a9b9a8-aea2-403f-b0ab-e97d08cc54f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13794", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13794\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T08:15:08.430\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3235271%40hide-my-wp&new=3235271%40hide-my-wp&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/9effa526-7454-4490-9bf4-0605254d6625?source=cve", "creation_timestamp": "2025-02-12T09:08:26.000000Z"}, {"uuid": "50d83530-69cb-4b9d-9c6d-6fa69290a2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4205", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T06:15:20.917\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5b70798c-c30d-42e6-ac72-821c5568b9b5/", "creation_timestamp": "2025-02-13T07:08:40.000000Z"}, {"uuid": "70eb3188-8629-4531-bab8-e24532af3ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4204", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13121\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T06:15:21.050\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/59ee8fe5-4820-4d52-b17a-7044631c40c1/", "creation_timestamp": "2025-02-13T07:08:37.000000Z"}, {"uuid": "3b7baa87-212e-44e7-8994-33d02febf211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4203", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T06:15:21.210\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/f60a8358-1765-4cae-9c89-0d75c5e394ec/", "creation_timestamp": "2025-02-13T07:08:13.000000Z"}, {"uuid": "321dff22-e176-4f6f-b81c-39d4a5b9cf65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4210", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content  WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-13T06:31:43Z\n\ud83d\udccf Modified: 2025-02-13T06:31:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13120\n2. https://wpscan.com/vulnerability/5b70798c-c30d-42e6-ac72-821c5568b9b5", "creation_timestamp": "2025-02-13T07:10:09.000000Z"}, {"uuid": "cf5fb2cc-b229-4914-b38e-deabe7093412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13421\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to register a new administrative user account.\n\ud83d\udccf Published: 2025-02-12T06:30:32Z\n\ud83d\udccf Modified: 2025-02-12T06:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13421\n2. https://contempothemes.com/changelog\n3. https://themeforest.net/item/wp-pro-real-estate-7-responsive-real-estate-wordpress-theme/12473778\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/a50b3304-d55b-487a-8137-d5083c704cf4?source=cve", "creation_timestamp": "2025-02-12T07:11:38.000000Z"}, {"uuid": "414e9e57-81a4-4ed3-a58e-09b78c63c463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13654", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4027", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13654\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' function in all versions up to, and including, 2.12.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users.\n\ud83d\udccf Published: 2025-02-12T06:30:32Z\n\ud83d\udccf Modified: 2025-02-12T06:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13654\n2. https://themeforest.net/item/zoxpress-allinone-wordpress-news-theme/25586170\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/f616be03-229b-4c50-b837-508da4d2b090?source=cve", "creation_timestamp": "2025-02-12T07:11:34.000000Z"}, {"uuid": "488e41b0-708b-4ac8-b309-58b8ceacb087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13653", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4026", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13653\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' function in all versions up to, and including, 2.12.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-02-12T06:30:32Z\n\ud83d\udccf Modified: 2025-02-12T06:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13653\n2. https://themeforest.net/item/zoxpress-allinone-wordpress-news-theme/25586170\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/b4599c7f-5e5d-4571-97d9-54d6fd0c9c63?source=cve", "creation_timestamp": "2025-02-12T07:11:22.000000Z"}, {"uuid": "0ac4b520-fb6b-4675-9bcc-5f3078927e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13541", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4030", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13541\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The aDirectory \u2013 WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the adqs_delete_listing() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts.\n\ud83d\udccf Published: 2025-02-12T06:30:31Z\n\ud83d\udccf Modified: 2025-02-12T06:30:31Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13541\n2. https://plugins.trac.wordpress.org/browser/adirectory/tags/1.3.4/inc/Frontend/Ajax.php#L115\n3. https://plugins.trac.wordpress.org/browser/adirectory/tags/1.9.5/inc/Frontend/Ajax.php#L115\n4. https://plugins.trac.wordpress.org/browser/adirectory/tags/2.1/inc/Frontend/Ajax.php#L113\n5. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3235167%40adirectory&new=3235167%40adirectory&sfp_email=&sfph_mail=\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/c99b8a94-c35b-43a1-bb14-2ca97be421cc?source=cve", "creation_timestamp": "2025-02-12T07:11:47.000000Z"}, {"uuid": "86865128-e32d-4281-9104-9844ea5badb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13490", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13490\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:11.973\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3235163\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/8bcfbc26-9b5d-4df8-9f16-293734bd2805?source=cve", "creation_timestamp": "2025-02-12T11:10:48.000000Z"}, {"uuid": "819c0dfa-2cda-427a-bad9-82eef138ae2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13119", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13119\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content  WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-13T06:31:43Z\n\ud83d\udccf Modified: 2025-02-13T06:31:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13119\n2. https://wpscan.com/vulnerability/32600a45-a8cd-446c-9aa2-0621a02a9754", "creation_timestamp": "2025-02-13T07:11:16.000000Z"}, {"uuid": "f4ee5787-92f6-4cab-a72f-0f22db54223a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13480", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4080", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13480\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The LTL Freight Quotes \u2013 For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-12T12:30:48Z\n\ud83d\udccf Modified: 2025-02-12T12:30:48Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13480\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3238359%40ltl-freight-quotes-fedex-freight-edition&new=3238359%40ltl-freight-quotes-fedex-freight-edition&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/a9b6f7a3-83eb-4352-9db6-ab4b03241702?source=cve", "creation_timestamp": "2025-02-12T13:10:31.000000Z"}, {"uuid": "6b702d6f-f32c-4b32-a316-b25a20c5ac54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13814", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4046", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13814\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-02-12T09:31:45Z\n\ud83d\udccf Modified: 2025-02-12T09:31:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13814\n2. https://codecanyon.net/item/global-gallery-wordpress-responsive-gallery/3310108\n3. https://lcweb.it/global-gallery-wordpress-photogallery-plugin/changelog\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/4b5ba815-ce92-4d7b-aa80-29d6fddd7f63?source=cve", "creation_timestamp": "2025-02-12T10:08:37.000000Z"}, {"uuid": "dadc2a99-e4af-4496-94c8-47c2c7f4d546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13794", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4053", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13794\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WP Ghost (Hide My WP Ghost) \u2013 Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possible for unauthenticated attackers to discover the hidden login page location.\n\ud83d\udccf Published: 2025-02-12T09:31:44Z\n\ud83d\udccf Modified: 2025-02-12T09:31:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13794\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3235271%40hide-my-wp&new=3235271%40hide-my-wp&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/9effa526-7454-4490-9bf4-0605254d6625?source=cve", "creation_timestamp": "2025-02-12T10:10:12.000000Z"}, {"uuid": "d131aaa7-8d9f-4b9d-a745-a03cb15803d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13456", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13456\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:11.240\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wordpress.org/plugins/n-media-wp-simple-quiz/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/788c94a7-a8d6-4ae3-b4ca-f5c60e536f57?source=cve", "creation_timestamp": "2025-02-12T11:11:17.000000Z"}, {"uuid": "ba5afe81-c2e1-49c6-a4d7-52ed9006fdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13435", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4103", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13435\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-12T12:30:46Z\n\ud83d\udccf Modified: 2025-02-12T12:30:46Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13435\n2. https://plugins.trac.wordpress.org/browser/ebook-downloader/trunk/ebook_plugin.php#L278\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/51b0c1e5-08f7-44b3-8518-6b0902b84758?source=cve", "creation_timestamp": "2025-02-12T13:14:27.000000Z"}, {"uuid": "6a8f59a7-6fc8-46f0-80d5-d79a00d11d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13528", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13528\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:12.130\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.9.2/includes/class-alg-wc-ev-emails.php#L151\n2. https://plugins.trac.wordpress.org/changeset/3238136/\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/0b3798e3-45fe-4829-9012-dc728d4af87f?source=cve", "creation_timestamp": "2025-02-12T11:10:45.000000Z"}, {"uuid": "f50e9923-2b9c-4b15-9839-db6926b83284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13531", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4067", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13531\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:12.317\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/shipengine-shipping-quotes/trunk/admin/tab/shipping-rules/shipping-rules-save.php#L77\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/cbb7bdcf-9f93-4c86-a4b3-ad5aaf7521b0?source=cve", "creation_timestamp": "2025-02-12T11:10:42.000000Z"}, {"uuid": "70ce032f-3459-4927-bc04-ae51532df9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4076", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13365\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:10.547\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3229205/security-malware-firewall#file527\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/9fa30fa2-6c42-4e5f-a0b5-8711ce5d8121?source=cve", "creation_timestamp": "2025-02-12T11:12:34.000000Z"}, {"uuid": "deab81c3-4f1d-4ef0-9227-9a65aaaec307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13435", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4075", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13435\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:10.727\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/ebook-downloader/trunk/ebook_plugin.php#L278\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/51b0c1e5-08f7-44b3-8518-6b0902b84758?source=cve", "creation_timestamp": "2025-02-12T11:11:35.000000Z"}, {"uuid": "75bd5719-d73b-4c22-913f-e63dc7687df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13437", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4074", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13437\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:10.920\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wordpress.org/plugins/book-a-room/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/bfef57b6-26b1-433b-9037-46f908422f72?source=cve", "creation_timestamp": "2025-02-12T11:11:26.000000Z"}, {"uuid": "e1a37917-df83-4eb9-b6f6-a306a6e9a371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13119", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4206", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13119\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T06:15:20.763\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/32600a45-a8cd-446c-9aa2-0621a02a9754/", "creation_timestamp": "2025-02-13T07:08:43.000000Z"}, {"uuid": "880f19eb-3ee4-41a6-ad46-c7598f433a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13437", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4089", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13437\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Book a Room plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9. This is due to missing or incorrect nonce validation on the 'bookaroom_Settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13437\n2. https://wordpress.org/plugins/book-a-room\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/bfef57b6-26b1-433b-9037-46f908422f72?source=cve", "creation_timestamp": "2025-02-12T13:11:08.000000Z"}, {"uuid": "278d4899-1f40-417a-9f14-5152873d0d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13456", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4087", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13456\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Easy Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wqt-question' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13456\n2. https://wordpress.org/plugins/n-media-wp-simple-quiz\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/788c94a7-a8d6-4ae3-b4ca-f5c60e536f57?source=cve", "creation_timestamp": "2025-02-12T13:10:57.000000Z"}, {"uuid": "c5e9b19d-ebd9-48e3-bc77-0ab57deb60c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13475", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4095", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13475\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Small Package Quotes \u2013 UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13475\n2. https://plugins.trac.wordpress.org/changeset/3237693\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/c62680b5-e9e0-497f-b957-9b223a623917?source=cve", "creation_timestamp": "2025-02-12T13:11:29.000000Z"}, {"uuid": "e5b09b66-54e9-4988-ba8e-d7e10dfc27f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13528", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4094", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13528\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The 'Fine tune placement' option must be enabled in the plugin settings in order to exploit the vulnerability.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13528\n2. https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.9.2/includes/class-alg-wc-ev-emails.php#L151\n3. https://plugins.trac.wordpress.org/changeset/3238136\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/0b3798e3-45fe-4829-9012-dc728d4af87f?source=cve", "creation_timestamp": "2025-02-12T13:11:27.000000Z"}, {"uuid": "074d5027-9642-4a66-a8c3-78a09367be46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13473", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4093", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13473\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The LTL Freight Quotes \u2013 Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13473\n2. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-worldwide-express-edition/trunk/warehouse-dropship/wild/includes/wwe-ltl-wild-delivery-save.php#L264\n3. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-worldwide-express-edition/trunk/warehouse-dropship/wild/includes/wwe-ltl-wild-delivery-save.php#L387\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215844%40ltl-freight-quotes-worldwide-express-edition&new=3215844%40ltl-freight-quotes-worldwide-express-edition&sfp_email=&sfph_mail=\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e72828e-a6f6-43fc-8a10-d9908004c0fc?source=cve", "creation_timestamp": "2025-02-12T13:11:25.000000Z"}, {"uuid": "aaa3d7c9-1ba5-41cb-a4e2-ce2066b4683b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13365\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through the checkUploadedArchive() function  in all versions up to, and including, 2.149. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-02-12T12:30:46Z\n\ud83d\udccf Modified: 2025-02-12T12:30:46Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13365\n2. https://plugins.trac.wordpress.org/changeset/3229205/security-malware-firewall#file527\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/9fa30fa2-6c42-4e5f-a0b5-8711ce5d8121?source=cve", "creation_timestamp": "2025-02-12T13:14:10.000000Z"}, {"uuid": "3126af50-cc1b-4390-b822-d923cf4e8a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13459", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4099", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13459\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusedesk_newcase' shortcode in all versions up to, and including, 6.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13459\n2. https://wordpress.org/plugins/fusedesk\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/a69a99af-3d1d-4ad2-b6b5-e4fcea56be51?source=cve", "creation_timestamp": "2025-02-12T13:14:03.000000Z"}, {"uuid": "6b7db83d-8a8b-47ce-b464-2c1d06b46731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13490", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4098", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13490\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The LTL Freight Quotes \u2013 XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13490\n2. https://plugins.trac.wordpress.org/changeset/3235163\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/8bcfbc26-9b5d-4df8-9f16-293734bd2805?source=cve", "creation_timestamp": "2025-02-12T13:11:49.000000Z"}, {"uuid": "7d31a06a-45db-47f0-acb7-4a125c561ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Everest Forms  WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-13T06:31:43Z\n\ud83d\udccf Modified: 2025-02-13T06:31:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13125\n2. https://wpscan.com/vulnerability/f60a8358-1765-4cae-9c89-0d75c5e394ec", "creation_timestamp": "2025-02-13T07:10:15.000000Z"}, {"uuid": "229c27c1-823f-4e30-b353-8ad3bbf94126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13693", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5264", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13693\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-export-class.php in all versions up to, and including, 6.0.9. This makes it possible for unauthenticated attackers to export all avia settings which may included sensitive information such as the Mailchimp API Key, reCAPTCHA Secret Key, or Envato private token if they are set.\n\ud83d\udccf Published: 2025-02-25T09:21:33.130Z\n\ud83d\udccf Modified: 2025-02-25T09:21:33.130Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/61a9ad18-28d4-488c-b3a7-e35745f9c83e?source=cve\n2. https://themeforest.net/item/enfold-responsive-multipurpose-theme/4519990#item-description__changelog", "creation_timestamp": "2025-02-25T10:23:10.000000Z"}, {"uuid": "dff17ecf-39ef-4a24-aa46-5ef7c47ec577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4237", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13867\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Listivo - Classified Ads WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 2.3.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-13T12:31:06Z\n\ud83d\udccf Modified: 2025-02-13T12:31:06Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13867\n2. https://themeforest.net/item/listivo-classified-ads-wordpress-theme/34032749\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/705c2322-bb52-4337-b0dd-6bf04bd1b0e0?source=cve", "creation_timestamp": "2025-02-13T13:12:32.000000Z"}, {"uuid": "7e9cd6af-7a84-4411-968c-f45bb15ac3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4219", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13770\n\ud83d\udd25 CVSS Score: 8.1 (CVSS_V3)\n\ud83d\udd39 Description: The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'view_more_posts' AJAX action. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. The developer opted to remove the software from the repository, so an update is not available and it is recommended to find a replacement software.\n\ud83d\udccf Published: 2025-02-13T06:31:42Z\n\ud83d\udccf Modified: 2025-02-13T06:31:42Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13770\n2. https://themeforest.net/item/puzzles-wordpress-magazinereview-with-wooc/5690583\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/950d1c8f-6715-4b0d-bf3d-af978a146838?source=cve", "creation_timestamp": "2025-02-13T07:11:46.000000Z"}, {"uuid": "66ef1747-74e5-4498-a021-e26c7d5b5acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13121\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content  WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-13T06:31:43Z\n\ud83d\udccf Modified: 2025-02-13T06:31:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13121\n2. https://wpscan.com/vulnerability/59ee8fe5-4820-4d52-b17a-7044631c40c1", "creation_timestamp": "2025-02-13T07:11:44.000000Z"}, {"uuid": "b3f006d5-7726-4f7d-a012-8f74652b10bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13315", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4751", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13315\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Shopwarden \u2013 Automated WooCommerce monitoring & testing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.11. This is due to missing or incorrect nonce validation on the save_setting() function. This makes it possible for unauthenticated attackers to update arbitrary options and achieve privilege escalation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-18T05:22:27.675Z\n\ud83d\udccf Modified: 2025-02-18T05:22:27.675Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b11ed628-f736-4262-80a2-62b32948a3a4?source=cve\n2. https://plugins.trac.wordpress.org/browser/shopwarden/trunk/shopwarden.php#L112\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3238978%40shopwarden&new=3238978%40shopwarden&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:00:35.000000Z"}, {"uuid": "25986f2c-57f9-4245-89b3-13d5e3c52008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13345\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-02-13T09:31:25Z\n\ud83d\udccf Modified: 2025-02-13T09:31:25Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13345\n2. https://avada.com/documentation/avada-changelog\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/94f6aab3-49a7-4837-a424-e40e483f3f68?source=cve", "creation_timestamp": "2025-02-13T10:09:24.000000Z"}, {"uuid": "e0348ada-30b7-4776-9df7-f27661fd8802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4429", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13641\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T06:15:19.957\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L127\n2. https://plugins.trac.wordpress.org/changeset/3236486/\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/5f88a21d-28a9-4c91-9bf9-6b69f6a420e8?source=cve", "creation_timestamp": "2025-02-14T07:12:02.000000Z"}, {"uuid": "d7937e67-9d5c-4ad4-ba9e-2d0b8ff2f15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4428", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13692\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T06:15:20.140\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L127\n2. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L186\n3. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L374\n4. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/public/class-woo-refund-and-exchange-lite-public.php#L381\n5. https://plugins.trac.wordpress.org/changeset/3236486/\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/dafbf6e2-1160-4551-a987-5e94c9157ff2?source=cve", "creation_timestamp": "2025-02-14T07:11:39.000000Z"}, {"uuid": "2a7dc122-7d81-44d4-866f-ab1eb1b63d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4552", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13563\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T09:15:09.897\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/front-end-only-users/trunk/Shortcodes/Insert_Forgot_Password.php#L61\n2. https://plugins.trac.wordpress.org/changeset/3240349/\n3. https://wordpress.org/plugins/front-end-only-users\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/51f3497f-c599-4d47-bd5a-94e1679a0025?source=cve", "creation_timestamp": "2025-02-15T11:10:56.000000Z"}, {"uuid": "eeae4156-ca21-4fe9-8374-39532df83111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13899", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5003", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13899\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Mambo Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0 via deserialization of untrusted input via the $data parameter in the fImportMenu function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-02-22T03:21:00.665Z\n\ud83d\udccf Modified: 2025-02-22T03:21:00.665Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b6d448c2-5acc-47f8-8e86-9ef10fa01513?source=cve\n2. https://plugins.trac.wordpress.org/browser/mambo-joomla-importer/trunk/mamboImporter.php#L45", "creation_timestamp": "2025-02-22T04:18:40.000000Z"}, {"uuid": "3f51515f-0813-4253-b442-a01f51aa9458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4420", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13493\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Sensly Online Presence WordPress plugin through 0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-14T06:30:36Z\n\ud83d\udccf Modified: 2025-02-14T06:30:36Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13493\n2. https://wpscan.com/vulnerability/dfbdd474-92e5-422b-a185-e441a6014557", "creation_timestamp": "2025-02-14T07:09:51.000000Z"}, {"uuid": "5ff37f58-53db-4355-8787-20a98c530f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4424", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13692\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Return Refund and Exchange For WooCommerce \u2013 Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.4.5 via several functions due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to overwrite linked refund image attachments, overwrite refund request message, overwrite order messages, and read order messages of other users.\n\ud83d\udccf Published: 2025-02-14T06:30:36Z\n\ud83d\udccf Modified: 2025-02-14T06:30:36Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13692\n2. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L127\n3. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L186\n4. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/common/class-woo-refund-and-exchange-lite-common.php#L374\n5. https://plugins.trac.wordpress.org/browser/woo-refund-and-exchange-lite/trunk/public/class-woo-refund-and-exchange-lite-public.php#L381\n6. https://plugins.trac.wordpress.org/changeset/3236486\n7. https://www.wordfence.com/threat-intel/vulnerabilities/id/dafbf6e2-1160-4551-a987-5e94c9157ff2?source=cve", "creation_timestamp": "2025-02-14T07:10:01.000000Z"}, {"uuid": "06714a7c-6f6d-4f84-9dde-f6a5fa4de69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13493\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T06:15:19.740\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/dfbdd474-92e5-422b-a185-e441a6014557/", "creation_timestamp": "2025-02-14T07:12:04.000000Z"}, {"uuid": "426637a5-b74a-4510-a9ad-6f77147c0b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13306", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4532", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13306\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Maps Plugin using Google Maps for WordPress  WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-15T06:30:51Z\n\ud83d\udccf Modified: 2025-02-15T06:30:51Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13306\n2. https://wpscan.com/vulnerability/ec3096f2-60fd-4654-9e95-5cf4b20b2990", "creation_timestamp": "2025-02-15T07:11:12.000000Z"}, {"uuid": "7e34e2b9-9b95-45ca-8c35-05ba629d322b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13735", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4440", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13735\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T10:15:09.207\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://docs.hurrytimer.com/getting-started/creating-a-one-time-campaign\n2. https://plugins.trac.wordpress.org/changeset/3239755/\n3. https://wordpress.org/plugins/hurrytimer/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/a5b247a7-50f4-4d35-b24a-2c788ba0b051?source=cve", "creation_timestamp": "2025-02-14T11:15:42.000000Z"}, {"uuid": "03d036ed-63f6-4ed0-82b6-15e9b2d00575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13573", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13573\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Zigaform \u2013 Form Builder Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zgfm_rfvar' shortcode in all versions up to, and including, 7.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:17.957Z\n\ud83d\udccf Modified: 2025-02-18T04:21:17.957Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/768d0ef5-5213-4283-b95e-ddfe0d2196bf?source=cve\n2. https://plugins.trac.wordpress.org/browser/zigaform-form-builder-lite/trunk/modules/formbuilder/controllers/uiform-fb-controller-frontend.php#L366", "creation_timestamp": "2025-02-18T07:56:49.000000Z"}, {"uuid": "80703ac4-e594-4e3a-bdda-1f4b9eda6ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13577", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13577\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The CATS Job Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catsone' shortcode in all versions up to, and including, 2.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:14.965Z\n\ud83d\udccf Modified: 2025-02-18T04:21:14.965Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4c0af593-2674-484a-a6a5-715f6fb488cf?source=cve\n2. https://plugins.trac.wordpress.org/browser/cats-job-listings/trunk/CATSJobListingUser.php#L57", "creation_timestamp": "2025-02-18T07:57:01.000000Z"}, {"uuid": "c5a4bcb9-39f5-4872-941f-a0ae47b7d8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13852", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13852\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Option Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the plugin_page() function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-02-18T04:21:15.377Z\n\ud83d\udccf Modified: 2025-02-18T04:21:15.377Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/50adbe1d-9d79-4015-9e09-2166f97efc47?source=cve\n2. https://plugins.trac.wordpress.org/browser/option-editor/trunk/option-editor.php#L70\n3. https://wordpress.org/plugins/option-editor/#developers", "creation_timestamp": "2025-02-18T07:57:00.000000Z"}, {"uuid": "c7bda7a4-3569-4c41-a5e0-04cac9c7d2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13525", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4553", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13525\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T09:15:08.833\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.9.2/includes/class-alg-wc-ev-core.php#L990\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3232261%40emails-verification-for-woocommerce%2Ftrunk&old=3230854%40emails-verification-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/a63a41d1-b9b0-43a9-a6e0-761f3b8d9d4a?source=cve", "creation_timestamp": "2025-02-15T11:10:57.000000Z"}, {"uuid": "9f4d549b-4a30-4c97-abc0-8447c609da6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4555", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13752\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The WP Project Manager \u2013 Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the '/pm/v2/settings/notice' endpoint all versions up to, and including, 2.6.17. This makes it possible for authenticated attackers, with Subscriber-level access and above, to cause a persistent denial of service condition.\n\ud83d\udccf Published: 2025-02-15T12:30:50Z\n\ud83d\udccf Modified: 2025-02-15T12:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13752\n2. https://plugins.trac.wordpress.org/browser/wedevs-project-manager/trunk/core/Upgrades/Upgrade_2_0.php#L255\n3. https://plugins.trac.wordpress.org/browser/wedevs-project-manager/trunk/core/Upgrades/Upgrade_2_3.php#L151\n4. https://plugins.trac.wordpress.org/changeset/3239348\n5. https://plugins.trac.wordpress.org/changeset?old_path=%2Fwedevs-project-manager%2Ftags%2F2.6.17%2Fsrc%2FSettings%2FControllers%2FSettings_Controller.php&old=3213295&new_path=%2Fwedevs-project-manager%2Ftags%2F2.6.18%2Fsrc%2FSettings%2FControllers%2FSettings_Controller.php&new=3240807&sfp_email=&sfph_mail=\n6. https://plugins.trac.wordpress.org/changeset?old_path=%2Fwedevs-project-manager%2Ftrunk%2Froutes%2Fsettings.php&old=3213295&new_path=%2Fwedevs-project-manager%2Ftrunk%2Froutes%2Fsettings.php&new=3240806&sfp_email=&sfph_mail=\n7. https://wordpress.org/plugins/wedevs-project-manager/#developers\n8. https://www.wordfence.com/threat-intel/vulnerabilities/id/bd54a50b-13ce-43ce-bce1-8fe132abc07e?source=cve", "creation_timestamp": "2025-02-15T13:11:15.000000Z"}, {"uuid": "e4d5d798-6845-4ef4-8f29-b4c0adb005b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4559", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13500\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The WP Project Manager \u2013 Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018orderby\u2019 parameter in all versions up to, and including, 2.6.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-15T12:30:50Z\n\ud83d\udccf Modified: 2025-02-15T12:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13500\n2. https://plugins.trac.wordpress.org/changeset/3239348\n3. https://wordpress.org/plugins/wedevs-project-manager/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/70083f93-f110-4029-a3d3-ce8a77799a31?source=cve", "creation_timestamp": "2025-02-15T13:11:21.000000Z"}, {"uuid": "e9c7fe8b-e887-4978-a578-818b84425062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4558", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13488\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The LTL Freight Quotes \u2013 Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-15T12:30:50Z\n\ud83d\udccf Modified: 2025-02-15T12:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13488\n2. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-estes-edition/trunk/warehouse-dropship/wild/includes/wild-delivery-save.php#L250\n3. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-estes-edition/trunk/warehouse-dropship/wild/includes/wild-delivery-save.php#L364\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3239967%40ltl-freight-quotes-estes-edition&new=3239967%40ltl-freight-quotes-estes-edition&sfp_email=&sfph_mail=\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/b77b064d-ab8c-4e84-b5cc-efbdeefbf502?source=cve", "creation_timestamp": "2025-02-15T13:11:17.000000Z"}, {"uuid": "658a2bf4-f0ca-4390-a611-80bf780285bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4556", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13439\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The Team \u2013 Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response() function in all versions up to, and including, 4.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings.\n\ud83d\udccf Published: 2025-02-15T12:30:50Z\n\ud83d\udccf Modified: 2025-02-15T12:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13439\n2. https://plugins.svn.wordpress.org/tlp-team/tags/4.4.7/app/Controllers/Admin/Ajax/Settings.php\n3. https://plugins.trac.wordpress.org/changeset/3239948/tlp-team/trunk/app/Controllers/Admin/Ajax/Settings.php\n4. https://plugins.trac.wordpress.org/changeset/3239948/tlp-team/trunk/app/Controllers/Admin/Ajax/Skill.php\n5. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3239948%40tlp-team&new=3239948%40tlp-team&sfp_email=&sfph_mail=\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/46951d8d-f8f1-4fb5-b02a-1a19edd154e6?source=cve", "creation_timestamp": "2025-02-15T13:11:16.000000Z"}, {"uuid": "df471b37-5d33-4ac2-9ebe-5fa296fc14fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4543", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13513\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: The Oliver POS \u2013 A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.2.3 via the logging functionality. This makes it possible for unauthenticated attackers to extract sensitive data including the plugin's clientToken, which in turn can be used to change user account information including emails and account type. This allows attackers to then change account passwords resulting in a complete site takeover. Version 2.4.2.3 disabled logging but left sites with existing log files vulnerable.\n\ud83d\udccf Published: 2025-02-15T09:30:28Z\n\ud83d\udccf Modified: 2025-02-15T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13513\n2. https://plugins.trac.wordpress.org/browser/oliver-pos/trunk/includes/models/class-pos-bridge-user.php#L373\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3234731%40oliver-pos%2Ftrunk&old=3056051%40oliver-pos%2Ftrunk&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf6b7d8d-fb13-4eb4-b0b4-d0a10ad2a21e?source=cve", "creation_timestamp": "2025-02-15T10:11:05.000000Z"}, {"uuid": "7c37e9d8-d1ed-4a63-85ca-29087b5c59bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13513\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T08:15:07.790\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/oliver-pos/trunk/includes/models/class-pos-bridge-user.php#L373\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3234731%40oliver-pos%2Ftrunk&old=3056051%40oliver-pos%2Ftrunk&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf6b7d8d-fb13-4eb4-b0b4-d0a10ad2a21e?source=cve", "creation_timestamp": "2025-02-15T09:10:34.000000Z"}, {"uuid": "9d4b912f-cd41-4d20-b499-af63d2f75124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13306", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4535", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13306\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T06:15:36.847\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ec3096f2-60fd-4654-9e95-5cf4b20b2990/", "creation_timestamp": "2025-02-15T07:11:14.000000Z"}, {"uuid": "30f81df0-d0a1-4907-8319-0db62ba413e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13208", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4534", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13208\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Maps Plugin using Google Maps for WordPress  WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-15T06:30:51Z\n\ud83d\udccf Modified: 2025-02-15T06:30:51Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13208\n2. https://wpscan.com/vulnerability/f86d4f64-208f-407f-8d2c-a89b5e0ac777", "creation_timestamp": "2025-02-15T07:11:13.000000Z"}, {"uuid": "01854297-69ea-4bc9-a816-ea7e9120f844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4547", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13752\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T10:15:08.533\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/wedevs-project-manager/trunk/core/Upgrades/Upgrade_2_0.php#L255\n2. https://plugins.trac.wordpress.org/browser/wedevs-project-manager/trunk/core/Upgrades/Upgrade_2_3.php#L151\n3. https://plugins.trac.wordpress.org/changeset/3239348/\n4. https://plugins.trac.wordpress.org/changeset?old_path=%2Fwedevs-project-manager%2Ftags%2F2.6.17%2Fsrc%2FSettings%2FControllers%2FSettings_Controller.php&old=3213295&new_path=%2Fwedevs-project-manager%2Ftags%2F2.6.18%2Fsrc%2FSettings%2FControllers%2FSettings_Controller.php&new=3240807&sfp_email=&sfph_mail=\n5. https://plugins.trac.wordpress.org/changeset?old_path=%2Fwedevs-project-manager%2Ftrunk%2Froutes%2Fsettings.php&old=3213295&new_path=%2Fwedevs-project-manager%2Ftrunk%2Froutes%2Fsettings.php&new=3240806&sfp_email=&sfph_mail=\n6. https://wordpress.org/plugins/wedevs-project-manager/#developers\n7. https://www.wordfence.com/threat-intel/vulnerabilities/id/bd54a50b-13ce-43ce-bce1-8fe132abc07e?source=cve", "creation_timestamp": "2025-02-15T11:10:49.000000Z"}, {"uuid": "bce33c72-6602-4c7d-adb6-7018f841e568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4545", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13563\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's forgot-password shortcode in all versions up to, and including, 3.2.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-15T09:30:28Z\n\ud83d\udccf Modified: 2025-02-15T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13563\n2. https://plugins.trac.wordpress.org/browser/front-end-only-users/trunk/Shortcodes/Insert_Forgot_Password.php#L61\n3. https://plugins.trac.wordpress.org/changeset/3240349\n4. https://wordpress.org/plugins/front-end-only-users\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/51f3497f-c599-4d47-bd5a-94e1679a0025?source=cve", "creation_timestamp": "2025-02-15T10:11:10.000000Z"}, {"uuid": "6e853e92-e78b-4e0a-a773-a621d1eca4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13525", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4544", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13525\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including emails as well as hashed passwords of any user.\n\ud83d\udccf Published: 2025-02-15T09:30:28Z\n\ud83d\udccf Modified: 2025-02-15T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13525\n2. https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.9.2/includes/class-alg-wc-ev-core.php#L990\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3232261%40emails-verification-for-woocommerce%2Ftrunk&old=3230854%40emails-verification-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/a63a41d1-b9b0-43a9-a6e0-761f3b8d9d4a?source=cve", "creation_timestamp": "2025-02-15T10:11:06.000000Z"}, {"uuid": "686219ec-00fa-46b0-84d9-2624d804f5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4568", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13834\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Responsive Plus \u2013 Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.4 via the 'remote_request' function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-02-15T15:30:24Z\n\ud83d\udccf Modified: 2025-02-15T15:30:24Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13834\n2. https://plugins.trac.wordpress.org/changeset/3240422/responsive-add-ons\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2833265-f1e5-4cfd-ad2f-ca28a59de82f?source=cve", "creation_timestamp": "2025-02-15T16:12:23.000000Z"}, {"uuid": "f2b57ec9-1789-4b69-a79d-2af42acff055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4562", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13488\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T12:15:30.457\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-estes-edition/trunk/warehouse-dropship/wild/includes/wild-delivery-save.php#L250\n2. https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-estes-edition/trunk/warehouse-dropship/wild/includes/wild-delivery-save.php#L364\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3239967%40ltl-freight-quotes-estes-edition&new=3239967%40ltl-freight-quotes-estes-edition&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/b77b064d-ab8c-4e84-b5cc-efbdeefbf502?source=cve", "creation_timestamp": "2025-02-15T13:11:24.000000Z"}, {"uuid": "d4bf1f56-a8c3-458c-8659-77a3f880785e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4561", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13500\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T12:15:30.610\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3239348/\n2. https://wordpress.org/plugins/wedevs-project-manager/#developers\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/70083f93-f110-4029-a3d3-ce8a77799a31?source=cve", "creation_timestamp": "2025-02-15T13:11:23.000000Z"}, {"uuid": "4da0a450-a356-4a00-aac6-31595bfd9681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13725", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4744", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13725\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. If register_argc_argv is enabled on the server and pearcmd.php is installed, this issue might lead to Remote Code Execution.\n\ud83d\udccf Published: 2025-02-18T04:21:16.466Z\n\ud83d\udccf Modified: 2025-02-18T04:21:16.466Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/692a5838-4a32-4444-b1a0-018fa25594a9?source=cve\n2. https://wordpress.org/plugins/infusionsoft-official-opt-in-forms/\n3. https://plugins.trac.wordpress.org/browser/infusionsoft-official-opt-in-forms/trunk/infusionsoft.php#L2540", "creation_timestamp": "2025-02-18T07:56:55.000000Z"}, {"uuid": "a72686bd-9d30-4f58-a07a-52464a72632e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13576", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4743", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13576\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Gumlet Video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gumlet' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:16.825Z\n\ud83d\udccf Modified: 2025-02-18T04:21:16.825Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6b8b94fc-9ae7-47f3-b804-92d0948b662e?source=cve\n2. https://plugins.trac.wordpress.org/browser/gumlet-video/tags/1.0.3/gumlet-video.php#L112", "creation_timestamp": "2025-02-18T07:56:55.000000Z"}, {"uuid": "5d7416d6-2dc6-4b46-aae8-d423dcb76407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13535", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13535\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Actionwear products sync plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.3.0. This is due the composer-setup.php file being publicly accessible with 'display_errors' set to true. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.\n\ud83d\udccf Published: 2025-02-18T04:21:17.197Z\n\ud83d\udccf Modified: 2025-02-18T04:21:17.197Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6dbf9689-c812-4b7c-9df3-c4639aae3357?source=cve\n2. https://plugins.trac.wordpress.org/browser/actionwear-products-sync/trunk/composer-setup.php", "creation_timestamp": "2025-02-18T07:56:54.000000Z"}, {"uuid": "86375089-d60a-449b-a865-d3ae4439003c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13439\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T12:15:30.300\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.svn.wordpress.org/tlp-team/tags/4.4.7/app/Controllers/Admin/Ajax/Settings.php\n2. https://plugins.trac.wordpress.org/changeset/3239948/tlp-team/trunk/app/Controllers/Admin/Ajax/Settings.php\n3. https://plugins.trac.wordpress.org/changeset/3239948/tlp-team/trunk/app/Controllers/Admin/Ajax/Skill.php\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3239948%40tlp-team&new=3239948%40tlp-team&sfp_email=&sfph_mail=\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/46951d8d-f8f1-4fb5-b02a-1a19edd154e6?source=cve", "creation_timestamp": "2025-02-15T13:11:24.000000Z"}, {"uuid": "4376a471-6c93-4ffa-b30b-43da784c4b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13555", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4736", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13555\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The 1 Click WordPress Migration Plugin \u2013 100% FREE for a limited time plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the cancel_actions() function. This makes it possible for unauthenticated attackers to cancel a triggered backup via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-18T04:21:19.375Z\n\ud83d\udccf Modified: 2025-02-18T04:21:19.375Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/aee963fa-26b5-4bf0-b52f-095c67fb4834?source=cve\n2. https://wordpress.org/plugins/1-click-migration/", "creation_timestamp": "2025-02-18T07:56:46.000000Z"}, {"uuid": "2b5db78c-06b3-432b-a007-522b7baac25c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13677", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13677\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The GetBookingsWP \u2013 Appointments Booking Calendar Plugin For WordPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.27. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.\n\ud83d\udccf Published: 2025-02-18T04:21:19.723Z\n\ud83d\udccf Modified: 2025-02-18T04:21:19.723Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b6b0dc03-3715-41f8-8888-1cccddb39c0b?source=cve\n2. https://plugins.trac.wordpress.org/browser/get-bookings-wp/trunk/classes/user.php", "creation_timestamp": "2025-02-18T07:56:43.000000Z"}, {"uuid": "b7090b1d-f74e-45a0-9944-4333197fffaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13464", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4733", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13464\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Library Bookshelves plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bookshelf' shortcode in all versions up to, and including, 5.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:20.479Z\n\ud83d\udccf Modified: 2025-02-18T04:21:20.479Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c6b75ae7-89d9-4dd4-85c1-c12369bd86c8?source=cve\n2. https://plugins.trac.wordpress.org/browser/library-bookshelves/trunk/functions.php#L681", "creation_timestamp": "2025-02-18T07:56:41.000000Z"}, {"uuid": "921ce4dd-7932-4156-bd41-b7c53c0f061d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13609", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4732", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13609\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The 1 Click WordPress Migration Plugin \u2013 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data including usernames and their respective password hashes during a short window of time in which the backup is in process.\n\ud83d\udccf Published: 2025-02-18T04:21:20.833Z\n\ud83d\udccf Modified: 2025-02-18T04:21:20.833Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d33199ea-7c96-4c60-a7b8-5c7e9835e231?source=cve\n2. https://plugins.trac.wordpress.org/browser/1-click-migration/trunk/inc/backup/class-ocm-backup.php", "creation_timestamp": "2025-02-18T07:56:40.000000Z"}, {"uuid": "300126fa-6aa3-4556-961b-568e08025e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4571", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13834\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T15:15:23.423\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3240422/responsive-add-ons\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2833265-f1e5-4cfd-ad2f-ca28a59de82f?source=cve", "creation_timestamp": "2025-02-15T17:11:11.000000Z"}, {"uuid": "97100c4f-b6af-4894-bf98-00d02ae57f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13711", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4795", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13711\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Pollin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'question' parameter in all versions up to, and including, 1.01.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-19T07:32:08.537Z\n\ud83d\udccf Modified: 2025-02-19T07:32:08.537Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4beb01c1-2144-4b1f-9d32-cf2725a8d4ae?source=cve\n2. https://wordpress.org/plugins/pollin/", "creation_timestamp": "2025-02-19T08:41:17.000000Z"}, {"uuid": "4d7d571f-e637-4afe-ba01-4709aceee126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13854", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4794", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13854\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.1 via the naedu_elementor_template shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract information from posts that are not public, including drafts, password protected, and restricted posts. This applies to posts created with Elementor only.\n\ud83d\udccf Published: 2025-02-19T07:32:08.945Z\n\ud83d\udccf Modified: 2025-02-19T07:32:08.945Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/50e8811c-07b1-4325-92a4-dc1c91afbe9e?source=cve\n2. https://wordpress.org/plugins/education-addon/#developers", "creation_timestamp": "2025-02-19T08:41:16.000000Z"}, {"uuid": "62acb43b-88ac-4c73-8786-0ce018159a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13674", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4793", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13674\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Cosmic Blocks (40+) Content Editor Blocks Collection plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cwp_social_share' shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:09.359Z\n\ud83d\udccf Modified: 2025-02-19T07:32:09.359Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5cccd266-48a8-481e-8fbd-db5a9a72f55a?source=cve\n2. https://wordpress.org/plugins/cosmic-blocks/", "creation_timestamp": "2025-02-19T08:41:15.000000Z"}, {"uuid": "f474a7e8-3324-42a9-9bcf-a93c64136518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13465", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4765", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13465\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The aBlocks \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \"Table Of Content\" Block, specifically in the \"markerView\" attribute, in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T07:28:13.882Z\n\ud83d\udccf Modified: 2025-02-18T07:28:13.882Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/abdb6632-d579-4650-b058-da10201cca8c?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3236611%40ablocks&new=3236611%40ablocks&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:41:11.000000Z"}, {"uuid": "ec330a9e-8d38-47cd-b9c3-f0e61b55c231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13565", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4734", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13565\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Simple Map No Api plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018width\u2019 parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:20.101Z\n\ud83d\udccf Modified: 2025-02-18T04:21:20.101Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c4d46c87-5c30-4251-941e-a5e52b5d0c9f?source=cve\n2. https://plugins.trac.wordpress.org/browser/simple-map-no-api/trunk/index.php#L242\n3. https://wordpress.org/plugins/simple-map-no-api", "creation_timestamp": "2025-02-18T07:56:42.000000Z"}, {"uuid": "554fcf7a-d47f-4177-9a82-a52f4493ce9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13582", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13582\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdo_simple_pricing_table_free' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:21.202Z\n\ud83d\udccf Modified: 2025-02-18T04:21:21.202Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d94cd171-c2a4-4ef0-bc9a-5fdd2b704b5b?source=cve\n2. https://plugins.trac.wordpress.org/browser/simple-pricing-tables-vc-extension/tags/1.0/plugin.class.php#L403", "creation_timestamp": "2025-02-18T07:56:40.000000Z"}, {"uuid": "ed30dc35-5965-4a77-8e89-25969ffe36e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13687", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4739", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13687\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Team Builder \u2013 Meet the Team plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_team_builder_options() function in all versions up to, and including, 1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings.\n\ud83d\udccf Published: 2025-02-18T04:21:18.316Z\n\ud83d\udccf Modified: 2025-02-18T04:21:18.316Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7c35e20f-bfb0-4de0-9f8f-6e04fbbe138a?source=cve\n2. https://plugins.trac.wordpress.org/browser/team-display/tags/1.3/plugin.class.php#L34", "creation_timestamp": "2025-02-18T07:56:49.000000Z"}, {"uuid": "857e17ef-a1df-4912-92f8-a61ba80ac7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13848", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4738", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13848\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Reaction Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-02-18T04:21:18.678Z\n\ud83d\udccf Modified: 2025-02-18T04:21:18.678Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9f5a77d1-b575-4e7c-bf27-fc78260de302?source=cve\n2. https://wordpress.org/plugins/reaction-buttons/#developers", "creation_timestamp": "2025-02-18T07:56:48.000000Z"}, {"uuid": "05986149-98bf-4a34-ad0b-b60971f389d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13622", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4737", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13622\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The File Uploads Addon for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file attachments uploaded by customers.\n\ud83d\udccf Published: 2025-02-18T04:21:19.028Z\n\ud83d\udccf Modified: 2025-02-18T04:21:19.028Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9f86bb77-7194-4a8d-b862-6f04d850017b?source=cve\n2. https://plugins.trac.wordpress.org/browser/woo-addon-uploads/trunk/woocommerce-addon-uploads.php#L80\n3. https://plugins.trac.wordpress.org/browser/woo-addon-uploads/trunk/includes/class-wau-front-end.php#L81", "creation_timestamp": "2025-02-18T07:56:47.000000Z"}, {"uuid": "253f5d60-9bff-4ab1-bb78-1517de483edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13588", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13588\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Simplebooklet PDF Viewer and Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'simplebooklet' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:15.726Z\n\ud83d\udccf Modified: 2025-02-18T04:21:15.726Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/59d9ff2e-4b0b-4096-91ca-1a029f31796b?source=cve\n2. https://plugins.trac.wordpress.org/browser/simplebooklet/trunk/simplebooklet.php\n3. https://wordpress.org/plugins/simplebooklet/", "creation_timestamp": "2025-02-18T07:57:00.000000Z"}, {"uuid": "6bdd609f-5596-427e-865b-fc3d2b67c22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13592", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4780", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13592\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Team Builder For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0 via the 'team-builder-vc' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-02-19T07:32:14.735Z\n\ud83d\udccf Modified: 2025-02-19T07:32:14.735Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ee7e8d76-a461-4b0b-a312-c6ea4b8ac375?source=cve\n2. https://plugins.trac.wordpress.org/browser/team-builder-for-wpbakery-page-builder/tags/1.0/plugin.class.php#L55", "creation_timestamp": "2025-02-19T08:40:56.000000Z"}, {"uuid": "5f3aabcb-57a8-41fd-ae8a-ee69f18cdedf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13405", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4779", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13405\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation on the 'awp_ip_deny' page. This makes it possible for unauthenticated attackers to block IP addresses via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-19T07:32:15.148Z\n\ud83d\udccf Modified: 2025-02-19T07:32:15.148Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f8225e3c-5413-4406-a31b-80829b6b330a?source=cve\n2. https://wordpress.org/plugins/apptivo-business-site/", "creation_timestamp": "2025-02-19T08:40:55.000000Z"}, {"uuid": "1ec38ad9-9a57-49bd-bc6a-93b79d6cdd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13676", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4785", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13676\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Categorized Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' attribute of the 'image_gallery' shortcode in all versions up to, and including, 2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-19T07:32:12.679Z\n\ud83d\udccf Modified: 2025-02-19T07:32:12.679Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b409ef44-18fa-4ea0-90a4-69e03fa0116e?source=cve\n2. https://plugins.trac.wordpress.org/browser/categorized-gallery/trunk/init.php#L177", "creation_timestamp": "2025-02-19T08:41:03.000000Z"}, {"uuid": "4f6e0a49-68c1-43ed-a8db-a8a2f65a493e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13657", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4784", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13657\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Store Locator Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'storelocatorwidget' shortcode in all versions up to, and including, 20200131 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:13.110Z\n\ud83d\udccf Modified: 2025-02-19T07:32:13.110Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c65b6793-42e3-40cb-a6fe-b000c879d41f?source=cve\n2. https://plugins.trac.wordpress.org/browser/store-locator-widget/trunk/store-locator-widget.php#L118", "creation_timestamp": "2025-02-19T08:41:02.000000Z"}, {"uuid": "05190d94-9563-450d-8406-5cf39d3b69dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13736", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4783", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13736\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Pure Chat \u2013 Live Chat & More! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018purechatWidgetName\u2019 parameter in all versions up to, and including, 2.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:13.520Z\n\ud83d\udccf Modified: 2025-02-19T07:32:13.520Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e11993c1-48fa-4e37-850d-d02e3e20d56f?source=cve\n2. https://wordpress.org/plugins/pure-chat/#developers\n3. https://plugins.trac.wordpress.org/browser/pure-chat/trunk/purechat.php#L149\n4. https://plugins.trac.wordpress.org/browser/pure-chat/trunk/purechat.php#L99", "creation_timestamp": "2025-02-19T08:41:01.000000Z"}, {"uuid": "7228295a-4485-4bfe-a79b-4eebbb85d2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13540", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13540\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The WooODT Lite \u2013 Delivery & pickup date time location for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.5.1. This is due the /inc/bycwooodt_get_all_orders.php file being publicly accessible and generating a publicly visible error message. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.\n\ud83d\udccf Published: 2025-02-18T04:21:14.616Z\n\ud83d\udccf Modified: 2025-02-18T04:21:14.616Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4158f6ff-8e0f-4531-8c94-f59220d6fea6?source=cve\n2. https://plugins.trac.wordpress.org/browser/byconsole-woo-order-delivery-time/trunk/inc/bycwooodt_get_all_orders.php", "creation_timestamp": "2025-02-18T07:57:02.000000Z"}, {"uuid": "cbd1c30d-c981-42bc-8431-8bc2fd85c235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13523", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4755", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13523\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The MemorialDay plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-18T07:02:26.288Z\n\ud83d\udccf Modified: 2025-02-18T07:02:26.288Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/96cec16e-7bb3-4279-8c17-eca88d413ad8?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3232363%40memorialday%2Ftrunk&old=3207291%40memorialday%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:09:52.000000Z"}, {"uuid": "87fca615-1ed1-4baf-8638-e83f02a60d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13438", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13438\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The SpeedSize Image & Video AI-Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the 'speedsize_clear_css_cache_action' function. This makes it possible for unauthenticated attackers to clear the plugins cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-18T05:22:26.550Z\n\ud83d\udccf Modified: 2025-02-18T05:22:26.550Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1404c675-49b3-48a5-8aac-826c58755b8e?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3236368%40speedsize-ai-image-optimizer&new=3236368%40speedsize-ai-image-optimizer&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:00:37.000000Z"}, {"uuid": "f918a513-98ce-4e3c-ba90-2870725cd89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4752", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13556\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input from an file export. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-02-18T05:22:27.177Z\n\ud83d\udccf Modified: 2025-02-18T05:22:27.177Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/290027c3-6b0a-43b9-9220-b8c641eb73f7?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3238736%40affiliate-links&new=3238736%40affiliate-links&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:00:36.000000Z"}, {"uuid": "c2bf4a58-57c1-4e8a-968f-6db2099952c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13468", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13468\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'duplicates-action-top' action in all versions up to, and including, 1.9. This makes it possible for unauthenticated attackers to delete arbitrary posts/pages.\n\ud83d\udccf Published: 2025-02-19T07:32:14.346Z\n\ud83d\udccf Modified: 2025-02-19T07:32:14.346Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ebb6afd7-6bc4-4c8a-a645-04f64d5adff4?source=cve\n2. https://wordpress.org/plugins/trash-duplicate-and-301-redirect/", "creation_timestamp": "2025-02-19T08:40:56.000000Z"}, {"uuid": "6fa3c6d9-49e2-4e04-94a0-36e4a3df099a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13795", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4764", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13795\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27. This is due to missing or incorrect nonce validation on the ecwid_deactivate_feedback() function. This makes it possible for unauthenticated attackers to send deactivation messages on behalf of a site owner via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-18T07:28:14.388Z\n\ud83d\udccf Modified: 2025-02-18T07:28:14.388Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f1eb9ec6-897a-4c38-a85c-033d7050dcfa?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3241777%40ecwid-shopping-cart&new=3241777%40ecwid-shopping-cart&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:41:11.000000Z"}, {"uuid": "b231cd59-6723-4469-bc98-f5c9d83398b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13575", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4762", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13575\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Web Stories Enhancer \u2013 Level Up Your Web Stories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'web_stories_enhancer' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T07:28:15.305Z\n\ud83d\udccf Modified: 2025-02-18T07:28:15.305Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fdc614f2-37a6-474a-828a-1f34f98715c5?source=cve\n2. https://plugins.trac.wordpress.org/browser/web-stories-enhancer/trunk/includes/shortcode.php#L99\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3238312%40web-stories-enhancer&new=3238312%40web-stories-enhancer&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:41:06.000000Z"}, {"uuid": "e4766b86-687d-4dcb-8a0e-7a190392bc00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13704", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13704\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'st_user_title' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T07:28:12.710Z\n\ud83d\udccf Modified: 2025-02-18T07:28:12.710Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/20720912-6bfd-4df1-97c7-7025c16d7a0f?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3240039%40super-testimonial&new=3240039%40super-testimonial&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-18T08:41:13.000000Z"}, {"uuid": "1b148954-92d3-4ffb-bd8c-29b1bda0aefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13379", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4849", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13379\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The C9 Admin Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-02-21T03:21:21.080Z\n\ud83d\udccf Modified: 2025-02-21T03:21:21.080Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/88f4af1b-5e3c-4129-93c3-4f368bd2b0db?source=cve\n2. https://plugins.trac.wordpress.org/browser/c9-admin-dashboard/trunk/c9-admin.php#L51\n3. https://plugins.trac.wordpress.org/browser/c9-admin-dashboard/trunk/c9-admin.php#L59\n4. https://wordpress.org/plugins/c9-admin-dashboard/#developers", "creation_timestamp": "2025-02-21T04:19:51.000000Z"}, {"uuid": "aefb1764-57d4-4f09-84da-a40ca94dcc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13672", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4848", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13672\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mcg' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T03:21:21.466Z\n\ud83d\udccf Modified: 2025-02-21T03:21:21.466Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b47505a5-fb7f-4e41-a6de-6f0b330aa495?source=cve\n2. https://plugins.trac.wordpress.org/browser/mini-course-generator/tags/1.0.4/includes/class-mcg-shortcodes.php#L10\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3243023%40mini-course-generator&new=3243023%40mini-course-generator&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-21T04:19:46.000000Z"}, {"uuid": "1a8bb039-ed67-4ded-ad8a-03eedb92a840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13799", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13799\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The User Private Files \u2013 File Upload & Download Manager with Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018new-fldr-name\u2019 parameter in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T05:22:53.160Z\n\ud83d\udccf Modified: 2025-02-19T05:22:53.160Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/419cf912-3187-43d7-90ab-1a20a46d86e4?source=cve\n2. https://plugins.trac.wordpress.org/browser/user-private-files/trunk/js/folder.js\n3. https://plugins.trac.wordpress.org/changeset/3240877/", "creation_timestamp": "2025-02-19T08:39:11.000000Z"}, {"uuid": "ab71841c-4454-48fe-b69c-364596066142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13679", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4778", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13679\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Widget BUY.BOX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buybox-widget' shortcode in all versions up to, and including, 3.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:15.599Z\n\ud83d\udccf Modified: 2025-02-19T07:32:15.599Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fba6abba-fe29-4a94-bf20-3db78737c275?source=cve\n2. https://plugins.trac.wordpress.org/browser/buybox-widget/trunk/functions/Widget/Embed.php#L43", "creation_timestamp": "2025-02-19T08:40:54.000000Z"}, {"uuid": "590bbc63-bcc8-491b-9996-75197944dce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13719\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The PeproDev Ultimate Invoice plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.8 via the invoicing viewer due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view invoices for completed orders which can contain PII of users.\n\ud83d\udccf Published: 2025-02-19T07:32:07.577Z\n\ud83d\udccf Modified: 2025-02-19T07:32:07.577Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/46186f8d-e50c-476a-9480-b6121412474a?source=cve\n2. https://wordpress.org/plugins/pepro-ultimate-invoice/", "creation_timestamp": "2025-02-19T08:41:19.000000Z"}, {"uuid": "f9b93fb1-4be6-499d-b961-12c8c6e40525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13591", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13591\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Team Builder For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'team-builder-vc' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:13.935Z\n\ud83d\udccf Modified: 2025-02-19T07:32:13.935Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e6b1e4d9-03dc-47e8-ab41-ae9c04dc0132?source=cve\n2. https://plugins.trac.wordpress.org/browser/team-builder-for-wpbakery-page-builder/tags/1.0/includes/style10.php#L2\n3. https://plugins.trac.wordpress.org/browser/team-builder-for-wpbakery-page-builder/tags/1.0/plugin.class.php#L55", "creation_timestamp": "2025-02-19T08:40:57.000000Z"}, {"uuid": "a27620c0-9c54-4e67-b2e9-cb736dad4757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13462", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13462\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Wiki Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wiki' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:11.019Z\n\ud83d\udccf Modified: 2025-02-19T07:32:11.019Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/926646de-4fb0-4460-b0d1-4d451e6505ca?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-wiki-tooltip/trunk/class.wp-wiki-tooltip.php\n3. https://wordpress.org/plugins/wp-wiki-tooltip/", "creation_timestamp": "2025-02-19T08:41:09.000000Z"}, {"uuid": "67fe2ccd-626b-4ce5-a7e0-21e39b813283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13660", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4791", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13660\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Responsive Flickr Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fshow' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:10.210Z\n\ud83d\udccf Modified: 2025-02-19T07:32:10.210Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8023be86-2bdb-4f16-9b54-a959f1e75e46?source=cve\n2. https://plugins.trac.wordpress.org/browser/mobile-friendly-flickr-slideshow/tags/2.6.1/mobile-friendly-flickr-slideshow.php#L191", "creation_timestamp": "2025-02-19T08:41:11.000000Z"}, {"uuid": "9eb4df24-97e9-4f63-ab93-5537102d6e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13388", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4853", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13388\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The TCBD Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbdtooltip_text' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T03:21:19.113Z\n\ud83d\udccf Modified: 2025-02-21T03:21:19.113Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/43ca15b7-8cb4-427f-892d-15022da17b2e?source=cve\n2. https://wordpress.org/plugins/tcbd-tooltip/", "creation_timestamp": "2025-02-21T04:19:54.000000Z"}, {"uuid": "20d06916-3a6a-486c-95ea-d7e6095291bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13235", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4852", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13235\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Pinpoint Booking System \u2013 #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'language' parameter in all versions up to, and including, 2.9.9.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-21T03:21:19.714Z\n\ud83d\udccf Modified: 2025-02-21T03:21:19.714Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/59cba7f0-cb06-4408-abba-49552dddd04c?source=cve\n2. https://plugins.trac.wordpress.org/browser/booking-system/trunk/includes/translation/class-backend-translation.php#L125", "creation_timestamp": "2025-02-21T04:19:53.000000Z"}, {"uuid": "59b05bf8-498d-409b-86f0-a9374131dd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13537", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4845", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13537\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The C9 Blocks plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.7.7. This is due the plugin containing a publicly accessible composer-setup.php file with error display enabled. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.\n\ud83d\udccf Published: 2025-02-21T03:21:22.710Z\n\ud83d\udccf Modified: 2025-02-21T03:21:22.710Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e3e682fb-e821-45cb-a087-d97d42a3743e?source=cve\n2. https://plugins.trac.wordpress.org/browser/c9-blocks/trunk/composer-setup.php", "creation_timestamp": "2025-02-21T04:19:44.000000Z"}, {"uuid": "10d1ca72-42ff-41bd-8f60-a95cf1e76580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13751", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4844", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13751\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The 3D Photo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'des[]' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T03:21:23.081Z\n\ud83d\udccf Modified: 2025-02-21T03:21:23.081Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/eae1c878-3df9-47af-8283-de3d5acb219a?source=cve\n2. https://plugins.trac.wordpress.org/browser/3d-photo-gallery/tags/1.3/plugin.class.php#L57", "creation_timestamp": "2025-02-21T04:19:43.000000Z"}, {"uuid": "b0fab196-b816-4985-817e-fabe41b40ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13883", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4851", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13883\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The WPUpper Share Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.51. This is due to missing or incorrect nonce validation on the 'save_custom_css_request' function. This makes it possible for unauthenticated attackers to inject custom CSS to modify a site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-21T03:21:20.350Z\n\ud83d\udccf Modified: 2025-02-21T03:21:20.350Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5ca55c87-6548-43b8-a23f-d31a51df9533?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpupper-share-buttons/trunk/Controller/ajax.controller.php#L94", "creation_timestamp": "2025-02-21T04:19:52.000000Z"}, {"uuid": "e301df96-6e77-47b0-a283-855a4e0ea05e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13818", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13818\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Registration Forms \u2013 User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3.9 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files.\n\ud83d\udccf Published: 2025-02-21T03:21:20.724Z\n\ud83d\udccf Modified: 2025-02-21T03:21:20.724Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/768730c1-a70e-432d-a234-4ce2b8aec424?source=cve\n2. https://plugins.trac.wordpress.org/browser/pie-register/trunk/classes/base_variables.php#L68", "creation_timestamp": "2025-02-21T04:19:52.000000Z"}, {"uuid": "374ac50b-6b19-43f2-97a5-ef04292e2ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13474", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13474\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The LTL Freight Quotes \u2013 Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 2.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-22T04:21:15.623Z\n\ud83d\udccf Modified: 2025-02-22T04:21:15.623Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2db0b8c9-7908-484d-9a02-1c50f88efdd0?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3244300%40ltl-freight-quotes-purolator-freight-edition&new=3244300%40ltl-freight-quotes-purolator-freight-edition&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-22T05:18:51.000000Z"}, {"uuid": "461e1ad5-f19d-4adf-aee9-b942c65d9c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13798", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13798\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Post Grid and Gutenberg Blocks \u2013 ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5. This is due to insufficient verification on form fields. This makes it possible for unauthenticated attackers to create new orders for products and mark them as paid without actually completing a payment.\n\ud83d\udccf Published: 2025-02-22T04:21:16.200Z\n\ud83d\udccf Modified: 2025-02-22T04:21:16.200Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/705823ff-e9c3-4b8b-b71c-3b60d0d15b01?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242737%40post-grid&new=3242737%40post-grid&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-22T05:18:50.000000Z"}, {"uuid": "44e6307a-bae9-4faa-b23e-d29d816023b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13314", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4863", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13314\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Carousel, Slider, Gallery by WP Carousel  WordPress plugin before 2.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-21T06:00:05.306Z\n\ud83d\udccf Modified: 2025-02-21T06:00:05.306Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ae234bbe-a4af-49f5-8e0a-4fb960821e05/", "creation_timestamp": "2025-02-21T06:17:13.000000Z"}, {"uuid": "0bf1124f-ce09-4e8c-a08a-57aca421700a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13585", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4862", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13585\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Ajax Search Lite  WordPress plugin before 4.12.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-21T06:00:07.100Z\n\ud83d\udccf Modified: 2025-02-21T06:00:07.100Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/270f213a-2fde-471c-ad09-2b44d11891ec/", "creation_timestamp": "2025-02-21T06:17:12.000000Z"}, {"uuid": "a81ecb3d-5128-4bcd-a40b-027184f2d3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13353", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4872", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13353\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Responsive Addons for Elementor \u2013 Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.4 via several widgets. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-02-21T09:21:06.050Z\n\ud83d\udccf Modified: 2025-02-21T09:21:06.050Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/98df88f8-5aeb-4f57-8525-6a9357173b1d?source=cve\n2. https://plugins.trac.wordpress.org/browser/responsive-addons-for-elementor/trunk/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-product-carousel.php#L3151\n3. https://plugins.trac.wordpress.org/browser/responsive-addons-for-elementor/trunk/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-woo-products.php#L3725\n4. https://plugins.trac.wordpress.org/changeset/3226779/responsive-addons-for-elementor/tags/1.6.5/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-woo-products.php\n5. https://plugins.trac.wordpress.org/changeset/3226779/responsive-addons-for-elementor/tags/1.6.5/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-product-carousel.php", "creation_timestamp": "2025-02-21T10:20:22.000000Z"}, {"uuid": "2ec51fae-36d1-481a-8760-714fdf5b5874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13648", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4871", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13648\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Maps for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MapOnePoint' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T09:21:06.423Z\n\ud83d\udccf Modified: 2025-02-21T09:21:06.423Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a16c8b5d-fd93-49b4-b1d7-f4cd9248aef3?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226414%40maps-for-wp&new=3226414%40maps-for-wp&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242174%40maps-for-wp&new=3242174%40maps-for-wp&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-21T10:20:18.000000Z"}, {"uuid": "d9cdc734-0ae6-4819-85a4-742201fa0580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13713", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4878", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13713\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-21T11:09:34.028Z\n\ud83d\udccf Modified: 2025-02-21T11:09:34.028Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7863c5fb-1eda-41a3-b8ec-054784ab2438?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpexperts-square-for-give/trunk/includes/class-give-square.php#L189\n3. https://plugins.trac.wordpress.org/changeset/3242658/wpexperts-square-for-give/trunk/includes/class-give-square.php", "creation_timestamp": "2025-02-21T11:18:27.000000Z"}, {"uuid": "33c9c198-6c2d-412b-a17e-7a96e8b64f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13455", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4877", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13455\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The igumbi Online Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'igumbi_calendar' shortcode in all versions up to, and including, 1.40 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T11:09:34.425Z\n\ud83d\udccf Modified: 2025-02-21T11:09:34.425Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b21f9cfa-8113-42bc-a9dc-4d891bd9821b?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3243431%40igumbi-online-booking&new=3243431%40igumbi-online-booking&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-21T11:18:26.000000Z"}, {"uuid": "5b57be42-cd80-4ad8-a937-265e7d36124a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13846", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4875", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13846\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018post_id\u2019 parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-21T11:09:35.235Z\n\ud83d\udccf Modified: 2025-02-21T11:09:35.235Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e9ccd2cc-ee5e-40e3-905d-21884ec01f72?source=cve\n2. https://codecanyon.net/item/ultimate-learning-pro-wordpress-plugin/21772657", "creation_timestamp": "2025-02-21T11:18:24.000000Z"}, {"uuid": "4b2ffdbd-9fab-4ba6-a1c0-eca4ca244faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13461", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4874", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13461\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T09:21:05.066Z\n\ud83d\udccf Modified: 2025-02-21T09:21:05.066Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0ae16c4e-0151-4414-8612-ec8eb92505fd?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242136%40autoship-cloud&new=3242136%40autoship-cloud&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-21T10:20:23.000000Z"}, {"uuid": "d9242745-f016-4669-9814-bb26b69ee24b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13416", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4881", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13416\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log.\n\n\n\n\n2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their devices to the latest 2N OS.\n\ud83d\udccf Published: 2025-02-06T19:09:06.798Z\n\ud83d\udccf Modified: 2025-02-21T12:12:46.226Z\n\ud83d\udd17 References:\n1. https://www.2n.com/en-GB/download/cve_2024_1341x_2nos_2_46_v1pdf", "creation_timestamp": "2025-02-21T12:18:24.000000Z"}, {"uuid": "9efa9443-e59f-47eb-92ad-20fc1921677b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13900", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4880", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13900\n\ud83d\udd25 CVSS Score: 4.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject PHP Code in multisite environments.\n\ud83d\udccf Published: 2025-02-21T11:09:32.964Z\n\ud83d\udccf Modified: 2025-02-21T11:09:32.964Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5177bde6-4922-48ee-9155-577c392809a0?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3244016/", "creation_timestamp": "2025-02-21T11:18:32.000000Z"}, {"uuid": "dcc76596-ce28-4395-9ec0-1635b1eb40ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13873", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5006", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13873\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.8 via the deleteUserPhoto() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to remove profile photos from users accounts. Please note that this does not officially delete the file.\n\ud83d\udccf Published: 2025-02-22T03:20:59.210Z\n\ud83d\udccf Modified: 2025-02-22T03:20:59.210Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5fdba3c5-382e-4d2b-83d8-0e0cebf2e63c?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3242653/wp-job-portal/tags/2.2.9/includes/classes/uploads.php?old=3238353&old_path=wp-job-portal%2Ftags%2F2.2.8%2Fincludes%2Fclasses%2Fuploads.php", "creation_timestamp": "2025-02-22T04:18:43.000000Z"}, {"uuid": "75275192-9762-4693-9c7b-205fd1d75bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13564", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13564\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Writing Effect Headline shortcode in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-22T08:22:06.341Z\n\ud83d\udccf Modified: 2025-02-22T08:22:06.341Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/520555b4-35e8-4ec1-85b8-3a43b5209661?source=cve\n2. https://wordpress.org/plugins/rife-elementor-extensions/#developers\n3. https://plugins.trac.wordpress.org/changeset/3244081", "creation_timestamp": "2025-02-22T09:23:27.000000Z"}, {"uuid": "6c44d634-08df-465f-a3f6-0a882355f2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13869", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13869\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Migration, Backup, Staging \u2013 WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. NOTE: Uploaded files are only accessible on WordPress instances running on the NGINX web server as the existing .htaccess within the target file upload folder prevents access on Apache servers.\n\ud83d\udccf Published: 2025-02-22T12:39:20.843Z\n\ud83d\udccf Modified: 2025-02-22T12:39:20.843Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0082e46d-fdbe-4ab7-bba3-0681a25d4495?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3242904/wpvivid-backuprestore", "creation_timestamp": "2025-02-22T13:22:48.000000Z"}, {"uuid": "594ffe4a-5339-4349-83f4-2e27f05d4900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13728", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5083", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13728\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the rf parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-23T05:22:33.304Z\n\ud83d\udccf Modified: 2025-02-23T05:22:33.304Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3891a807-aace-460a-ad49-6a282af16084?source=cve\n2. https://plugins.trac.wordpress.org/browser/easy-paypal-donation/tags/1.4.4/core/Base/Stripe.php#L227", "creation_timestamp": "2025-02-23T06:22:42.000000Z"}, {"uuid": "e66800aa-8d36-4408-9394-bb7ccb17782b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13605", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5129", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13605\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Form Maker by 10Web  WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-24T06:00:03.899Z\n\ud83d\udccf Modified: 2025-02-24T06:00:03.899Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d5543b3b-1c28-481b-aba4-9a07d160e1f2/", "creation_timestamp": "2025-02-24T06:22:04.000000Z"}, {"uuid": "8c7a9032-196e-4805-80b1-dc63813c383d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13822", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13822\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Photo Contest  | Competition | Video Contest WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-24T06:00:04.117Z\n\ud83d\udccf Modified: 2025-02-24T06:00:04.117Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1f0f1553-1987-428c-9fe3-ffb3f6b0aecc/", "creation_timestamp": "2025-02-24T06:22:03.000000Z"}, {"uuid": "9b666375-d112-4219-a5a1-928ba2513169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13695", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5263", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13695\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Enfold theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.9 via the 'attachment_id' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-02-25T09:21:33.873Z\n\ud83d\udccf Modified: 2025-02-25T09:21:33.873Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b55722f9-a0b9-4484-bd3b-c21dbe5716ee?source=cve\n2. https://themeforest.net/item/enfold-responsive-multipurpose-theme/4519990#item-description__changelog", "creation_timestamp": "2025-02-25T10:23:10.000000Z"}, {"uuid": "54af1f0d-7334-4660-861b-0b2336874f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13636", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13636\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-18T11:10:18.901Z\n\ud83d\udccf Modified: 2025-02-24T22:11:30.549Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-02-24T22:22:20.000000Z"}, {"uuid": "ae873343-8813-499d-bb3b-10f76c0d8958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13633", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13633\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple catalogue WordPress plugin through 1.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:10.752Z\n\ud83d\udccf Modified: 2025-02-26T06:00:10.752Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/4291d5eb-c006-42b0-accf-90f09f26b6a0/", "creation_timestamp": "2025-02-26T06:25:10.000000Z"}, {"uuid": "91199ae7-6825-428c-9d38-21b699a062d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13634", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5460", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13634\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Post Sync WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:11.004Z\n\ud83d\udccf Modified: 2025-02-26T06:00:11.004Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0e60bf74-19fb-441c-85a8-005def36af9a/", "creation_timestamp": "2025-02-26T06:25:09.000000Z"}, {"uuid": "6009df32-895d-4d92-9adf-a9a3dd1e27cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13669", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5459", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13669\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:11.629Z\n\ud83d\udccf Modified: 2025-02-26T06:00:11.629Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/71e69cf2-7d41-479c-9721-662b57571c90/", "creation_timestamp": "2025-02-26T06:25:08.000000Z"}, {"uuid": "f630cb39-6ac3-4c7a-b665-043cc31fd4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13678", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13678\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The R3W InstaFeed WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:11.901Z\n\ud83d\udccf Modified: 2025-02-26T06:00:11.901Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ba759796-a152-4f13-a474-f0368b4bc1f6/", "creation_timestamp": "2025-02-26T06:25:07.000000Z"}, {"uuid": "cf56a2a2-7d02-4a89-876f-3d346f30dec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13624", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5467", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13624\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:08.816Z\n\ud83d\udccf Modified: 2025-02-26T06:00:08.816Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c19b56cc-634f-420f-b6a0-9a10ad159049/", "creation_timestamp": "2025-02-26T06:25:18.000000Z"}, {"uuid": "39fd021c-6b1b-49e3-9e3e-43dfa19a752c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13498", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7287", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13498\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The NEX-Forms \u2013 Ultimate Form Builder \u2013 Contact forms and much more plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.8.1 via file uploads due to insufficient directory listing prevention and lack of randomization of file names. This makes it possible for unauthenticated attackers to extract sensitive data including files uploaded via a form.\n\ud83d\udccf Published: 2025-03-12T05:22:52.045Z\n\ud83d\udccf Modified: 2025-03-12T05:22:52.045Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f188a5e6-699e-4e1a-b4e4-7fb4056b0bee?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3235420/nex-forms-express-wp-form-builder", "creation_timestamp": "2025-03-12T05:41:09.000000Z"}, {"uuid": "204c259e-6112-4564-a141-b1d5b4b8dbfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13630", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5464", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13630\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The NewsTicker WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:09.964Z\n\ud83d\udccf Modified: 2025-02-26T06:00:09.964Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/15eed487-01ac-4c1e-88f8-26cfa036fb54/", "creation_timestamp": "2025-02-26T06:25:15.000000Z"}, {"uuid": "e7b56b9b-f20a-4768-8704-74310449ecd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13631", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13631\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Om Stripe WordPress plugin through 02.00.00 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:10.203Z\n\ud83d\udccf Modified: 2025-02-26T06:00:10.203Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c991fdd0-cb9d-43ea-bafa-df3b2e806013/", "creation_timestamp": "2025-02-26T06:25:14.000000Z"}, {"uuid": "4a4e2064-bba1-4f6e-b5e0-b2c57f986885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13571", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5468", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13571\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:08.361Z\n\ud83d\udccf Modified: 2025-02-26T06:00:08.361Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ad6ad44d-fdc3-494c-a371-5d7959d1fd23/", "creation_timestamp": "2025-02-26T06:25:22.000000Z"}, {"uuid": "fd7dfbdb-dbd0-422c-81ab-31fd8e824734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13803", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5476", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13803\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018data-marker\u2019 parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-26T07:01:18.758Z\n\ud83d\udccf Modified: 2025-02-26T07:01:18.758Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/efdeca40-e021-478f-af75-c5566ae70735?source=cve\n2. http://localhost:1337/wp-content/plugins/essential-blocks/assets/admin/editor/editor.js\n3. https://plugins.trac.wordpress.org/changeset/3242493/", "creation_timestamp": "2025-02-26T07:23:59.000000Z"}, {"uuid": "262ae67b-aa65-4be9-8907-b5c6646713ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13632", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13632\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:10.420Z\n\ud83d\udccf Modified: 2025-02-26T06:00:10.420Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/85c5b465-afce-4c68-b5e3-214ec4b5c9f2/", "creation_timestamp": "2025-02-26T06:25:10.000000Z"}, {"uuid": "d6bd2f36-4f8d-4da7-bf4a-13cbbe1c3cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13113", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13113\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Countdown Timer for Elementor WordPress plugin before 1.3.7 does not sanitise and escape some parameters when outputting them on the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-02-26T06:00:07.971Z\n\ud83d\udccf Modified: 2025-02-26T06:00:07.971Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ffc31d9d-d245-4c4b-992d-394a01798117/", "creation_timestamp": "2025-02-26T06:25:23.000000Z"}, {"uuid": "501502b8-20e2-47c4-bb26-9a94aee24d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13628", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5466", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13628\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:09.177Z\n\ud83d\udccf Modified: 2025-02-26T06:00:09.177Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/34d6c8a2-e70d-485c-a217-4a569c16b079/", "creation_timestamp": "2025-02-26T06:25:17.000000Z"}, {"uuid": "f5a173cf-2310-4350-8c8e-c9afbe63b0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13629", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5465", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13629\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The pushBIZ  WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:09.634Z\n\ud83d\udccf Modified: 2025-02-26T06:00:09.634Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5ffb548c-14f1-499d-8bbf-6ecc632cbb8c/", "creation_timestamp": "2025-02-26T06:25:16.000000Z"}, {"uuid": "fcdd9c67-e7bb-4fee-a3dd-ee47b125db73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13560", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13560\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to delete arbitrary posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-26T08:21:56.395Z\n\ud83d\udccf Modified: 2025-02-26T08:21:56.395Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2bed7fc8-a961-4141-80a1-9c23a6504fbd?source=cve\n2. https://wordpress.org/plugins/subscriptions-memberships-for-paypal/#developers\n3. https://plugins.trac.wordpress.org/changeset/3246039/subscriptions-memberships-for-paypal", "creation_timestamp": "2025-02-26T08:32:28.000000Z"}, {"uuid": "27196a31-6e18-4bef-9e47-e28ffc0d98b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13217", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5663", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13217\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11 via the 'expired_data' and 'build_content' functions. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data.\n\ud83d\udccf Published: 2025-02-27T11:13:32.762Z\n\ud83d\udccf Modified: 2025-02-27T11:13:32.762Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2136cad8-6b0b-4458-a357-6e98f1ac3e0b?source=cve\n2. https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/trunk/class/elements/views/class-countdown-view.php#L107\n3. https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/trunk/class/elements/views/class-off-canvas-view.php#L25\n4. https://plugins.trac.wordpress.org/changeset/3246154/", "creation_timestamp": "2025-02-27T11:25:28.000000Z"}, {"uuid": "f5574f3b-c200-46aa-b5cb-999f7b5acb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5649", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13905\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.1.1 via the class-export.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-02-27T04:21:45.364Z\n\ud83d\udccf Modified: 2025-02-27T04:21:45.364Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f2c70d5f-beb3-480e-8ea8-c3ab01ce5a20?source=cve\n2. https://plugins.trac.wordpress.org/browser/onestore-sites/trunk/classess/class-export.php#L3", "creation_timestamp": "2025-02-27T05:25:21.000000Z"}, {"uuid": "98f5cc38-8eac-409f-a413-e41ee6580541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13402", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5672", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13402\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_title\u2019 parameter in all versions up to, and including, 2.7.70 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-27T12:47:01.149Z\n\ud83d\udccf Modified: 2025-02-27T12:47:01.149Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/42743c2f-053b-4f14-bf11-865f978ec017?source=cve\n2. https://www.buddyboss.com/resources/buddyboss-platform-releases/2-8-00/", "creation_timestamp": "2025-02-27T13:27:43.000000Z"}, {"uuid": "1ac73303-ac83-44ce-92c2-6547526dc1e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13647", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13647\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The School Management System \u2013 SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing or incorrect nonce validation on the 'save_exam_setting' and 'delete_exam_setting' actions. This makes it possible for unauthenticated attackers to update exam settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-27T04:21:44.840Z\n\ud83d\udccf Modified: 2025-02-27T04:21:44.840Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6a5db3fc-6ae4-4566-8610-687cb725cf6e?source=cve\n2. https://wordpress.org/plugins/sakolawp-lite/", "creation_timestamp": "2025-02-27T05:25:22.000000Z"}, {"uuid": "96ed9ee5-4a1d-4bfc-a495-6aa7a8223da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13734", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5661", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13734\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-27T09:21:48.112Z\n\ud83d\udccf Modified: 2025-02-27T09:21:48.112Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7134bb24-11a1-41f9-ad34-b4527c22463c?source=cve\n2. https://wordpress.org/plugins/card-elements-for-elementor/#developers\n3. https://www.techeshta.com/docs/card-elements-for-elementor/element-settings/profile-card/\n4. https://plugins.trac.wordpress.org/changeset/3244795/", "creation_timestamp": "2025-02-27T09:27:42.000000Z"}, {"uuid": "b1b5d1dc-812a-4570-82dd-3625b0b75da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13868", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6654", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13868\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The URL Shortener | Conversion Tracking  | AB Testing  | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-06T06:00:03.753Z\n\ud83d\udccf Modified: 2025-03-06T06:00:03.753Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0bff1645-dd53-4416-a90f-7cf4a6b33c1a/", "creation_timestamp": "2025-03-06T06:33:01.000000Z"}, {"uuid": "05397ce9-112e-4276-848d-35608477fa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5858", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13638\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file attachments added to orders.\n\ud83d\udccf Published: 2025-02-28T08:23:17.430Z\n\ud83d\udccf Modified: 2025-02-28T08:23:17.430Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7e98b1ef-70dd-408d-8644-08933bca1cdd?source=cve\n2. https://plugins.trac.wordpress.org/browser/order-attachments-for-woocommerce/trunk/src/WCOA/Utils/Ajax.php#L61\n3. https://plugins.trac.wordpress.org/browser/order-attachments-for-woocommerce/trunk/src/WCOA/Attachments/Attachment.php#L87", "creation_timestamp": "2025-02-28T09:27:29.000000Z"}, {"uuid": "743d5898-f2f4-48dd-9e1b-4862de604aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13832", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5865", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13832\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'ut_elementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.\n\ud83d\udccf Published: 2025-02-28T08:23:14.655Z\n\ud83d\udccf Modified: 2025-02-28T08:23:14.655Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/476883a8-c258-477b-99d3-f35423d7a312?source=cve\n2. https://plugins.trac.wordpress.org/browser/ut-elementor-addons-lite/trunk/includes/queries.php#L506", "creation_timestamp": "2025-02-28T09:27:40.000000Z"}, {"uuid": "107f2e5b-3c28-4241-a0fa-ee6f1a8695c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13423", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6538", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13423\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparkling_activate_plugin' and 'sparkling_deactivate_plugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to activate/deactivate arbitrary plugins.\n\ud83d\udccf Published: 2025-03-05T11:22:09.022Z\n\ud83d\udccf Modified: 2025-03-05T11:22:09.022Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1fa8dba0-0227-428d-a6de-c4247c40e481?source=cve\n2. https://themes.trac.wordpress.org/browser/sparkling/2.4.9/inc/welcome-screen/class-sparkling-welcome.php#L69\n3. https://themes.trac.wordpress.org/browser/sparkling/2.4.9/inc/welcome-screen/class-sparkling-welcome.php#L82", "creation_timestamp": "2025-03-05T11:37:38.000000Z"}, {"uuid": "0069fc9f-3de8-4076-89d6-667e16563649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13796", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5837", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13796\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Post Grid and Gutenberg Blocks \u2013 ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the /wp-json/post-grid/v2/get_users REST API This makes it possible for unauthenticated attackers to extract sensitive data including including emails and other user data.\n\ud83d\udccf Published: 2025-02-28T04:21:55.558Z\n\ud83d\udccf Modified: 2025-02-28T04:21:55.558Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0407223a-cd41-43d1-87b0-d6b83b57d4b3?source=cve\n2. https://plugins.trac.wordpress.org/browser/post-grid/trunk/includes/blocks/functions-rest.php?rev=3242718#L2055\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3245187%40post-grid&new=3245187%40post-grid&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-28T05:26:34.000000Z"}, {"uuid": "d1ca111b-aef2-4445-bf0e-9947d32d1e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13851", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5854", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13851\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Modal Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-02-28T08:23:18.930Z\n\ud83d\udccf Modified: 2025-02-28T08:23:18.930Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dc049cab-6793-4656-9b17-8ca64c566c4c?source=cve\n2. https://wordpress.org/plugins/modal-portfolio/#developers", "creation_timestamp": "2025-02-28T09:27:26.000000Z"}, {"uuid": "f20e7788-f6cb-4bbb-9052-733acf9a460c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13831", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5859", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13831\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'product_has_custom_tabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-02-28T08:23:17.051Z\n\ud83d\udccf Modified: 2025-02-28T08:23:17.051Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/790a2c64-b358-41ed-be17-f2b99d294617?source=cve\n2. https://plugins.trac.wordpress.org/browser/wc-tabs/trunk/wc-tabs-lite.php#L363", "creation_timestamp": "2025-02-28T09:27:33.000000Z"}, {"uuid": "f4d32fc9-1a86-452f-ba75-18216af6814a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13469", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5863", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13469\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Pricing Table by PickPlugins plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button Link in all versions up to, and including, 1.12.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-28T08:23:15.555Z\n\ud83d\udccf Modified: 2025-02-28T08:23:15.555Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5239c414-cd1d-4257-9f8e-e7a92c2119f9?source=cve\n2. https://wordpress.org/plugins/pricingtable/", "creation_timestamp": "2025-02-28T09:27:36.000000Z"}, {"uuid": "8d65a351-cdf0-4d5f-89b9-fed6b09d1f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13716", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5864", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13716\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Forex Calculators plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_settings_callback() function in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings.\n\ud83d\udccf Published: 2025-02-28T08:23:15.098Z\n\ud83d\udccf Modified: 2025-02-28T08:23:15.098Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/49ce8ca1-c1ae-4dda-909e-70c3b6d2b561?source=cve\n2. https://plugins.trac.wordpress.org/browser/fx-calculators/tags/1.3.5/forex-calculators.php#L101", "creation_timestamp": "2025-02-28T09:27:39.000000Z"}, {"uuid": "71dab1eb-6eff-480f-9857-5cf4a62cfab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13809", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6521", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13809\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Hero Slider - WordPress Slider Plugin plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-05T09:21:48.298Z\n\ud83d\udccf Modified: 2025-03-05T09:21:48.298Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a692d9c4-66e0-4461-ad13-65e1446106c5?source=cve\n2. https://codecanyon.net/item/hero-slider-wordpress-slider-plugin/13067813", "creation_timestamp": "2025-03-05T09:35:57.000000Z"}, {"uuid": "1f226ce0-5808-4c99-aad6-649816cd164a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13757", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6528", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13757\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Master Slider \u2013 Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_layer shortcode in all versions up to, and including, 3.10.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-05T09:21:45.634Z\n\ud83d\udccf Modified: 2025-03-05T09:21:45.634Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/26a7fb51-f40d-46b8-9f52-495716032a1b?source=cve\n2. https://wordpress.org/plugins/master-slider/#developers\n3. https://plugins.trac.wordpress.org/browser/master-slider/trunk/includes/msp-shortcodes.php#L815", "creation_timestamp": "2025-03-05T09:36:06.000000Z"}, {"uuid": "042d173f-beb0-4894-ae26-a61bef4e7e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13838", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7291", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13838\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Uncanny Automator \u2013 Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.2 via the 'call_webhook' method of the Automator_Send_Webhook class This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-03-12T07:00:22.022Z\n\ud83d\udccf Modified: 2025-03-12T07:00:22.022Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/29eeac86-6b33-49e6-a7e1-c80dee383d6f?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3249921/uncanny-automator/trunk/src/core/lib/webhooks/class-automator-send-webhook.php", "creation_timestamp": "2025-03-12T07:43:57.000000Z"}, {"uuid": "545b912c-7258-4b94-ba73-29a062bfe0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13901", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6053", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13901\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-03-01T05:30:59.247Z\n\ud83d\udccf Modified: 2025-03-01T05:30:59.247Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/251b17a7-781f-4f17-af90-9a6fbae69243?source=cve\n2. https://plugins.trac.wordpress.org/browser/counter-box/trunk/admin/assets/js/5.builder.js#L10\n3. https://plugins.trac.wordpress.org/changeset/3247696/", "creation_timestamp": "2025-03-01T06:27:18.000000Z"}, {"uuid": "61f49a9a-6a00-47c1-9ffa-ec537bf0902d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13568", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6051", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13568\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Fluent Support \u2013 Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/fluent-support directory which can contain file attachments included in support tickets.\n\ud83d\udccf Published: 2025-03-01T04:21:47.217Z\n\ud83d\udccf Modified: 2025-03-01T04:21:47.217Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/17f40832-8ae5-443a-aa98-f0e61d1152cc?source=cve\n2. https://plugins.trac.wordpress.org/browser/fluent-support/trunk/app/Services/Includes/FileSystem.php", "creation_timestamp": "2025-03-01T05:27:21.000000Z"}, {"uuid": "bb58f862-07c6-4955-8880-775ad9b5d1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6048", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13746\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Booking Calendar and Notification plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on the wpcb_all_bookings(), wpcb_update_booking_post(), and wpcb_delete_posts() functions in all versions up to, and including, 4.0.3. This makes it possible for unauthenticated attackers to extract data, create or update bookings, or  delete arbitrary posts.\n\ud83d\udccf Published: 2025-03-01T04:21:48.626Z\n\ud83d\udccf Modified: 2025-03-01T04:21:48.626Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/422bb9a5-c848-4492-add7-bc65b1111565?source=cve\n2. https://plugins.trac.wordpress.org/browser/booking-calendar-and-notification/tags/4.0.3/lib/includes/function.php\n3. https://plugins.trac.wordpress.org/browser/booking-calendar-and-notification/trunk/lib/classes/api.php#L270\n4. https://plugins.trac.wordpress.org/browser/booking-calendar-and-notification/trunk/lib/classes/api.php#L134\n5. https://plugins.trac.wordpress.org/browser/booking-calendar-and-notification/trunk/lib/classes/api.php#L188", "creation_timestamp": "2025-03-01T05:27:19.000000Z"}, {"uuid": "4ef26bdf-75ff-4be4-b420-20255b5f6abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13750\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Multilevel Referral Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.27 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-01T04:21:48.987Z\n\ud83d\udccf Modified: 2025-03-01T04:21:48.987Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4389ddc9-de69-4316-9bfa-ff3bd3346c69?source=cve\n2. https://plugins.trac.wordpress.org/browser/multilevel-referral-plugin-for-woocommerce/tags/2.27/classes/referral-program.php#L310", "creation_timestamp": "2025-03-01T05:27:15.000000Z"}, {"uuid": "48e762fa-bb50-4291-8fba-f78c478ef4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13518", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6046", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13518\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Simple:Press Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.10.11. This is due to missing or incorrect nonce validation on the 'sp_save_edited_post' function. This makes it possible for unauthenticated attackers to modify a forum post via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-01T04:21:49.340Z\n\ud83d\udccf Modified: 2025-03-01T04:21:49.340Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4484fa86-5878-426d-92b9-8eb0751075e5?source=cve\n2. https://plugins.trac.wordpress.org/browser/simplepress/trunk/forum/database/sp-db-management.php#L173", "creation_timestamp": "2025-03-01T05:27:14.000000Z"}, {"uuid": "e384f003-705a-464e-abd2-248339ef51f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13559", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6045", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13559\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The TemplatesNext ToolKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tx_woo_wishlist_table' shortcode in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-01T04:21:49.690Z\n\ud83d\udccf Modified: 2025-03-01T04:21:49.690Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/775b6034-617a-4d84-a8fe-773ffbd9742a?source=cve\n2. https://plugins.trac.wordpress.org/browser/templatesnext-toolkit/trunk/inc/woo-compare-wishlist/includes/wishlist/shortcode.php#L13", "creation_timestamp": "2025-03-01T05:27:13.000000Z"}, {"uuid": "ababe346-46f5-431c-bb12-b0172999515f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13611", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13611\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Better Messages \u2013 Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/bp-better-messages directory which can contain file attachments included in chat messages.\n\ud83d\udccf Published: 2025-03-01T08:23:20.219Z\n\ud83d\udccf Modified: 2025-03-01T08:23:20.219Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/997918b9-2ccd-413e-9df2-d24bc3820ba1?source=cve\n2. https://plugins.trac.wordpress.org/browser/bp-better-messages/trunk/addons/files.php\n3. https://plugins.trac.wordpress.org/changeset/3228957/", "creation_timestamp": "2025-03-01T09:30:21.000000Z"}, {"uuid": "21f780e8-586d-487f-9942-b1befb198cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13778", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6525", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13778\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to SQL Injection via several functions in all versions up to, and including, 1.16.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-05T09:21:46.801Z\n\ud83d\udccf Modified: 2025-03-05T09:21:46.801Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5bdf04e6-6d9d-41a3-ac54-1a95f4617ea4?source=cve\n2. https://codecanyon.net/item/hero-menu-responsive-wordpress-mega-menu-plugin/10324895", "creation_timestamp": "2025-03-05T09:36:03.000000Z"}, {"uuid": "e662e8a3-b1cf-406a-b635-3a9c60c39bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13806", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6060", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13806\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-03-01T07:24:05.886Z\n\ud83d\udccf Modified: 2025-03-01T07:24:05.886Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dbfa20ad-6411-4054-9973-cb12d17c57f6?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3246757%40authors-list&new=3246757%40authors-list&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-01T08:27:07.000000Z"}, {"uuid": "1dca1b06-0e78-4db0-aa38-fe42c2a12c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13373", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6057", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13373\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Exertio Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.1. This is due to the plugin not properly validating a user's identity prior to updating their password through the fl_forgot_pass_new() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-01T06:39:27.540Z\n\ud83d\udccf Modified: 2025-03-01T06:39:27.540Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/897ce9a9-8b3e-40bc-9815-c55cc7a838f9?source=cve\n2. https://themeforest.net/item/exertio-freelance-marketplace-wordpress-theme/30602587", "creation_timestamp": "2025-03-01T07:27:01.000000Z"}, {"uuid": "02aabc31-d52e-46bc-9eaf-587b4970ce81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13546", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6065", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13546\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.1 via the 'get_image_description' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of private, draft, and scheduled posts and pages.\n\ud83d\udccf Published: 2025-03-01T09:22:53.483Z\n\ud83d\udccf Modified: 2025-03-01T09:22:53.483Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4f6f2a8c-ecd9-482c-a32e-0c3d7a7e4ec4?source=cve\n2. https://plugins.trac.wordpress.org/browser/generateblocks/trunk/includes/class-dynamic-content.php#L1047\n3. https://plugins.trac.wordpress.org/browser/generateblocks/trunk/includes/class-dynamic-content.php#L1054\n4. https://plugins.trac.wordpress.org/changeset/3239461/", "creation_timestamp": "2025-03-01T09:30:17.000000Z"}, {"uuid": "5906533a-2494-45d8-be50-03918492f9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13911", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6061", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13911\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35 via the /dashboard/backup.php file. This makes it possible for authenticated attackers, with Administrator-level access and above, to extract sensitive data including full database credentials.\n\ud83d\udccf Published: 2025-03-01T07:24:05.517Z\n\ud83d\udccf Modified: 2025-03-01T07:24:05.517Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c548b70a-8566-4aaf-a3a2-fce6c19e6a0c?source=cve\n2. https://plugins.trac.wordpress.org/browser/database-backup/trunk/dashboard/backup.php#L62\n3. https://plugins.trac.wordpress.org/browser/database-backup/trunk/dashboard/backup.php#L63\n4. https://plugins.trac.wordpress.org/browser/database-backup/trunk/dashboard/backup.php#L64\n5. https://plugins.trac.wordpress.org/browser/database-backup/trunk/dashboard/backup.php#L65\n6. https://plugins.trac.wordpress.org/browser/database-backup/trunk/dashboard/backup.php#L66\n7. https://plugins.trac.wordpress.org/changeset/3247917/", "creation_timestamp": "2025-03-01T08:27:08.000000Z"}, {"uuid": "0aaedb41-af9e-4c85-9560-ae89c1f7944e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13697", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6067", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13697\n\ud83d\udd25 CVSS Score: 4.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Better Messages \u2013 Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nice_links'. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Successful exploitation requires the \"Enable link previews\" to be enabled (default).\n\ud83d\udccf Published: 2025-03-01T08:23:21.239Z\n\ud83d\udccf Modified: 2025-03-01T08:23:21.239Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b67710d7-976b-4a65-bad3-091a97aceb00?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3243180/bp-better-messages", "creation_timestamp": "2025-03-01T09:30:19.000000Z"}, {"uuid": "13b0ec15-b25a-4a73-8dd3-f79aec4c2085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13910", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13910\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'database_backup_ajax_delete' function in all versions up to, and including, 2.35. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The vulnerability was partially patched in version 2.36.\n\ud83d\udccf Published: 2025-03-01T08:23:21.649Z\n\ud83d\udccf Modified: 2025-03-01T08:23:21.649Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c92776c4-643c-40f2-ac28-5df5d6bf7fcd?source=cve\n2. https://plugins.trac.wordpress.org/browser/database-backup/trunk/database-backup.php#L267\n3. https://plugins.trac.wordpress.org/changeset/3247917/\n4. https://plugins.trac.wordpress.org/changeset/3248708/", "creation_timestamp": "2025-03-01T09:30:18.000000Z"}, {"uuid": "7f1e41a3-99e9-41f9-a3eb-5f30de7850ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13833", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13833\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Album Gallery \u2013 WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserialization of untrusted input from gallery meta. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-03-01T11:22:48.683Z\n\ud83d\udccf Modified: 2025-03-01T11:22:48.683Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cc7075a6-5609-42ab-a4cb-9d33686c7de0?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3246291/new-album-gallery", "creation_timestamp": "2025-03-01T11:27:27.000000Z"}, {"uuid": "b3149ab3-adb3-4c48-ba84-3c9330d39d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13810", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6518", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13810\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Zass - WooCommerce Theme for Handmade Artists and Artisans theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'zass_import_zass' AJAX actions in all versions up to, and including, 3.9.9.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import demo content and overwrite the site.\n\ud83d\udccf Published: 2025-03-05T09:21:49.405Z\n\ud83d\udccf Modified: 2025-03-05T09:21:49.405Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d85e54c2-dff6-42e6-8123-767438f9c5f1?source=cve\n2. https://themeforest.net/item/zass-wordpress-woocommerce-theme/19614113", "creation_timestamp": "2025-03-05T09:35:51.000000Z"}, {"uuid": "480f3036-6a34-404b-836f-4abf73dfe7c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13815", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6517", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13815\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The The Listingo theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.2.7. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-03-05T09:21:49.762Z\n\ud83d\udccf Modified: 2025-03-05T09:21:49.762Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e4595a79-c7d0-4e37-b19b-9ae985c9d713?source=cve\n2. https://themeforest.net/item/listingo-business-listing-wordpress-directory-theme/20617051", "creation_timestamp": "2025-03-05T09:35:50.000000Z"}, {"uuid": "7c2ee446-152d-499b-bacc-25398acaddde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13943", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13943\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the QCMAP_ConnectionManager component. An attacker can abuse the service to assign LAN addresses to the WWAN. An attacker can leverage this vulnerability to access network services that were only intended to be exposed to the internal LAN. Was ZDI-CAN-23199.\n\ud83d\udccf Published: 2025-04-30T20:00:33.419Z\n\ud83d\udccf Modified: 2025-04-30T20:00:33.419Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-25-262/", "creation_timestamp": "2025-04-30T20:14:22.000000Z"}, {"uuid": "11b9204e-0cc6-4cdc-ae74-14b8024a0dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13685", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6345", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13685\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.\n\ud83d\udccf Published: 2025-03-04T06:00:04.054Z\n\ud83d\udccf Modified: 2025-03-04T06:00:04.054Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/72c61904-253d-42d1-9edd-7ea2162a2f85/", "creation_timestamp": "2025-03-04T06:30:47.000000Z"}, {"uuid": "f25459c9-283d-4e5b-b73c-2eac5fe30350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13724", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6360", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13724\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Wallet System for WooCommerce \u2013 Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to increase their own wallet balance, transfer balances between arbitrary users and initiate transfer requests from other users' wallets.\n\ud83d\udccf Published: 2025-03-04T08:23:42.467Z\n\ud83d\udccf Modified: 2025-03-04T08:23:42.467Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bda326b0-9049-496a-a600-fa65151ce98f?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3244479%40wallet-system-for-woocommerce%2Ftrunk&old=3231275%40wallet-system-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-04T09:31:56.000000Z"}, {"uuid": "ad2814af-a534-4bd8-b043-4adedf5d3cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13682", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6363", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13682\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Wallet System for WooCommerce \u2013 Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.2. This is due to missing or incorrect nonce validation in class-wallet-user-table.php. This makes it possible for unauthenticated attackers to modify wallet balances via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-04T08:23:40.786Z\n\ud83d\udccf Modified: 2025-03-04T08:23:40.786Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/779a9f7a-4582-4d5e-bd9a-9ff7f14b452a?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3244479%40wallet-system-for-woocommerce%2Ftrunk&old=3231275%40wallet-system-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-04T09:32:02.000000Z"}, {"uuid": "aa626cd2-66d3-44fb-90f1-1a01ec43b8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13686", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6381", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13686\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vw_storefront_reset_all_settings() function in all versions up to, and including, 0.9.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the themes settings.\n\ud83d\udccf Published: 2025-03-04T03:37:58.615Z\n\ud83d\udccf Modified: 2025-03-04T16:27:02.834Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/299ed515-ba64-413a-a03a-2db801520ae0?source=cve\n2. https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=261535%40vw-storefront&new=261535%40vw-storefront&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-04T16:31:41.000000Z"}, {"uuid": "bea4bb67-e83d-4158-9a79-f6648889ab71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13811", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6526", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13811\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_import_lafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import demo data that overrides the site.\n\ud83d\udccf Published: 2025-03-05T09:21:46.444Z\n\ud83d\udccf Modified: 2025-03-05T09:21:46.444Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/50d60e4f-7680-4ec0-9183-bdc8439679db?source=cve\n2. https://themeforest.net/item/lafka-fast-food-restaurant-woocommerce-theme/23969682", "creation_timestamp": "2025-03-05T09:36:04.000000Z"}, {"uuid": "a6b79ea7-4c10-4b01-85f9-9ea207682bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13866", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6506", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13866\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-03-05T08:21:57.003Z\n\ud83d\udccf Modified: 2025-03-05T08:21:57.003Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e814f798-5ebc-4bea-838f-d0a803f9bdbc?source=cve\n2. https://wordpress.org/plugins/simple-notification/#developers", "creation_timestamp": "2025-03-05T08:35:18.000000Z"}, {"uuid": "09d262fc-474c-4014-81cd-77c5831df8bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13232", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6514", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13232\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin for WordPress is vulnerable arbitrary SQL Execution and privilege escalation due to a missing capability check on the renderImport() function in all versions up to, and including, 4.1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary SQL statements that can leveraged to create a new administrative user account.\n\ud83d\udccf Published: 2025-03-05T09:21:50.957Z\n\ud83d\udccf Modified: 2025-03-05T09:21:50.957Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f24f0673-b5c8-4086-8795-692228a413af?source=cve\n2. https://codecanyon.net/item/wordpress-awesome-import-export-plugin-v-24/12896266", "creation_timestamp": "2025-03-05T09:35:48.000000Z"}, {"uuid": "109052cd-fc3c-46a1-a21d-dceda0aa8b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13747\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The WooMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'template_delete_saved' function in all versions up to, and including, 3.0.34. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject SQL into an existing post deletion query.\n\ud83d\udccf Published: 2025-03-05T09:21:50.106Z\n\ud83d\udccf Modified: 2025-03-05T09:21:50.106Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e74e1a7c-4fe6-4041-8c4c-13389dacb9db?source=cve\n2. https://codecanyon.net/item/email-customizer-for-woocommerce-with-drag-drop-builder-woo-email-editor/22400984", "creation_timestamp": "2025-03-05T09:35:50.000000Z"}, {"uuid": "39242764-fbd7-4031-aee1-f685565f5988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13350", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6509", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13350\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The SearchIQ \u2013 The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siq_searchbox' shortcode in all versions up to, and including, 4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-05T08:21:55.623Z\n\ud83d\udccf Modified: 2025-03-05T08:21:55.623Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a04f074c-448d-4c5f-ae46-0ad1a3effdb4?source=cve\n2. https://plugins.trac.wordpress.org/browser/searchiq/trunk/library/shortcode.php#L132\n3. https://wordpress.org/plugins/searchiq", "creation_timestamp": "2025-03-05T08:35:21.000000Z"}, {"uuid": "ca52bd81-cc4b-4597-990a-dc372477f584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13787", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6519", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13787\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The VEDA - MultiPurpose WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2 via deserialization of untrusted input in the 'veda_backup_and_restore_action' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-03-05T09:21:49.028Z\n\ud83d\udccf Modified: 2025-03-05T09:21:49.028Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d0966138-b28b-4c03-a2cf-b51c5f478276?source=cve\n2. https://themeforest.net/item/veda-multipurpose-theme/15860489", "creation_timestamp": "2025-03-05T09:35:55.000000Z"}, {"uuid": "fc4b1617-c14c-42b3-bade-3743eca672c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13839", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13839\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-05T09:21:47.525Z\n\ud83d\udccf Modified: 2025-03-05T09:21:47.525Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/80203516-8546-441a-b51d-2d09968492b5?source=cve\n2. https://plugins.trac.wordpress.org/browser/staff-directory-pro/trunk/include/tgmpa/init.php#L99\n3. https://wordpress.org/plugins/staff-directory-pro/#developers", "creation_timestamp": "2025-03-05T09:35:58.000000Z"}, {"uuid": "d2c52a12-5e26-4c91-919a-e8df9d1af3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13779", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6530", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13779\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'index' parameter in all versions up to, and including, 1.16.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-05T09:21:44.519Z\n\ud83d\udccf Modified: 2025-03-05T09:21:44.519Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/18d37650-057d-4cd1-bfeb-e40885d22566?source=cve\n2. https://codecanyon.net/item/hero-menu-responsive-wordpress-mega-menu-plugin/10324895", "creation_timestamp": "2025-03-05T09:36:10.000000Z"}, {"uuid": "e233b987-7d9a-44ee-816b-7d010b042456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13897", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6656", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13897\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generate_json_page function in all versions up to, and including, 1.22. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).\n\ud83d\udccf Published: 2025-03-06T08:21:38.783Z\n\ud83d\udccf Modified: 2025-03-06T08:21:38.783Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/815ce00b-3753-4c38-8a30-5242a5841734?source=cve\n2. https://plugins.trac.wordpress.org/browser/moving-media-library/trunk/lib/class-movingmedialibraryadmin.php#L166\n3. https://plugins.trac.wordpress.org/changeset/3244709/moving-media-library/trunk/lib/class-movingmedialibraryadmin.php", "creation_timestamp": "2025-03-06T08:37:18.000000Z"}, {"uuid": "fdc85eec-1b22-4320-8967-cbab1074b880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13780", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6531", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13780\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the hmenu_delete_menu() function in all versions up to, and including, 1.16.5. This makes it possible for unauthenticated attackers to delete arbitrary directories on the server.\n\ud83d\udccf Published: 2025-03-05T09:21:44.132Z\n\ud83d\udccf Modified: 2025-03-05T09:21:44.132Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/17872fe4-b566-44ca-8218-3677fb75cb1c?source=cve\n2. https://codecanyon.net/item/hero-menu-responsive-wordpress-mega-menu-plugin/10324895", "creation_timestamp": "2025-03-05T09:36:11.000000Z"}, {"uuid": "3795f539-5c1f-4b3d-96c8-8f7d5cd7e317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13892", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6674", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13892\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. \nDuring the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly sanitized, what allows for command injection.\nThe vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well.\n\ud83d\udccf Published: 2025-03-06T14:00:41.444Z\n\ud83d\udccf Modified: 2025-03-06T14:04:52.687Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/03/CVE-2024-13892/\n2. https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at", "creation_timestamp": "2025-03-06T15:10:43.000000Z"}, {"uuid": "0155913d-efdf-445d-9119-6b86d2eb4f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13906", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13906\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Gallery by BestWebSoft \u2013 Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.7.3 via deserialization of untrusted input in the 'import_gallery_from_csv' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-03-07T07:22:24.217Z\n\ud83d\udccf Modified: 2025-03-07T07:22:24.217Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/76c5559d-f9dd-43cf-8c8e-07188b4edf7f?source=cve\n2. https://plugins.trac.wordpress.org/browser/gallery-plugin/tags/4.7.3/gallery-plugin.php#L292\n3. https://plugins.trac.wordpress.org/changeset/3249573/", "creation_timestamp": "2025-03-07T07:37:12.000000Z"}, {"uuid": "5279ddef-a51d-4224-8afd-776e9a594a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13777", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6529", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13777\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.91 via deserialization of untrusted input from the 'margs' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-03-05T09:21:44.881Z\n\ud83d\udccf Modified: 2025-03-05T09:21:44.881Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1ec4633a-0742-4646-accd-cc0b9e01302a?source=cve\n2. https://codecanyon.net/item/zoomsounds-wordpress-wave-audio-player-with-playlist/6181433", "creation_timestamp": "2025-03-05T09:36:10.000000Z"}, {"uuid": "ca74766c-a20e-4d01-a626-286e610f481f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13430", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13430\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Page Builder: Pagelayer \u2013 Drag and Drop website builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.8 via the 'pagelayer_builder_posts_shortcode' function due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private posts that they should not have access to.\n\ud83d\udccf Published: 2025-03-12T08:21:37.013Z\n\ud83d\udccf Modified: 2025-03-12T08:21:37.013Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1de8da4c-dee7-4d59-a475-a969008aa0d4?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3252081/pagelayer", "creation_timestamp": "2025-03-12T08:50:00.000000Z"}, {"uuid": "462b9ca0-e157-46f4-b8f9-6e35336b121a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13471", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13471\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The DesignThemes Core Features plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dt_process_imported_file function in all versions up to, and including, 4.7. This makes it possible for unauthenticated attackers to read arbitrary files on the underlying operating system.\n\ud83d\udccf Published: 2025-03-05T11:22:08.595Z\n\ud83d\udccf Modified: 2025-03-05T11:22:08.595Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1729d0de-1f5f-4349-b592-5841d01ed33a?source=cve\n2. https://themeforest.net/item/lms-learning-management-system-education-lms-wordpress-theme/7867581", "creation_timestamp": "2025-03-05T11:37:42.000000Z"}, {"uuid": "91de11b5-d349-4b26-ac22-440f14ead325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13649", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6944", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13649\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The 140+ Widgets | Xpro Addons For Elementor \u2013 FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.4.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T11:16:39.514Z\n\ud83d\udccf Modified: 2025-03-08T11:16:39.514Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/43192613-ce5b-4acc-b284-f40cad7cb8df?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3235058%40xpro-elementor-addons&new=3235058%40xpro-elementor-addons&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3248584%40xpro-elementor-addons&new=3248584%40xpro-elementor-addons&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-08T11:36:23.000000Z"}, {"uuid": "169ef415-b863-4f6e-90dd-01b7c8c27a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13816\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete posts, list and delete batches, list assistant uploaded files, delete personas, delete forms, delete templates, and clear logs. The vulnerability was partially patched in version 2.3.5.\n\ud83d\udccf Published: 2025-03-08T08:22:56.377Z\n\ud83d\udccf Modified: 2025-03-08T08:22:56.377Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/69de7d93-b255-4d41-8680-9762ff632804?source=cve\n2. https://coderevolution.ro/knowledge-base/faq/full-changelog-aiomatic-automatic-ai-content-writer-editor-gpt-3-gpt-4-chatgpt-chatbot-ai-toolkit/#item-description__changelog", "creation_timestamp": "2025-03-08T08:37:33.000000Z"}, {"uuid": "a8e4025e-3703-4653-8033-f2a7bee9c023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13635", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6834", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13635\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The VK Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.94.2.2 via the page content block. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of private posts and pages.\n\ud83d\udccf Published: 2025-03-07T09:21:14.540Z\n\ud83d\udccf Modified: 2025-03-07T14:13:27.572Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cc03b3f4-2edb-463b-812b-6a187a7a893c?source=cve\n2. https://plugins.trac.wordpress.org/browser/vk-blocks/trunk/inc/vk-blocks/build/blocks/page-content/index.php\n3. https://plugins.trac.wordpress.org/changeset/3233455/vk-blocks/trunk/inc/vk-blocks/build/blocks/page-content/index.php\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3233455%40vk-blocks%2Ftrunk&old=3227170%40vk-blocks%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-07T14:38:24.000000Z"}, {"uuid": "371491dc-9087-4b74-a8f2-fe55b4620e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13924", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13924\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'http_request_host_is_external' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-03-08T12:21:32.041Z\n\ud83d\udccf Modified: 2025-03-08T12:21:32.041Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9355b100-08a9-4640-a91b-e56ba1ab9b07?source=cve\n2. https://plugins.trac.wordpress.org/browser/starter-templates/trunk/classess/class-export.php#L3", "creation_timestamp": "2025-03-08T12:36:26.000000Z"}, {"uuid": "fee27314-365b-46c5-97c6-daacff615281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13902", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6660", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13902\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-06T10:00:15.926Z\n\ud83d\udccf Modified: 2025-03-06T10:00:15.926Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298785\n2. https://vuldb.com/?ctiid.298785\n3. https://gitee.com/huang-yk/student-manage/issues/I9UXC4", "creation_timestamp": "2025-03-06T10:44:06.000000Z"}, {"uuid": "4bc46403-97dc-46ff-ab3c-2d9f14a38a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13894", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6676", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13894\n\ud83d\udd25 CVSS Score: 5.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. \nWhen an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by providing paths to the files. However, the directories to which a user has access are not limited, allowing for path traversal attacks and downloading sensitive information.\nThe vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well.\n\ud83d\udccf Published: 2025-03-06T14:03:20.063Z\n\ud83d\udccf Modified: 2025-03-06T14:04:12.789Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/03/CVE-2024-13892/\n2. https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at", "creation_timestamp": "2025-03-06T15:10:48.000000Z"}, {"uuid": "b062d46b-eb5c-4197-b5cc-12536981c009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13892", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6676", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13894\n\ud83d\udd25 CVSS Score: 5.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. \nWhen an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by providing paths to the files. However, the directories to which a user has access are not limited, allowing for path traversal attacks and downloading sensitive information.\nThe vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well.\n\ud83d\udccf Published: 2025-03-06T14:03:20.063Z\n\ud83d\udccf Modified: 2025-03-06T14:04:12.789Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/03/CVE-2024-13892/\n2. https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at", "creation_timestamp": "2025-03-06T15:10:48.000000Z"}, {"uuid": "cfb5de71-dcc9-4656-8fda-0a3a23c4fc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13893", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13893\n\ud83d\udd25 CVSS Score: 7.5 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory.\nFor the telnet service to be enabled, the inserted SD card needs to have a folder with a specific name created.\u00a0\nTwo products were tested, but since the vendor has not replied to reports, patching status remains unknown, as well as groups of devices and firmware ranges in which the same password is shared.\n Newer firmware versions might be vulnerable as well.\n\ud83d\udccf Published: 2025-03-06T14:01:06.389Z\n\ud83d\udccf Modified: 2025-03-06T14:04:35.995Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/03/CVE-2024-13892/\n2. https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at", "creation_timestamp": "2025-03-06T15:10:47.000000Z"}, {"uuid": "7b41c9c8-19bf-4a8b-970a-8d984225bdaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13892", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13893\n\ud83d\udd25 CVSS Score: 7.5 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory.\nFor the telnet service to be enabled, the inserted SD card needs to have a folder with a specific name created.\u00a0\nTwo products were tested, but since the vendor has not replied to reports, patching status remains unknown, as well as groups of devices and firmware ranges in which the same password is shared.\n Newer firmware versions might be vulnerable as well.\n\ud83d\udccf Published: 2025-03-06T14:01:06.389Z\n\ud83d\udccf Modified: 2025-03-06T14:04:35.995Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/03/CVE-2024-13892/\n2. https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at", "creation_timestamp": "2025-03-06T15:10:47.000000Z"}, {"uuid": "ca709cdc-23af-4bbd-bf12-81a9b27e2d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13526", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6786", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13526\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The EventPrime \u2013 Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the export_submittion_attendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download list of attendees for any event.\n\ud83d\udccf Published: 2025-03-07T01:44:54.034Z\n\ud83d\udccf Modified: 2025-03-07T01:44:54.034Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2be578d9-27c3-4a16-a634-1514ed97a1a2?source=cve\n2. https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/tags/4.0.7.3/includes/class-ep-ajax.php#L1903", "creation_timestamp": "2025-03-07T02:35:11.000000Z"}, {"uuid": "4161fb09-80a5-444f-a90e-a540a12a1b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6989", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13918\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page.\n\ud83d\udccf Published: 2025-03-10T10:02:29.530Z\n\ud83d\udccf Modified: 2025-03-10T10:02:29.530Z\n\ud83d\udd17 References:\n1. https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page\n2. https://github.com/laravel/framework/pull/53869\n3. https://github.com/laravel/framework/releases/tag/v11.36.0", "creation_timestamp": "2025-03-10T10:39:29.000000Z"}, {"uuid": "b03c4007-7636-4f7e-9497-31bf0f6ed35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13655", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6804", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13655\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions up to, and including, 3.5.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users.\n\ud83d\udccf Published: 2025-03-07T06:40:03.580Z\n\ud83d\udccf Modified: 2025-03-07T06:40:03.580Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/23f53ff1-f0bc-4ad3-9b9e-cf365f064066?source=cve\n2. https://themeforest.net/item/flex-mag-responsive-wordpress-news-theme/12772303", "creation_timestamp": "2025-03-07T07:37:15.000000Z"}, {"uuid": "ba494f3f-9ab6-4d33-8e04-29110fa4bb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13668", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6825", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13668\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WordPress Activity O Meter WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2025-03-07T09:49:49.030Z\n\ud83d\udccf Modified: 2025-03-07T09:49:49.030Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a7bfc094-b235-419d-882d-96b439651f65/", "creation_timestamp": "2025-03-07T10:35:14.000000Z"}, {"uuid": "f01ca46b-b07a-4e27-8dd1-d5b1b399ec09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13320", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6803", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13320\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress is vulnerable to SQL Injection via the 'wc_filter_price_meta[where]' parameter in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-07T06:40:04.043Z\n\ud83d\udccf Modified: 2025-03-07T06:40:04.043Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6d359a5c-db11-416e-a329-c3ed67b1a925?source=cve\n2. https://codecanyon.net/item/woocommerce-multi-currency/20948446", "creation_timestamp": "2025-03-07T07:37:15.000000Z"}, {"uuid": "6bcd7770-9b53-441f-b282-cf0d6091709f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13431", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13431\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Appointment Booking Calendar \u2014 Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the accent_color and background parameter in all versions up to, and including, 1.6.8.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-07T08:21:28.499Z\n\ud83d\udccf Modified: 2025-03-07T08:21:28.499Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f6e3e5dd-b9f1-4d24-98cc-b6ab319434e4?source=cve\n2. https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/trunk/booking-app-new/iframe-inner.php#L182\n3. https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/trunk/booking-app-new/iframe-inner.php#L189\n4. https://plugins.trac.wordpress.org/changeset/3246760/simply-schedule-appointments/trunk/booking-app-new/iframe-inner.php", "creation_timestamp": "2025-03-07T08:34:50.000000Z"}, {"uuid": "33b882c1-2682-476d-a67c-d2a0baf32127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13781", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6815", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13781\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-07T08:21:25.521Z\n\ud83d\udccf Modified: 2025-03-07T08:21:25.521Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8f394209-df80-491f-b700-cc06e54ea676?source=cve\n2. https://codecanyon.net/item/hero-maps-premium-responsive-google-maps-plugin/12577151", "creation_timestamp": "2025-03-07T08:35:00.000000Z"}, {"uuid": "2c367398-4eff-44e3-bb06-2bc3377eeb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13904", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6814", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13904\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.6 via the 'hooks' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-03-07T08:21:25.888Z\n\ud83d\udccf Modified: 2025-03-07T08:21:25.888Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/944e4c96-6ded-4483-9eaf-d976646f45ea?source=cve\n2. https://plugins.trac.wordpress.org/browser/platformly-for-woocommerce/trunk/platformly-for-woocommerce.php#L167\n3. https://plugins.trac.wordpress.org/changeset/3249460", "creation_timestamp": "2025-03-07T08:34:59.000000Z"}, {"uuid": "4b899852-92f6-42f3-9bbf-032466aa117f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13552", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6833", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13552\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The SupportCandy \u2013 Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.0 via file upload due to missing validation on a user controlled key. This makes it possible for authenticated attackers to download attachments for support tickets that don't belong to them. If an admin enables tickets for guests, this can be exploited by unauthenticated attackers.\n\ud83d\udccf Published: 2025-03-07T09:21:14.155Z\n\ud83d\udccf Modified: 2025-03-07T14:15:46.926Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/13f87248-cc0b-4351-b79d-6efc5190b021?source=cve\n2. https://plugins.trac.wordpress.org/browser/supportcandy/trunk/includes/admin/tickets/class-wpsc-new-ticket.php#L395\n3. https://plugins.trac.wordpress.org/changeset/3235142/supportcandy/trunk?old=3188306&old_path=%2Fsupportcandy%2Ftrunk", "creation_timestamp": "2025-03-07T14:38:24.000000Z"}, {"uuid": "3c779033-04d2-4405-b3f3-42df5e12c87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6837", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13857\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WPGet API \u2013 Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-03-07T09:21:14.921Z\n\ud83d\udccf Modified: 2025-03-07T13:36:06.585Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cd2a8e7b-6fca-49f3-ba6d-bdaa418f611a?source=cve\n2. https://wordpress.org/plugins/wpgetapi/#developers\n3. https://plugins.trac.wordpress.org/changeset/3251647/", "creation_timestamp": "2025-03-07T14:38:27.000000Z"}, {"uuid": "4724a061-d1ef-40cf-9f7a-7c0bdffb6119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13805", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6842", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13805\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Advanced File Manager \u2014 Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.2.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an Administrator, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-03-07T09:21:13.618Z\n\ud83d\udccf Modified: 2025-03-07T14:59:29.775Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0fc6cc1b-7d49-48cd-9bce-d37c6dcfece9?source=cve\n2. https://plugins.trac.wordpress.org/browser/file-manager-advanced/trunk/application/class_fma_connector.php\n3. https://plugins.trac.wordpress.org/changeset/3249482/", "creation_timestamp": "2025-03-07T15:35:19.000000Z"}, {"uuid": "cad4adf3-a51f-45be-b179-4271564733bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6921", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13161\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.\n\ud83d\udccf Published: 2025-01-14T17:11:32.061Z\n\ud83d\udccf Modified: 2025-03-08T04:55:16.088Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-03-08T05:35:27.000000Z"}, {"uuid": "e690059a-1a6d-4d53-9f32-ea0a7f03b698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6920", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13160\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.\n\ud83d\udccf Published: 2025-01-14T17:12:23.237Z\n\ud83d\udccf Modified: 2025-03-08T04:55:17.622Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-03-08T05:35:26.000000Z"}, {"uuid": "cf07ba57-0295-4db7-9765-b004ebe5e5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13640", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6919", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13640\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/wcdn/invoice directory which can contain invoice files if an email attachment setting is enabled.\n\ud83d\udccf Published: 2025-03-08T04:21:03.752Z\n\ud83d\udccf Modified: 2025-03-08T04:21:03.752Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/12ab3e54-a0b9-4420-ac90-f16e23688cca?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-delivery-notes/trunk/includes/class-wcdn-theme.php#L56\n3. https://plugins.trac.wordpress.org/changeset/3250195/", "creation_timestamp": "2025-03-08T04:35:37.000000Z"}, {"uuid": "39f28d81-8832-48b3-bdf7-57b1dde1b1bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13908", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13908\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The SMTP by BestWebSoft plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-03-08T07:04:54.779Z\n\ud83d\udccf Modified: 2025-03-08T07:04:54.779Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9f3b0637-b1ee-4e0b-95cd-11ac377805a7?source=cve\n2. https://plugins.trac.wordpress.org/browser/bws-smtp/tags/1.1.8/includes/class-bwssmtp-settings.php\n3. https://plugins.trac.wordpress.org/changeset/3250935/", "creation_timestamp": "2025-03-08T07:36:20.000000Z"}, {"uuid": "27a6fa62-b6ce-4e9c-b2bd-87a1ab9b8039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13359", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13359\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the add_product_input_fields_to_order_item_meta() function in all versions up to, and including, 1.12.1. This may make it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Please note that by default the plugin is only vulnerable to a double extension file upload attack, unless an administrators leaves the accepted file extensions field blank which can make .php file uploads possible.\n\ud83d\udccf Published: 2025-03-08T09:22:53.866Z\n\ud83d\udccf Modified: 2025-03-08T09:22:53.866Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a9c08f2e-bffd-40a6-89f3-559cb34f4395?source=cve\n2. https://plugins.trac.wordpress.org/browser/product-input-fields-for-woocommerce/tags/-1.8.2/includes/class-alg-wc-pif-main.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3250201%40product-input-fields-for-woocommerce&new=3250201%40product-input-fields-for-woocommerce&sfp_email=&sfph_mail=\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3234567%40product-input-fields-for-woocommerce&new=3234567%40product-input-fields-for-woocommerce&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-08T09:36:00.000000Z"}, {"uuid": "7f38cae0-0d74-4f8e-be12-eb5cc423e80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13675", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6941", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13675\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The SlingBlocks \u2013 Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \"Icon List\" Block in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T11:16:40.969Z\n\ud83d\udccf Modified: 2025-03-08T11:16:40.969Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f34904b5-3b3d-46d3-9e33-ef661d5f4149?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251693%40slingblocks&new=3251693%40slingblocks&sfp_email=&sfph_mail=#file5", "creation_timestamp": "2025-03-08T11:36:21.000000Z"}, {"uuid": "63a58ead-f9d7-4b53-8569-df235ed37af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13835", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6913", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13835\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including, 1.4.3. This is due to the plugin not properly verifying the existence of a multisite installation prior to allowing user meta to be added/modified. This makes it possible for authenticated attackers, with Administrator-level access and above, to gain elevated privileges on subsites that would otherwise be inaccessible.\n\ud83d\udccf Published: 2025-03-08T02:24:04.227Z\n\ud83d\udccf Modified: 2025-03-08T02:24:04.227Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/568aa6d6-10a1-4653-ab95-845faf005b8e?source=cve\n2. https://wordpress.org/plugins/post-meta-data-manager/", "creation_timestamp": "2025-03-08T02:35:24.000000Z"}, {"uuid": "0cb258f0-8acd-4f80-91f7-2e059440bd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13895", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6912", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13895\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The The Code Snippets CPT plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.1.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-03-08T02:24:04.601Z\n\ud83d\udccf Modified: 2025-03-08T02:24:04.601Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/65f521f4-1968-4c43-a3f0-b0f81632d7aa?source=cve\n2. https://plugins.trac.wordpress.org/browser/code-snippets-cpt/trunk/lib/CodeSnippitButton.php#L201", "creation_timestamp": "2025-03-08T02:35:23.000000Z"}, {"uuid": "b0719ef9-74a6-43a4-bb73-7a977a884efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13774", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6911", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13774\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.7. This is due to missing or incorrect nonce validation on the 'save_to_multiple_wishlist' function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-08T02:24:04.980Z\n\ud83d\udccf Modified: 2025-03-08T02:24:04.980Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c11456bb-dde3-4ab8-b00b-a6cdcc68a760?source=cve\n2. https://plugins.trac.wordpress.org/browser/wish-list-for-woocommerce/tags/3.1.7/includes/free/class-alg-wc-wish-list-ajax.php#L337\n3. https://plugins.trac.wordpress.org/browser/wish-list-for-woocommerce/tags/3.1.7/includes/free/class-alg-wc-wish-list-ajax.php#L789", "creation_timestamp": "2025-03-08T02:35:22.000000Z"}, {"uuid": "3bda65bb-23c9-4bb7-b781-f50e20e71b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13826", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6923", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13826\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Email Keep WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack\n\ud83d\udccf Published: 2025-03-08T06:00:06.915Z\n\ud83d\udccf Modified: 2025-03-08T06:00:06.915Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/56b143b6-e5db-4037-ab2a-4e4d0cb7a005/", "creation_timestamp": "2025-03-08T06:35:46.000000Z"}, {"uuid": "bb1bbe61-90a8-4579-acc9-606c6c935429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13844\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the \u2018columns\u2019 parameter in all versions up to, and including, 3.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-08T05:30:08.283Z\n\ud83d\udccf Modified: 2025-03-08T05:30:08.283Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0540f70d-009a-4776-8717-f096e30a11d3?source=cve\n2. https://gist.github.com/nhienit2010/d4692062f54b89e16aa068a0ef142cf6#file-postmanemailquerylog-php-L314\n3. https://wordpress.org/plugins/post-smtp/#developers\n4. https://plugins.trac.wordpress.org/changeset/3249371/", "creation_timestamp": "2025-03-08T06:35:49.000000Z"}, {"uuid": "f75a5c1a-843d-4a8c-874e-2820d46bc678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13882", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13882\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_generate_featured_image' function in all versions up to, and including, 2.3.8. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-03-08T08:22:56.807Z\n\ud83d\udccf Modified: 2025-03-08T08:22:56.807Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7108df0d-771a-4404-b90d-8ac8bc572898?source=cve\n2. https://coderevolution.ro/knowledge-base/faq/full-changelog-aiomatic-automatic-ai-content-writer-editor-gpt-3-gpt-4-chatgpt-chatbot-ai-toolkit/", "creation_timestamp": "2025-03-08T08:37:32.000000Z"}, {"uuid": "2fe967db-064a-4c20-85aa-3b68b1019ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6988", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13919\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.\n\ud83d\udccf Published: 2025-03-10T10:03:01.374Z\n\ud83d\udccf Modified: 2025-03-10T10:03:01.374Z\n\ud83d\udd17 References:\n1. https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-02_Laravel_Reflected_XSS_via_Route_Parameter_in_Debug-Mode_Error_Page\n2. https://github.com/laravel/framework/pull/53869\n3. https://github.com/laravel/framework/releases/tag/v11.36.0", "creation_timestamp": "2025-03-10T10:39:28.000000Z"}, {"uuid": "a392669d-58af-44c6-a2c8-138e04c2ffcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7022", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13159\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.\n\ud83d\udccf Published: 2025-01-14T17:12:57.652Z\n\ud83d\udccf Modified: 2025-03-10T17:19:20.017Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6", "creation_timestamp": "2025-03-10T17:38:19.000000Z"}, {"uuid": "7dc597db-9a90-4919-a0e7-768b06de45d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13413", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7103", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13413\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The ProductDyno plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018res\u2019 parameter in all versions up to, and including, 1.0.24 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts into pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This vulnerability is potentially a duplicate of CVE-2025-22320.\n\ud83d\udccf Published: 2025-03-11T04:21:46.530Z\n\ud83d\udccf Modified: 2025-03-11T04:21:46.530Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fdc1289a-abd1-43db-89b7-3e81878a0f9a?source=cve\n2. https://plugins.trac.wordpress.org/browser/productdyno/trunk/admin/partials/productdyno-admin-display.php#L81\n3. https://wordpress.org/plugins/productdyno/#developers\n4. https://plugins.trac.wordpress.org/changeset/3251678/", "creation_timestamp": "2025-03-11T04:41:05.000000Z"}, {"uuid": "710b74dc-d613-48a7-b5a4-7d9dd7dbceef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13228", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7109", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13228\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Qubely \u2013 Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.13 via the 'qubely_get_content'. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, password-protected, draft, and trashed post data.\n\ud83d\udccf Published: 2025-03-11T07:05:16.631Z\n\ud83d\udccf Modified: 2025-03-11T07:05:16.631Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/72c66e71-dddb-4142-ae13-da3caffd8714?source=cve\n2. https://plugins.trac.wordpress.org/browser/qubely/trunk/core/QUBELY.php#L1172\n3. https://plugins.trac.wordpress.org/changeset/3253223/", "creation_timestamp": "2025-03-11T07:39:38.000000Z"}, {"uuid": "54c2df8c-3103-44fe-918f-67bb7216e2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13864", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7158", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13864\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Countdown Timer WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\ud83d\udccf Published: 2025-03-11T06:00:12.171Z\n\ud83d\udccf Modified: 2025-03-11T14:08:28.208Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b95b32b6-218a-4d02-b294-ab13458006b2/", "creation_timestamp": "2025-03-11T14:39:59.000000Z"}, {"uuid": "c3f0c42a-746c-4e92-9851-6957f4da9619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13853", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7138", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13853\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\ud83d\udccf Published: 2025-03-11T06:00:11.237Z\n\ud83d\udccf Modified: 2025-03-11T13:15:20.635Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/52991dd9-41f7-4cf8-b8c9-56dd4e62bf0c/", "creation_timestamp": "2025-03-11T13:39:57.000000Z"}, {"uuid": "5384390d-3308-4ec7-9eac-de9eea812496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7316", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13872\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and detection rules on the devices. Updates can be remotely triggered through the /set_temp_token API method. Then, an unauthenticated and network-adjacent attacker can use man-in-the-middle (MITM) techniques to return malicious responses. Restarted daemons that use malicious assets can then be exploited for remote code execution on the device.\n\ud83d\udccf Published: 2025-03-12T11:47:46.419Z\n\ud83d\udccf Modified: 2025-03-12T14:09:37.026Z\n\ud83d\udd17 References:\n1. https://bitdefender.com/support/security-advisories/insecure-update-mechanism-vulnerability-in-libboxhermes-so-in-bitdefender-box-v1", "creation_timestamp": "2025-03-12T14:40:55.000000Z"}, {"uuid": "6efe9c4b-1ad1-4507-9fa8-0d59f8a376e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13446", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7311", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13446\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. This is due to the plugin not properly validating a user's identity prior to (1) performing a social auto-login or (2) updating their profile details (e.g. password). This makes it possible for unauthenticated attackers to (1) login as an arbitrary user if their email address is known or (2) change an arbitrary user's password, including administrators, and leverage that to gain access to their account. NOTE: This vulnerability was partially fixed in version 3.2.5.\n\ud83d\udccf Published: 2025-03-12T09:22:25.914Z\n\ud83d\udccf Modified: 2025-03-12T14:20:41.049Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/78c1308b-0849-4235-b2d6-0b1750a5614f?source=cve\n2. https://themeforest.net/item/workreap-freelance-marketplace-wordpress-theme/23712454", "creation_timestamp": "2025-03-12T14:40:47.000000Z"}, {"uuid": "0a152af2-4d17-4beb-8fb6-4f0b52a87d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13885", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7594", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13885\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-13T06:00:04.928Z\n\ud83d\udccf Modified: 2025-03-14T16:23:53.184Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b64d17d6-8416-476e-ad78-b7b9cb85b84f/", "creation_timestamp": "2025-03-14T16:44:13.000000Z"}, {"uuid": "f7b96a82-a502-402a-801a-dac4a30c7dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13887", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7394", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13887\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Business Directory Plugin \u2013 Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.14 via the 'ajax_listing_submit_image_upload' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to add arbitrary images to listings.\n\ud83d\udccf Published: 2025-03-13T03:21:01.466Z\n\ud83d\udccf Modified: 2025-03-13T03:21:01.466Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/06c3de6d-92e7-46f8-86a9-37f027767fc0?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3249927/business-directory-plugin/trunk/includes/class-wpbdp.php", "creation_timestamp": "2025-03-13T03:44:01.000000Z"}, {"uuid": "5239b379-8873-4e8e-9a8c-97489f92380d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7416", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13112\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:00:14.899Z\n\ud83d\udccf Modified: 2025-03-13T14:35:59.438Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/155df231-30ef-47bb-aa91-a7deb1779bd1/", "creation_timestamp": "2025-03-13T14:45:12.000000Z"}, {"uuid": "c6ab7826-c5b3-4c26-a04c-f40de4e69b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13939", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9252", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13939\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string.\n\nAs stated in the documentation: \"If the lengths of the strings are different, because equals returns false right away the size of the secret string may be leaked (but not its contents).\"\n\nThis is similar to\u00a0CVE-2020-36829\n\ud83d\udccf Published: 2025-03-28T02:05:01.416Z\n\ud83d\udccf Modified: 2025-03-28T02:05:01.416Z\n\ud83d\udd17 References:\n1. https://metacpan.org/release/FRACTAL/String-Compare-ConstantTime-0.321/view/lib/String/Compare/ConstantTime.pm#TIMING-SIDE-CHANNEL", "creation_timestamp": "2025-03-28T02:28:07.000000Z"}, {"uuid": "a2451505-195f-4a50-a5e3-27d8ca63141e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13913", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7530", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13913\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The InstaWP Connect \u2013 1-click WP Staging & Migration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.0.83. This is due to missing or incorrect nonce validation in the '/migrate/templates/main.php' file. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-03-14T05:24:04.459Z\n\ud83d\udccf Modified: 2025-03-14T05:24:04.459Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ea6c7b63-00da-4476-a024-97fe99af643d?source=cve\n2. https://plugins.trac.wordpress.org/browser/instawp-connect/trunk/admin/class-instawp-admin.php#L159\n3. https://plugins.trac.wordpress.org/browser/instawp-connect/trunk/migrate/templates/main.php#L27\n4. https://plugins.trac.wordpress.org/changeset/3254817/", "creation_timestamp": "2025-03-14T05:46:50.000000Z"}, {"uuid": "9b72f727-44c0-4983-a753-ba813d30f0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13376", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7532", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13376\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Industrial theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the _ajax_get_total_content_import_items() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-03-14T05:24:03.652Z\n\ud83d\udccf Modified: 2025-03-14T05:24:03.652Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e25ca990-eee1-4f72-b543-7a65bc4855a8?source=cve\n2. https://themeforest.net/item/industrial-manufacturing-wordpress-theme/15776179", "creation_timestamp": "2025-03-14T05:46:51.000000Z"}, {"uuid": "c8beda5d-3793-4ef9-9131-01aa78a12578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13703\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The CRM and Lead Management by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae() function in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enable and disable plugin widgets.\n\ud83d\udccf Published: 2025-03-13T01:45:27.946Z\n\ud83d\udccf Modified: 2025-03-14T13:54:28.543Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8e8c2aa5-5770-4b88-b415-40c2aff69d84?source=cve\n2. https://plugins.trac.wordpress.org/browser/crm-customer-relationship-management-by-vcita/trunk/vcita-ajax-function.php#L6", "creation_timestamp": "2025-03-14T14:45:23.000000Z"}, {"uuid": "e9bc1016-a50a-4b2f-8a0a-e333447c1b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13884", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7587", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13884\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Limit Bio WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\ud83d\udccf Published: 2025-03-13T06:00:03.037Z\n\ud83d\udccf Modified: 2025-03-14T16:29:53.044Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/759a60ac-c890-4961-91e4-53db5096eb3c/", "creation_timestamp": "2025-03-14T16:44:04.000000Z"}, {"uuid": "4fb3b5be-cfad-4dae-9cb9-85e467c77d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13218", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7597", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13218\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Fast Tube WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:00:15.134Z\n\ud83d\udccf Modified: 2025-03-14T16:19:42.514Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/79eb9432-3e3c-4a23-88a8-05aa3146061c/", "creation_timestamp": "2025-03-14T16:44:18.000000Z"}, {"uuid": "c1bda897-91ea-4b30-9a68-01c756aa7ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13223", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7618", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13223\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Tabulate WordPress plugin through 2.10.3 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:00:16.215Z\n\ud83d\udccf Modified: 2025-03-14T17:12:59.114Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e3a52af1-7cb6-4361-b1c7-a50e0cc62fb1/", "creation_timestamp": "2025-03-14T17:49:08.000000Z"}, {"uuid": "a8b470ed-884f-413c-a843-3cf183275d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13847", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7660", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13847\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Portfolio and Projects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-03-15T03:23:22.535Z\n\ud83d\udccf Modified: 2025-03-15T03:23:22.535Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/051fb185-5004-42f2-9624-6cba11b01e8d?source=cve\n2. https://plugins.trac.wordpress.org/browser/portfolio-and-projects/trunk/includes/admin/class-wp-pap-admin.php?rev=2948311\n3. https://plugins.trac.wordpress.org/browser/portfolio-and-projects/trunk/includes/admin/settings/wp-pap-img-popup-data.php?rev=2948311\n4. https://wordpress.org/plugins/portfolio-and-projects/#developers", "creation_timestamp": "2025-03-15T03:49:07.000000Z"}, {"uuid": "c5406684-11e4-4a17-a05b-7e4d55ff541b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13126", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7707", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13126\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use htaccess, allowing unauthorized access of files.\n\ud83d\udccf Published: 2025-03-16T06:00:04.512Z\n\ud83d\udccf Modified: 2025-03-16T06:00:04.512Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c2c69a44-4ecc-41d1-a10c-cfe9c875b803/", "creation_timestamp": "2025-03-16T06:46:15.000000Z"}, {"uuid": "01092d52-6b30-4708-9c9b-300a33cb62b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13602", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13602\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Poll Maker  WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-16T06:00:07.086Z\n\ud83d\udccf Modified: 2025-03-16T06:00:07.086Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/05d5010b-94eb-4fd3-b962-e2a16c032b71/", "creation_timestamp": "2025-03-16T06:46:14.000000Z"}, {"uuid": "7dfb7c96-d2fc-47d7-85b5-ca9fcd34104b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13442", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8044", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13442\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.0. This is due to the plugin not properly validating a user's identity prior to (1) performing a post-booking auto-login or (2) updating their profile details (e.g. password). This makes it possible for unauthenticated attackers to (1) login as an arbitrary user if their email address is known or (2) change an arbitrary user's password, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-19T11:10:37.915Z\n\ud83d\udccf Modified: 2025-03-19T13:37:10.480Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/827b5482-cb42-4aaa-80b5-3d0143fcead8?source=cve\n2. https://themeforest.net/item/service-finder-service-and-business-listing-wordpress-theme/15208793", "creation_timestamp": "2025-03-19T13:49:13.000000Z"}, {"uuid": "c96cbf0a-b3e5-4d16-a064-c36d72ede9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8043", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13225\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:00:16.734Z\n\ud83d\udccf Modified: 2025-03-19T13:38:30.205Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8efd7d62-3f74-4108-970e-bd5ed24914ff/", "creation_timestamp": "2025-03-19T13:49:11.000000Z"}, {"uuid": "a9a0a9e6-855a-408a-9627-f511a5113d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13933", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13933\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7. This is due to missing or incorrect nonce validation on the foodbakery_var_backup_file_delete, foodbakery_widget_file_delete, theme_option_save, export_widget_settings, ajax_import_widget_data, foodbakery_var_settings_backup_generate, foodbakery_var_backup_file_restore, and theme_option_rest_all functions. This makes it possible for unauthenticated attackers to delete arbitrary files, update theme options, export widget options, import widget options, generate backups, restore backups, and reset theme options via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-19T11:10:37.382Z\n\ud83d\udccf Modified: 2025-03-19T13:44:24.695Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/45eda79d-f999-413e-88ce-b7d06f09f191?source=cve\n2. https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331", "creation_timestamp": "2025-03-19T13:49:08.000000Z"}, {"uuid": "659e56b0-2ee2-427e-99de-c7263c753c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13412", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13412\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: The CozyStay theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated attackers to execute arbitrary actions.\n\ud83d\udccf Published: 2025-03-19T06:57:41.845Z\n\ud83d\udccf Modified: 2025-03-19T06:57:41.845Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/67965a51-39d3-4d14-adf5-d91d4c775baf?source=cve\n2. https://themeforest.net/item/cozystay-hotel-booking-wordpress-theme/47383367#item-description__changelog", "creation_timestamp": "2025-03-19T07:49:35.000000Z"}, {"uuid": "6d906592-4f3c-4545-8bb2-917538d8d46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13790", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8036", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13790\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The MinimogWP \u2013 The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.7.0 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-03-19T08:21:59.729Z\n\ud83d\udccf Modified: 2025-03-19T08:21:59.729Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b3ae0e08-5cdc-47ff-b094-3920d56a50f7?source=cve\n2. https://changelog.thememove.com/minimog-wp/\n3. https://themeforest.net/item/minimog-the-high-converting-ecommerce-wordpress-theme/36947163", "creation_timestamp": "2025-03-19T08:49:01.000000Z"}, {"uuid": "ceb472ab-c4c5-4df6-b449-b817e180640d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13410\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to, and including 3.9.0, respectively, via deserialization of untrusted input in the 'ajax_handler' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-03-19T06:57:41.231Z\n\ud83d\udccf Modified: 2025-03-19T06:57:41.231Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/61080df6-836f-4365-964a-fa2517e8be5a?source=cve\n2. https://themeforest.net/item/cozystay-hotel-booking-wordpress-theme/47383367#item-description__changelog\n3. https://themeforest.net/item/tinysalt-personal-food-blog-wordpress-theme/26294668#item-description__changelog", "creation_timestamp": "2025-03-19T07:49:36.000000Z"}, {"uuid": "2d3dc16b-a9e5-4e53-9ee3-959bdf6a74ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8053", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13222\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:00:15.995Z\n\ud83d\udccf Modified: 2025-03-19T13:54:40.038Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/069e1f81-448d-4d27-b288-87111dade2f2/", "creation_timestamp": "2025-03-19T14:16:46.000000Z"}, {"uuid": "70955248-eddc-40dd-820e-a10bf08138e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13101", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8094", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13101\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-01-31T06:00:14.631Z\n\ud83d\udccf Modified: 2025-03-19T17:11:54.213Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/03f51b54-0ec2-40ce-a0fa-ef0c4ab0ea99/", "creation_timestamp": "2025-03-19T17:20:57.000000Z"}, {"uuid": "f1aee4ae-0c16-4191-b236-2a6f096155ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13876", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8175", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13876\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The mEintopf WordPress plugin through 0.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-20T06:00:05.661Z\n\ud83d\udccf Modified: 2025-03-20T06:00:05.661Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d80cd18a-065f-443b-b548-d780b785d68e/", "creation_timestamp": "2025-03-20T06:18:07.000000Z"}, {"uuid": "022495ea-b85e-4d49-a384-db81576db475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13875", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8176", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13875\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP-PManager WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-20T06:00:02.741Z\n\ud83d\udccf Modified: 2025-03-20T06:00:02.741Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/82c54fb5-f1d9-4bae-a3de-d4335809b81c/", "creation_timestamp": "2025-03-20T06:18:11.000000Z"}, {"uuid": "7d6041cc-cb2b-49b1-948a-2b5a6047a542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13877", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13877\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Passbeemedia Web Push Notification WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-20T06:00:06.305Z\n\ud83d\udccf Modified: 2025-03-20T06:00:06.305Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0e8ce3cf-1598-4c5d-b119-99d5f676e619/", "creation_timestamp": "2025-03-20T06:18:06.000000Z"}, {"uuid": "6a2ce5dc-0479-4caa-b61d-ec976b813443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13878", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8173", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13878\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-20T06:00:06.978Z\n\ud83d\udccf Modified: 2025-03-20T06:00:06.978Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/882b2022-4ed6-4d9e-8b35-f48ea1580884/", "creation_timestamp": "2025-03-20T06:18:05.000000Z"}, {"uuid": "531bb98c-1fa0-4f19-89d4-ae1f8e53e038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13880", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8172", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13880\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The My Quota WordPress plugin through 1.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-20T06:00:07.305Z\n\ud83d\udccf Modified: 2025-03-20T06:00:07.305Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/bee3b002-e808-4402-8bf6-4375ed7b3807/", "creation_timestamp": "2025-03-20T06:18:04.000000Z"}, {"uuid": "b4abe339-937d-4dd1-a1d8-2c688657ac5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13881", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8171", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13881\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Link My Posts WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-20T06:00:07.996Z\n\ud83d\udccf Modified: 2025-03-20T06:00:07.996Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/900fa2c6-0cac-4920-aef2-e8b94248b62e/", "creation_timestamp": "2025-03-20T06:18:03.000000Z"}, {"uuid": "0b85c71d-37c0-44c7-a2bc-18a026783720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8213", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13220\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WordPress Google Map Professional (Map In Your Language) WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:00:15.556Z\n\ud83d\udccf Modified: 2025-03-20T14:35:39.859Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/33ef27b4-e88f-46ec-9b3f-0a3e16d6f82e/", "creation_timestamp": "2025-03-20T15:18:25.000000Z"}, {"uuid": "32c5aec4-665d-42cd-a70d-a59b000a35b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13060", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8219", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13060\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1.\n\ud83d\udccf Published: 2025-03-20T10:08:46.465Z\n\ud83d\udccf Modified: 2025-03-20T14:31:59.970Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/98a49c90-e095-441f-900c-59d463dc8e8f\n2. https://github.com/mintplex-labs/anything-llm/commit/696af19c45473172ad4d3ca749281800a4d1a45a", "creation_timestamp": "2025-03-20T15:18:36.000000Z"}, {"uuid": "7bb9ca56-aaf8-41de-a6f7-5df4c76fad7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13617", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13617\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server\n\ud83d\udccf Published: 2025-03-25T06:00:13.131Z\n\ud83d\udccf Modified: 2025-03-25T06:00:13.131Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8d6dd979-21ef-4d14-9c42-bbd1d7b65c53/", "creation_timestamp": "2025-03-25T06:23:39.000000Z"}, {"uuid": "b1622007-b6cd-4b16-b2f3-ceb6257f1992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13903", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8320", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13903\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JS_GetRuntime of the file quickjs.c of the component qjs. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. Upgrading to version 0.9.0 is able to address this issue. The patch is named 99c02eb45170775a9a679c32b45dd4000ea67aff. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-03-21T07:00:14.647Z\n\ud83d\udccf Modified: 2025-03-21T07:00:14.647Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300571\n2. https://vuldb.com/?ctiid.300571\n3. https://vuldb.com/?submit.517394\n4. https://github.com/quickjs-ng/quickjs/issues/775\n5. https://github.com/quickjs-ng/quickjs/commit/99c02eb45170775a9a679c32b45dd4000ea67aff\n6. https://github.com/quickjs-ng/quickjs/releases/tag/v0.9.0", "creation_timestamp": "2025-03-21T07:19:47.000000Z"}, {"uuid": "6c8713b1-d3f4-4553-8ed3-36b1ba36ab4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13122", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8606", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13122\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The AFI  WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-25T06:00:12.535Z\n\ud83d\udccf Modified: 2025-03-25T06:00:12.535Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/512721cb-e544-4d26-87ca-43d83e77f8e4/", "creation_timestamp": "2025-03-25T06:23:41.000000Z"}, {"uuid": "5398e57b-c77a-450b-b299-ab6ef8c2f386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13123", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8605", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The AFI  WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-25T06:00:12.871Z\n\ud83d\udccf Modified: 2025-03-25T06:00:12.871Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/417178de-17ff-438c-a36c-b90db6486a46/", "creation_timestamp": "2025-03-25T06:23:40.000000Z"}, {"uuid": "841d5cbd-012a-495a-8d38-05cfe44955d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13618", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8603", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13618\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.\n\ud83d\udccf Published: 2025-03-25T06:00:13.473Z\n\ud83d\udccf Modified: 2025-03-25T06:00:13.473Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d6a78233-3f23-4da4-9bc0-1439cde20a30/", "creation_timestamp": "2025-03-25T06:23:39.000000Z"}, {"uuid": "8ce6513d-8de5-4e36-ae2d-0f858a18eda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13118", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13118\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers to make logged in users delete all logs via a CSRF attack\n\ud83d\udccf Published: 2025-03-25T06:00:12.234Z\n\ud83d\udccf Modified: 2025-03-25T06:00:12.234Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/eba6f98e-b931-4f02-b190-ca855a674839/", "creation_timestamp": "2025-03-25T07:00:37.000000Z"}, {"uuid": "e56f6b42-c35e-465e-8e1b-d4e7c73bcd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13863", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8602", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13863\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Stylish Google Sheet Reader 4.0  WordPress plugin before 4.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\ud83d\udccf Published: 2025-03-25T06:00:13.705Z\n\ud83d\udccf Modified: 2025-03-25T06:00:13.705Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a6161595-0934-4baa-9da6-73792f4b87fd/", "creation_timestamp": "2025-03-25T06:23:34.000000Z"}, {"uuid": "77673402-bb71-47ad-b00d-400fdce5c877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13146", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13146\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack\n\ud83d\udccf Published: 2025-03-26T06:00:08.756Z\n\ud83d\udccf Modified: 2025-03-26T06:00:08.756Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/19cb40dd-53b0-46db-beb0-1841e385ce09/", "creation_timestamp": "2025-03-26T06:25:16.000000Z"}, {"uuid": "708b9440-9dd0-46c5-811c-3774c641c535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13710", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8634", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13710\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Estatebud \u2013 Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.0. This is due to missing or incorrect nonce validation on the 'estatebud_settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-25T08:22:15.157Z\n\ud83d\udccf Modified: 2025-03-25T08:22:15.157Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c43f4c91-329d-46b9-b2c8-f35e5baa38d7?source=cve\n2. https://wordpress.org/plugins/estatebud-properties-listings/", "creation_timestamp": "2025-03-25T09:24:23.000000Z"}, {"uuid": "0eccde39-ce72-45eb-81ba-6f5fed8b7452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13731", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8633", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13731\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Alert Box Block \u2013 Display notice/alerts in the front end. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Alert Box block in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-25T08:22:15.605Z\n\ud83d\udccf Modified: 2025-03-25T08:22:15.605Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d63cd13e-4a16-483f-8165-6c8090ceebab?source=cve\n2. https://wordpress.org/plugins/alert-box-block/", "creation_timestamp": "2025-03-25T09:24:22.000000Z"}, {"uuid": "92985599-8772-43f7-ac7b-c8241c13ff26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13690", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8632", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13690\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Church Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several donation form submission parameters in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-25T08:22:16.138Z\n\ud83d\udccf Modified: 2025-03-25T08:22:16.138Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/de8ac20f-d6ae-4e55-9337-4fb5ebd4f24a?source=cve\n2. http://plugins.svn.wordpress.org/wp-church-donation/tags/1.7/includes/church-donation-form-display.php\n3. http://plugins.svn.wordpress.org/wp-church-donation/tags/1.7/includes/church-donation-listings.php\n4. https://wordpress.org/plugins/wp-church-donation/", "creation_timestamp": "2025-03-25T09:24:19.000000Z"}, {"uuid": "b7f1a1ee-d8f2-4da9-85e4-7108ae720c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13801", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8814", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13801\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: The BWL Advanced FAQ Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'baf_set_notice_status' AJAX action in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to '1' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration.\n\ud83d\udccf Published: 2025-03-26T08:21:51.722Z\n\ud83d\udccf Modified: 2025-03-26T08:21:51.722Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b3a84201-6cd8-4528-ae7a-7fd813c8da18?source=cve\n2. https://codecanyon.net/item/bwl-advanced-faq-manager/5007135", "creation_timestamp": "2025-03-26T09:25:58.000000Z"}, {"uuid": "2b15cc85-129b-4702-a2cd-3e3e59af702e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13702", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13702\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler' and 'vCitaSchedulingCalendar' shortcodes in all versions up to, and including, 2.7.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-26T08:21:52.086Z\n\ud83d\udccf Modified: 2025-03-26T08:21:52.086Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e5d3239b-0f65-46f7-977b-9995542a6eb9?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3256449%40crm-customer-relationship-management-by-vcita&new=3256449%40crm-customer-relationship-management-by-vcita&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-26T09:25:58.000000Z"}, {"uuid": "ced4491d-0664-4b62-b3f7-b456efb930a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13411", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8826", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13411\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Zapier for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5.1 via the updated_user() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-03-26T11:22:10.207Z\n\ud83d\udccf Modified: 2025-03-26T11:22:10.207Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/701dc461-88e7-40bf-a4fb-f92723b6e05e?source=cve\n2. https://plugins.trac.wordpress.org/browser/zapier/trunk/zapier.php#L114\n3. https://plugins.trac.wordpress.org/browser/zapier/trunk/zapier.php#L210\n4. https://plugins.trac.wordpress.org/browser/zapier/trunk/zapier.php#L284\n5. https://wordpress.org/plugins/zapier/#developers\n6. https://plugins.trac.wordpress.org/changeset/3257975/", "creation_timestamp": "2025-03-26T11:25:18.000000Z"}, {"uuid": "e7f78e3b-be0f-47cb-abdc-ffc2cba630c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13889", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8827", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13889\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.8.3 via deserialization of untrusted input in the 'maybe_unserialize' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-03-26T11:22:09.743Z\n\ud83d\udccf Modified: 2025-03-26T11:22:09.743Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5f0795f7-6eba-4ff0-b0da-5d2b544adf14?source=cve\n2. https://plugins.trac.wordpress.org/browser/wordpress-importer/trunk/class-wp-import.php#L602\n3. https://plugins.trac.wordpress.org/browser/wordpress-importer/trunk/class-wp-import.php#L857\n4. https://plugins.trac.wordpress.org/browser/wordpress-importer/trunk/class-wp-import.php#L891\n5. https://plugins.trac.wordpress.org/browser/wordpress-importer/trunk/class-wp-import.php#L975\n6. https://plugins.trac.wordpress.org/changeset/3261419/", "creation_timestamp": "2025-03-26T11:25:19.000000Z"}, {"uuid": "362073b1-b8dc-4686-842f-370e0101b526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13845", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14235", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13845\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_Webhooks class This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-05-01T04:22:57.183Z\n\ud83d\udccf Modified: 2025-05-01T04:22:57.183Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9311b20b-daad-408f-a1a0-d1e42573ab97?source=cve\n2. https://www.gravityforms.com/blog/brand-new-release-webhooks-add-on-1-7/", "creation_timestamp": "2025-05-01T05:14:24.000000Z"}, {"uuid": "5b86f9b2-487a-4e60-8555-9172a5d8f702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13381", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14241", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13381\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-01T06:00:03.019Z\n\ud83d\udccf Modified: 2025-05-01T06:00:03.019Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/da099e52-7f7b-4d76-a0bc-a46315510e0a/", "creation_timestamp": "2025-05-01T06:13:53.000000Z"}, {"uuid": "a58e72e5-68ee-4b7f-a5ac-acc6070da0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13804", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13804\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vulnerability in Hewlett Packard Enterprise HPE Insight Cluster Management Utility (CMU).This issue affects HPE Insight Cluster Management Utility (CMU): 8.2.\n\ud83d\udccf Published: 2025-03-30T21:10:54.859Z\n\ud83d\udccf Modified: 2025-03-30T21:26:47.732Z\n\ud83d\udd17 References:\n1. https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804", "creation_timestamp": "2025-03-30T21:30:15.000000Z"}, {"uuid": "c1dc881a-9f04-478d-ba79-b5fcfb412d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13567", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9839", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13567\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Awesome Support \u2013 WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/awesome-support directory which can contain file attachments included in support tickets. The vulnerability was partially patched in version 6.3.1.\n\ud83d\udccf Published: 2025-04-01T05:22:45.718Z\n\ud83d\udccf Modified: 2025-04-01T05:22:45.718Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/24c54ef5-ad02-4767-bca6-f74c539d3068?source=cve\n2. https://plugins.trac.wordpress.org/browser/awesome-support/trunk/includes/file-uploader/class-file-uploader.php\n3. https://plugins.trac.wordpress.org/changeset/3250497/\n4. https://plugins.trac.wordpress.org/changeset/3262629/", "creation_timestamp": "2025-04-01T05:31:50.000000Z"}, {"uuid": "9a74f541-cd81-48c9-b8ef-0c577eb9be08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9873", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13553\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The SMS Alert Order Notifications \u2013 WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a playground environment. This makes it possible for unauthenticated attackers to spoof the Host header to make the OTP code \"1234\" and authenticate as any user, including administrators.\n\ud83d\udccf Published: 2025-04-01T11:12:28.510Z\n\ud83d\udccf Modified: 2025-04-01T11:12:28.510Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e444a30-11c5-4219-b4fe-635084cbac3a?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3248017%40sms-alert&new=3248017%40sms-alert&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227241%40sms-alert&new=3227241%40sms-alert&sfp_email=&sfph_mail=", "creation_timestamp": "2025-04-01T11:34:31.000000Z"}, {"uuid": "210f95f4-a990-4eb0-9bb1-66f8253df5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13637", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13637\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin function in all versions up to, and including, 1.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins..\n\ud83d\udccf Published: 2025-04-02T09:21:44.774Z\n\ud83d\udccf Modified: 2025-04-02T09:21:44.774Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9a552f81-b222-46f0-b318-702e09d249c1?source=cve\n2. https://plugins.trac.wordpress.org/browser/demo-awesome/trunk/inc/admin/js/admin.js#L1684\n3. https://wordpress.org/plugins/demo-awesome/#developers\n4. https://plugins.trac.wordpress.org/browser/demo-awesome/trunk/inc/admin/class-demo-awesome-admin.php#L407", "creation_timestamp": "2025-04-02T09:34:23.000000Z"}, {"uuid": "59892c45-a97a-46b8-9227-a3dd54367be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13744\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the validate_product_input_fields_on_add_to_cart function in versions 4.0.1 to 7.2.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-04-04T04:21:22.827Z\n\ud83d\udccf Modified: 2025-04-04T04:21:22.827Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f8e1aca8-3d82-4b1a-98c8-29501a377846?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3262569/woocommerce-jetpack/trunk/includes/input-fields/class-wcj-product-input-fields-core.php", "creation_timestamp": "2025-04-04T04:35:18.000000Z"}, {"uuid": "5ebf0821-bf9f-4211-b26e-78c6c28e98a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13896", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11195", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP-GeSHi-Highlight \u2014 rock-solid syntax highlighting for 259 languages WordPress plugin through 1.4.3 processes user-supplied input as a regular expression via the wp_geshi_filter_replace_code() function, which could lead to Regular Expression Denial of Service (ReDoS) issue\n\ud83d\udccf Published: 2025-04-10T06:00:06.303Z\n\ud83d\udccf Modified: 2025-04-10T06:00:06.303Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b8b622ea-e090-45ad-8755-b050fc055231/", "creation_timestamp": "2025-04-10T06:48:35.000000Z"}, {"uuid": "4cec77a2-ceb6-4cf3-996f-5321edbcda96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13673", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10175", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13673\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Big Boom Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bbd-search' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-03T07:21:21.832Z\n\ud83d\udccf Modified: 2025-04-03T07:21:21.832Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5284cbe4-1550-4f3c-be54-e2de8a089512?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3262078%40big-boom-directory&new=3262078%40big-boom-directory&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3258281%40big-boom-directory&new=3258281%40big-boom-directory&sfp_email=&sfph_mail=", "creation_timestamp": "2025-04-03T07:34:03.000000Z"}, {"uuid": "fcd82b58-9095-4b03-a34e-0049cef6bbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13708", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10394", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13708\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in versions 4.0.1 to 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-04-04T05:22:46.789Z\n\ud83d\udccf Modified: 2025-04-04T05:22:46.789Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f58b3971-e1e4-4337-82a3-99c9079c6696?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/class-wcj-checkout-files-upload.php", "creation_timestamp": "2025-04-04T05:35:50.000000Z"}, {"uuid": "303a23e9-867d-4f3b-b5fb-fefc481cc50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13645", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10398", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13645\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The tagDiv Composer plugin for WordPress is vulnerable to PHP Object Instantiation in all versions up to, and including, 5.3 via module parameter. This makes it possible for unauthenticated attackers to Instantiate a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.\n\ud83d\udccf Published: 2025-04-04T05:22:44.092Z\n\ud83d\udccf Modified: 2025-04-04T05:22:44.092Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4124003c-4864-48f1-acba-9a613d9c99ae?source=cve\n2. https://tagdiv.com/tagdiv-composer-page-builder-basics/", "creation_timestamp": "2025-04-04T05:35:56.000000Z"}, {"uuid": "d35511a3-c4b5-478c-8ab5-2b5a6659b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13898", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10397", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13898\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Simple Banner \u2013 Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-04-04T05:22:44.837Z\n\ud83d\udccf Modified: 2025-04-04T05:22:44.837Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6a2dea28-14cf-4e83-ac72-efc7c97ecf54?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3264130%40simple-banner%2Ftrunk&old=3210193%40simple-banner%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-04-04T05:35:56.000000Z"}, {"uuid": "cd467968-5e03-48e3-9af2-d75f70dc6d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13604", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10593", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13604\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The KB Support \u2013 Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.4 via the 'kbs' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/kbs directory which can contain file attachments included in support tickets. The vulnerability was partially patched in version 1.7.3.2.\n\ud83d\udccf Published: 2025-04-05T01:44:44.761Z\n\ud83d\udccf Modified: 2025-04-05T01:44:44.761Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b3a058d6-ca9e-4241-b6dd-307efa7689ab?source=cve\n2. https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/files.php\n3. https://plugins.trac.wordpress.org/changeset/3231596/", "creation_timestamp": "2025-04-05T02:36:36.000000Z"}, {"uuid": "a8221e35-bac5-4dae-a69b-40aeb121011e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13776", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10710", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13776\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'dzsap_delete_notice' AJAX action in all versions up to, and including, 6.91. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 'seen' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. There are several other functions also vulnerable to missing authorization.\n\ud83d\udccf Published: 2025-04-05T05:32:12.407Z\n\ud83d\udccf Modified: 2025-04-07T14:11:57.825Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0c8e538b-7157-42d3-abee-8259c6715cd5?source=cve\n2. https://codecanyon.net/item/zoomsounds-wordpress-wave-audio-player-with-playlist/6181433", "creation_timestamp": "2025-04-07T14:45:09.000000Z"}, {"uuid": "8591ca0e-5daa-4333-a683-eedc9e6ad930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13820\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.15.9 via the 'run' function, which uses a hardcoded hash. This makes it possible for unauthenticated attackers to extract sensitive data including environment information, plugin tokens, shipping configurations, and limited vendor information.\n\ud83d\udccf Published: 2025-04-08T04:21:29.674Z\n\ud83d\udccf Modified: 2025-04-08T04:21:29.674Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a8f093bc-5cd3-41a0-b86b-d00338334d2e?source=cve\n2. https://github.com/melhorenvio/wp-melhorenvio-v2/blob/6e2f5bb01c536df9fc84534eb8a27ec99d9601af/Services/TestService.php\n3. https://plugins.trac.wordpress.org/browser/melhor-envio-cotacao/trunk/Services/TestService.php#L20\n4. https://plugins.trac.wordpress.org/browser/melhor-envio-cotacao/trunk/Services/TestService.php#L30", "creation_timestamp": "2025-04-08T04:46:36.000000Z"}, {"uuid": "2316f465-6c85-4dfc-a64b-8bd4d7d36640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13130", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10847", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13130\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-05T01:00:12.751Z\n\ud83d\udccf Modified: 2025-04-08T04:19:53.063Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290204\n2. https://vuldb.com/?ctiid.290204\n3. https://vuldb.com/?submit.464260\n4. https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4", "creation_timestamp": "2025-04-08T04:46:37.000000Z"}, {"uuid": "14697ee4-13d7-40c1-9c5a-1f7e8c5b0bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13471", "type": "seen", "source": "Telegram/JzO27mpsu7GBEskpLiq3jJ_e-mX1I656GHaqdh7SzAA4YszG", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "d7ca9bc4-1a99-4905-8c55-4c005840f71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13423", "type": "seen", "source": "Telegram/NbjdesIwxivDreZpkwYD6_L7AFIztHQ3rOVx5A6xABF95koF", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "781949b7-e436-46f1-9b85-52ab522b9165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13874", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11196", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13874\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Feedify  WordPress plugin before 2.4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\ud83d\udccf Published: 2025-04-10T06:00:05.480Z\n\ud83d\udccf Modified: 2025-04-10T06:00:05.480Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c808e7cf-3285-402b-ab4f-a40ab822b12e/", "creation_timestamp": "2025-04-10T06:48:36.000000Z"}, {"uuid": "e1520790-2e18-4e26-b92a-a397e30dd3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13809", "type": "seen", "source": "Telegram/IzNfIugkwcwwUuCrmtU8Uk-zLEjiJGfQLSksQB01w4185BJF", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "aaec5692-4415-4616-a510-32b0fc12e004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13337", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11547", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13337\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Clearfy Cache \u2013 WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.2. This is due to missing or incorrect nonce validation on the 'setup-wbcr_clearfy' page. This makes it possible for unauthenticated attackers to update the plugins settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-12T06:37:18.373Z\n\ud83d\udccf Modified: 2025-04-12T06:37:18.373Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d7f21dbe-f300-4336-9980-a69d40395f39?source=cve\n2. https://github.dev/WordPressPluginDirectory/clearfy\n3. https://plugins.trac.wordpress.org/changeset/3268278/clearfy/trunk/libs/factory/templates/pages/setup-parts/class-step-form.php", "creation_timestamp": "2025-04-12T06:51:44.000000Z"}, {"uuid": "8ce99ef3-bda3-41a4-b46c-77550cb1fbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13338", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11545", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13338\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Clearfy Cache \u2013 WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on the wclearfy_cache_delete functionality . This makes it possible for unauthenticated attackers to clear the cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-12T06:37:19.675Z\n\ud83d\udccf Modified: 2025-04-12T06:37:19.675Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e0a37ce4-9860-415e-bb88-545c30c95fc1?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3268278/clearfy/trunk/components/cache/includes/cache.php", "creation_timestamp": "2025-04-12T06:51:43.000000Z"}, {"uuid": "644b345b-8c72-44bc-9c2a-ca043865b491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13787", "type": "seen", "source": "Telegram/wctsiR1iyRSFkW1Hgy9heGDN29ORJkqZ-PdUhQ0K_ECXI9ta", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "46c88b7e-ca2f-4ce6-8f20-8227efd59a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13780", "type": "seen", "source": "Telegram/S7v5HyXsQgnXyN1hb3yuP_t8aWCcEbETwe7SJQmfKAAlW6-z", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "3617476e-8c35-43a7-841c-1c7c4aedfd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13207", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13207\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Widget for Social Page Feeds WordPress plugin before 6.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-04-15T06:00:06.042Z\n\ud83d\udccf Modified: 2025-04-15T06:00:06.042Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c3e27fa2-b6dd-48eb-83ec-99dc034eff38/", "creation_timestamp": "2025-04-15T06:54:48.000000Z"}, {"uuid": "da5a3914-bb64-4f5c-a651-f4470a444c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13610", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11772", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13610\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple Social Media Share Buttons  WordPress plugin before 6.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-04-15T06:00:10.252Z\n\ud83d\udccf Modified: 2025-04-15T06:00:10.252Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/85229528-1110-4d45-b972-8bbcba003a1f/", "creation_timestamp": "2025-04-15T06:54:47.000000Z"}, {"uuid": "42a58385-104d-4a00-a0fb-cea7b5622688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13452", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11983", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13452\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29. This is due to missing or incorrect nonce validation on a saveAsCopy function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-16T02:12:04.342Z\n\ud83d\udccf Modified: 2025-04-16T02:12:04.342Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2dbf510-d99f-4918-8462-66696b68003c?source=cve\n2. https://plugins.trac.wordpress.org/browser/contact-form-by-supsystic/tags/1.7.29/modules/forms/models/forms.php#L933\n3. https://plugins.trac.wordpress.org/changeset/3267149/", "creation_timestamp": "2025-04-16T02:55:44.000000Z"}, {"uuid": "61e3a413-c950-42a8-9a1a-8b212bc0035f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13779", "type": "seen", "source": "Telegram/MpSzr-G1mUK1I_MNyUSso-547KNtoaDNXaO-0lcFHoq_Zjur", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "40080517-c927-4867-ba13-f20ac924ede2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13777", "type": "seen", "source": "Telegram/U-3yHnmwFQp6ZAjzpVvI0EIB-sg8MNH2lkF90AyaqyHoGZdG", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "6b17b914-cec1-4ede-a2cb-bfeb70c5df8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13778", "type": "seen", "source": "Telegram/AxQZtGmyR1CWDTFGO8TvFp0g-11mYTAXNT3n9VbOVI1yHHg_", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "a603c602-a1c7-464d-82e2-9a8f33cd7e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13757", "type": "seen", "source": "Telegram/9qPNNz-lYGKCUPdnw4j7cht5eZThRzyQmWCQTd78nssH1eNw", "content": "", "creation_timestamp": "2025-03-06T02:16:31.000000Z"}, {"uuid": "71707158-8c33-4e47-adec-944d2b739cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13925", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12197", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13925\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.\n\ud83d\udccf Published: 2025-04-17T06:00:09.407Z\n\ud83d\udccf Modified: 2025-04-17T06:00:09.407Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/6aebb52f-d74a-4043-86c4-c24579f24ef4/", "creation_timestamp": "2025-04-17T06:57:20.000000Z"}, {"uuid": "58eab81c-0a42-4749-92c3-7ab32997fe7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13747", "type": "seen", "source": "Telegram/A_katm2tH23ArIKSyq8Z3TzB8wWJsSAz9SBB_WHUcxKaqgSP", "content": "", "creation_timestamp": "2025-03-06T02:16:31.000000Z"}, {"uuid": "64e6161e-ff1c-4900-b97c-f46250c38503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13861", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12183", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13861\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code execution as root. Redhat-based systems using RPM packages are not affected.\n\ud83d\udccf Published: 2025-04-11T12:41:45.182Z\n\ud83d\udccf Modified: 2025-04-17T03:55:29.877Z\n\ud83d\udd17 References:\n1. https://www.sophos.com/en-us/security-advisories/sophos-sa-20250411-taegis-agent-lpe", "creation_timestamp": "2025-04-17T04:57:23.000000Z"}, {"uuid": "953f0dba-6e16-4c29-9b2b-21a5a3c74e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13232", "type": "seen", "source": "Telegram/NoV7mjL4Q0lhYmWJQInrmGiNcNmnh11qQ-RYJZZiMmp9kVnZ", "content": "", "creation_timestamp": "2025-03-06T02:16:31.000000Z"}, {"uuid": "f7592fc6-1872-4c1b-a6e1-98f3b3bcb2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13650", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12378", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13650\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'PAFE Before After Image Comparison Slider' widget in all versions up to, and including, 2.4.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-18T01:44:10.501Z\n\ud83d\udccf Modified: 2025-04-18T01:44:10.501Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e3d0ffd-209b-4e29-bc1d-91f2498b4632?source=cve\n2. https://wordpress.org/plugins/piotnet-addons-for-elementor/", "creation_timestamp": "2025-04-18T01:58:02.000000Z"}, {"uuid": "1a305bc4-3674-47f4-ad51-2efb20baaa57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13926", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12576", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13926\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.\n\ud83d\udccf Published: 2025-04-19T06:00:02.350Z\n\ud83d\udccf Modified: 2025-04-19T06:00:02.350Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b5f0092e-7cd5-412f-a8ea-7bd4a8bf86d2/", "creation_timestamp": "2025-04-19T06:59:28.000000Z"}, {"uuid": "9b7934ae-7893-4ce5-9f73-ca92e2c8253a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13176\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.\n\ud83d\udccf Published: 2025-01-20T13:29:57.047Z\n\ud83d\udccf Modified: 2025-04-19T00:11:03.767Z\n\ud83d\udd17 References:\n1. https://openssl-library.org/news/secadv/20250120.txt\n2. https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f\n3. https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902\n4. https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65\n5. https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467\n6. https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844\n7. https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86\n8. https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded", "creation_timestamp": "2025-04-19T00:59:50.000000Z"}, {"uuid": "23c7b915-1107-490d-b10b-0daf33302d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13569", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12809", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13569\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-04-22T06:00:02.142Z\n\ud83d\udccf Modified: 2025-04-22T06:00:02.142Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b9742440-0e36-4900-b58e-41c9854a62b2/", "creation_timestamp": "2025-04-22T07:03:23.000000Z"}, {"uuid": "0b1b823c-031e-4bb9-b123-d410d1fcc747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13866", "type": "seen", "source": "Telegram/2ihVuJD-Q4icVthQhU76SEVteELsfPqayhaeHBdyWOQ7WMIK", "content": "", "creation_timestamp": "2025-03-06T02:16:26.000000Z"}, {"uuid": "6bc7f039-5841-4943-9b1a-5e76a72ebcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1318", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12901", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1318\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: The RSS Aggregator by Feedzy \u2013 Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'feedzy_wizard_step_process' and 'import_status' functions in all versions up to, and including, 4.4.2. This makes it possible for authenticated attackers, with Contributor access and above, who are normally restricted to only being able to create posts rather than pages, to draft and publish posts with arbitrary content.\n\ud83d\udccf Published: 2024-02-20T18:56:21.078Z\n\ud83d\udccf Modified: 2025-04-22T16:25:08.275Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/181edcec-a57d-4516-935d-6777d2de77ae?source=cve\n2. https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/4.4.2/includes/admin/feedzy-rss-feeds-import.php#L1022\n3. https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/4.4.2/includes/admin/feedzy-rss-feeds-admin.php#L1053\n4. https://plugins.trac.wordpress.org/changeset/3033749/feedzy-rss-feeds/tags/4.4.3/includes/admin/feedzy-rss-feeds-admin.php?old=3030538&old_path=feedzy-rss-feeds%2Ftags%2F4.4.2%2Fincludes%2Fadmin%2Ffeedzy-rss-feeds-admin.php", "creation_timestamp": "2025-04-22T17:03:22.000000Z"}, {"uuid": "683bcfcc-6678-4280-a044-fd17c77dd2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13827", "type": "seen", "source": "Telegram/0s6N_3-WHR31A6RtZbuFLILyX8tlNgDpBS5fF4ubpGlu2MUT", "content": "", "creation_timestamp": "2025-03-06T02:16:26.000000Z"}, {"uuid": "c9b2fb93-bc8b-4172-bfbc-32dc384cbe10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13350", "type": "seen", "source": "Telegram/9RBGzh1ZzyVTi-EBGlsUJ-AQfTY6TBa5WD5T-VDTg04DPtFR", "content": "", "creation_timestamp": "2025-03-06T02:16:26.000000Z"}, {"uuid": "dad3218a-eedc-4620-bab2-c5534f4035a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13307", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13200", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13307\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'reales_delete_file', 'reales_delete_file_plans', 'reales_add_to_favourites', and 'reales_remove_from_favourites' functions in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to delete arbitrary attachments, and add or remove favorite property listings for any user.\n\ud83d\udccf Published: 2025-04-24T08:23:51.329Z\n\ud83d\udccf Modified: 2025-04-24T08:23:51.329Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cb94caa4-35a4-4aa3-8d25-263bbd58072a?source=cve\n2. https://themeforest.net/item/reales-wp-real-estate-wordpress-theme/10330568", "creation_timestamp": "2025-04-24T09:12:12.000000Z"}, {"uuid": "200cd878-bbf2-4891-9188-a28730e95c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1367", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1367\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nA command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host. \n\n\n\ud83d\udccf Published: 2024-02-14T21:35:16.767Z\n\ud83d\udccf Modified: 2025-05-02T16:26:07.235Z\n\ud83d\udd17 References:\n1. https://www.tenable.com/security/tns-2024-02", "creation_timestamp": "2025-05-02T17:16:46.000000Z"}, {"uuid": "bb115a09-fd67-4533-8198-80ff2652d1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13793", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15475", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13793\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The Wolmart | Multi-Vendor Marketplace WooCommerce Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.8.11. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-05-08T04:21:33.449Z\n\ud83d\udccf Modified: 2025-05-08T04:21:33.449Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6eb57c97-f560-42d1-87bd-b19c60700956?source=cve\n2. https://themeforest.net/item/wolmart-multivendor-marketplace-woocommerce-theme/32947681#item-description__changelog", "creation_timestamp": "2025-05-08T05:22:47.000000Z"}, {"uuid": "47bb95ab-9cd4-4798-a0ab-79d13fb031aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13944", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13944\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.\n\ud83d\udccf Published: 2025-05-09T15:18:34.124Z\n\ud83d\udccf Modified: 2025-05-09T19:09:17.086Z\n\ud83d\udd17 References:\n1. https://www.gendigital.com/us/en/contact-us/security-advisories/", "creation_timestamp": "2025-05-09T19:26:18.000000Z"}, {"uuid": "58b4e8c7-d7b9-4f7f-8835-6b603bdc23b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15583", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13009\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request\nbody. This can result in corrupted and/or inadvertent sharing of data between requests.\n\ud83d\udccf Published: 2025-05-08T17:29:31.380Z\n\ud83d\udccf Modified: 2025-05-08T17:29:31.380Z\n\ud83d\udd17 References:\n1. https://gitlab.eclipse.org/security/cve-assignement/-/issues/48\n2. https://github.com/jetty/jetty.project/security/advisories/GHSA-q4rv-gq96-w7c5", "creation_timestamp": "2025-05-08T18:24:29.000000Z"}, {"uuid": "4dfdf6ed-f777-41ab-878d-2a80319a315b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1359", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1359\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .\n\n\ud83d\udccf Published: 2024-02-13T18:52:27.176Z\n\ud83d\udccf Modified: 2025-05-09T18:17:48.415Z\n\ud83d\udd17 References:\n1. https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15\n2. https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.10\n3. https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7\n4. https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5", "creation_timestamp": "2025-05-09T18:26:22.000000Z"}, {"uuid": "24b53e25-7ed1-4e32-9c73-a683891292a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13759", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15825", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13759\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64\u00a0 allows local attackers to gain system-level privileges via arbitrary file deletion\n\ud83d\udccf Published: 2025-05-09T15:20:02.750Z\n\ud83d\udccf Modified: 2025-05-09T19:07:12.574Z\n\ud83d\udd17 References:\n1. https://www.gendigital.com/us/en/contact-us/security-advisories/)", "creation_timestamp": "2025-05-09T19:26:20.000000Z"}, {"uuid": "304bf155-67bb-4f58-8d84-05946a75866f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13959", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15830", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13959\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging the service to delete a directory\n\ud83d\udccf Published: 2025-05-09T15:20:18.308Z\n\ud83d\udccf Modified: 2025-05-09T19:02:14.584Z\n\ud83d\udd17 References:\n1. https://www.gendigital.com/us/en/contact-us/security-advisories/", "creation_timestamp": "2025-05-09T19:26:25.000000Z"}, {"uuid": "dcf3e82b-b05b-4568-b5ae-877809a962e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1374", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15806", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1374\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via\u00a0nomad templates when configuring audit log forwarding. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .\n\n\ud83d\udccf Published: 2024-02-13T18:54:18.668Z\n\ud83d\udccf Modified: 2025-05-09T18:18:30.616Z\n\ud83d\udd17 References:\n1. https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15\n2. https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.10\n3. https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7\n4. https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5", "creation_timestamp": "2025-05-09T18:26:17.000000Z"}, {"uuid": "197270db-1b0f-44e2-bc40-6bd557eff629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1372", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1372\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the  GitHub Bug Bounty program https://bounty.github.com .\n\n\ud83d\udccf Published: 2024-02-13T18:54:03.413Z\n\ud83d\udccf Modified: 2025-05-09T18:18:10.070Z\n\ud83d\udd17 References:\n1. https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15\n2. https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.10\n3. https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7\n4. https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5", "creation_timestamp": "2025-05-09T18:26:18.000000Z"}, {"uuid": "b5e82eef-64b0-4994-98bd-f31eb3bd4e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13940", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13940\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-05-14T08:22:08.413Z\n\ud83d\udccf Modified: 2025-05-14T08:22:08.413Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4cf2af62-2b5a-4c0a-9e82-f80dde204a9d?source=cve\n2. https://ninjaforms.com/extensions/webhooks/", "creation_timestamp": "2025-05-14T08:31:21.000000Z"}, {"uuid": "4cea4d94-adf6-4eb9-822a-881c2db9a8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13914", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16450", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13914\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The File Manager Advanced Shortcode WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5.6 (advanced-file-manager-pro-premium), via the 'file_manager_advanced' shortcode. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary JavaScript files on the server. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. Sites currently using 2.5.4 (file-manager-advanced-shortcode) should be updated to 2.6.0 (advanced-file-manager-pro-premium).\n\ud83d\udccf Published: 2025-05-15T05:22:57.630Z\n\ud83d\udccf Modified: 2025-05-15T05:22:57.630Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1500c72a-0621-4f97-9cab-0c9c8abeaf8f?source=cve\n2. https://advancedfilemanager.com/", "creation_timestamp": "2025-05-15T05:32:27.000000Z"}, {"uuid": "3d968787-10ec-4232-92aa-1ec0d5b774f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13484", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16508", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13484\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.\n\ud83d\udccf Published: 2025-01-28T17:54:28.701Z\n\ud83d\udccf Modified: 2025-05-15T14:26:51.752Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-13484\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2269376", "creation_timestamp": "2025-05-15T14:35:06.000000Z"}, {"uuid": "6a512777-e0a1-4199-8ab3-e0bd315162b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13427", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17487", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13427\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Page Builder: Pagelayer \u2013 Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was partially fixed in version 1.9.9 and completely fixed in version 2.0.1.\n\ud83d\udccf Published: 2025-05-24T01:41:10.473Z\n\ud83d\udccf Modified: 2025-05-24T10:11:51.407Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5df2f3cc-affc-4549-b59e-d145cce10c79?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3298138/pagelayer", "creation_timestamp": "2025-05-24T10:45:06.000000Z"}, {"uuid": "1dfbbec2-2f36-4013-93b3-970ec78a0c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1347", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17233", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1347\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker through a crafted email address may be able to bypass domain based restrictions on an instance or a group.\n\ud83d\udccf Published: 2024-04-25T11:02:25.923Z\n\ud83d\udccf Modified: 2025-05-22T04:11:09.962Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/441093\n2. https://hackerone.com/reports/2355565", "creation_timestamp": "2025-05-22T04:43:03.000000Z"}, {"uuid": "49c2e8c5-44fe-4a67-aa57-7aace21746c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13945", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17375", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13945\n\ud83d\udd25 CVSS Score: 8.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L)\n\ud83d\udd39 Description: Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data \nif administrator credentials become compromised.\n\nThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.\n\ud83d\udccf Published: 2025-05-23T09:18:18.385Z\n\ud83d\udccf Modified: 2025-05-23T09:18:18.385Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch", "creation_timestamp": "2025-05-23T09:47:55.000000Z"}, {"uuid": "423bb669-ae63-48d7-bfb8-ea6560d76a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13966", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17699", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13966\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as \"Self-Password\").\n\ud83d\udccf Published: 2025-05-27T18:35:31.706Z\n\ud83d\udccf Modified: 2025-05-27T18:35:31.706Z\n\ud83d\udd17 References:\n1. https://krashconsulting.com/fury-of-fingers-biotime-rce/\n2. https://zkteco-store.ru/wp-content/uploads/2023/09/ZKBio-CVSecurity-6.0.0-User-Manual_EN-v1.0_20230616.pdf", "creation_timestamp": "2025-05-27T18:48:54.000000Z"}, {"uuid": "f806554c-8aef-449a-88de-3fe4474c1d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17849", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13915\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Android based smartphones from vendors such as Ulefone and\u00a0Kr\u00fcger&Matz contain \"com.pri.factorytest\" application preloaded onto devices during manufacturing process.\nThe application\u00a0\"com.pri.factorytest\"\u00a0(version name: 1.0, version code: 1)\u00a0exposes a \u201dcom.pri.factorytest.emmc.FactoryResetService\u201c service allowing any application to perform a factory reset of the device.\u00a0\nApplication update did not increment the APK version. Instead, it was bundled in OS builds released later than December 2024 (Ulefone) and April 2025 (Kr\u00fcger&Matz).\n\ud83d\udccf Published: 2025-05-30T15:09:58.520Z\n\ud83d\udccf Modified: 2025-06-10T08:49:37.732Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/05/CVE-2024-13915", "creation_timestamp": "2025-06-10T09:33:04.000000Z"}, {"uuid": "dff2889c-e581-4baa-841e-e67570c09564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13917\n\ud83d\udd25 CVSS Score: 8.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An\u00a0application \"com.pri.applock\", which is pre-loaded on\u00a0Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.\nExposed \u201dcom.pri.applock.LockUI\u201c activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting\u00a0CVE-2024-13916) or ask the user to provide it.\n\nOnly version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. \nApplication update was released in April 2025.\n\ud83d\udccf Published: 2025-05-30T15:17:47.318Z\n\ud83d\udccf Modified: 2025-06-10T09:12:56.279Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/05/CVE-2024-13915", "creation_timestamp": "2025-06-10T09:33:02.000000Z"}, {"uuid": "5d3fdc0e-7896-4eca-8ef7-9c5a768e7a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13916", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13917\n\ud83d\udd25 CVSS Score: 8.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An\u00a0application \"com.pri.applock\", which is pre-loaded on\u00a0Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.\nExposed \u201dcom.pri.applock.LockUI\u201c activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting\u00a0CVE-2024-13916) or ask the user to provide it.\n\nOnly version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. \nApplication update was released in April 2025.\n\ud83d\udccf Published: 2025-05-30T15:17:47.318Z\n\ud83d\udccf Modified: 2025-06-10T09:12:56.279Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/05/CVE-2024-13915", "creation_timestamp": "2025-06-10T09:33:02.000000Z"}, {"uuid": "b583c0ba-6b08-49f7-baac-425856c9e2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13917", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13917\n\ud83d\udd25 CVSS Score: 8.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An\u00a0application \"com.pri.applock\", which is pre-loaded on\u00a0Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.\nExposed \u201dcom.pri.applock.LockUI\u201c activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting\u00a0CVE-2024-13916) or ask the user to provide it.\n\nOnly version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. \nApplication update was released in April 2025.\n\ud83d\udccf Published: 2025-05-30T15:17:47.318Z\n\ud83d\udccf Modified: 2025-06-10T09:12:56.279Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/05/CVE-2024-13915", "creation_timestamp": "2025-06-10T09:33:02.000000Z"}, {"uuid": "778d238d-6ecc-4d3d-8af6-2a0c68d71ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13967", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18581", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13967\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: This vulnerability allows the successful attacker to gain unauthorized access to a \nconfiguration web page delivered by the integrated web Server of EIBPORT.\n\nThis issue affects EIBPORT V3 KNX: through 3.9.8; EIBPORT V3 KNX GSM: through 3.9.8.\n\ud83d\udccf Published: 2025-06-04T08:01:43.117Z\n\ud83d\udccf Modified: 2025-06-17T11:46:53.508Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A1621&LanguageCode=en&DocumentPartId=pdf&Action=Launch", "creation_timestamp": "2025-06-17T13:16:05.000000Z"}, {"uuid": "d8b36f0b-21c7-4bab-8b36-9c9608ffb53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13409", "type": "seen", "source": "https://t.me/cvedetector/16270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13409 - WordPress Post Grid, Slider & Carousel Ultimate Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13409 \nPublished : Jan. 24, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : The Post Grid, Slider & Carousel Ultimate \u2013 with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' parameter of the post_type_ajax_handler() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T12:44:02.000000Z"}, {"uuid": "2cb6c6f4-1862-42e9-b09f-df069e4dd7a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13505", "type": "seen", "source": "https://t.me/cvedetector/16416", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13505 - \"WordPress Survey Maker Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13505 \nPublished : Jan. 26, 2025, 12:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018ays_sections[5][questions][8][title]\u2019 parameter in all versions up to, and including, 5.1.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T15:44:39.000000Z"}, {"uuid": "254a26bd-0093-4006-8f35-c8b8283d2c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13583", "type": "seen", "source": "https://t.me/cvedetector/16255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13583 - WordPress Simple Gallery with Filter Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13583 \nPublished : Jan. 24, 2025, 10:15 a.m. | 27\u00a0minutes ago \nDescription : The Simple Gallery with Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'c2tw_sgwf' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T11:53:35.000000Z"}, {"uuid": "e8bdb726-5ee5-4d31-a1fc-4b43babfb7bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13545", "type": "seen", "source": "https://t.me/cvedetector/16254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13545 - \"WordPress Bootstrap Ultimate Remote File Inclusion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13545 \nPublished : Jan. 24, 2025, 9:15 a.m. | 38\u00a0minutes ago \nDescription : The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.9 via the path parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. If php://filter is enabled on the server, this issue may directly lead to Remote Code Execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T11:03:25.000000Z"}, {"uuid": "83dc3c85-c51e-4365-9282-46275dc60e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13680", "type": "seen", "source": "https://t.me/cvedetector/16253", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13680 - WordPress Form Builder CP SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13680 \nPublished : Jan. 24, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The Form Builder CP plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'CP_EASY_FORM_WILL_APPEAR_HERE' shortcode in all versions up to, and including, 1.2.41 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T09:23:03.000000Z"}, {"uuid": "840b16dc-53f9-4ba7-86d2-4e2a5424e70a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13683", "type": "seen", "source": "https://t.me/cvedetector/16252", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13683 - \"Sperse.IO Automate Hub Cross-Site Request Forgery\"\", \n  \"Content\": \"CVE ID : CVE-2024-13683 \nPublished : Jan. 24, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation on the 'automate_hub' page. This makes it possible for unauthenticated attackers to update an activation status via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T09:23:03.000000Z"}, {"uuid": "08967410-7813-4b44-9053-19bc794b05be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13659", "type": "seen", "source": "https://t.me/cvedetector/16251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13659 - Listamester for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13659 \nPublished : Jan. 24, 2025, 6:15 a.m. | 20\u00a0minutes ago \nDescription : The Listamester plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T07:42:41.000000Z"}, {"uuid": "fcff435f-793e-4433-8d3d-388213533b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "https://t.me/cvedetector/18176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13834 - WordPress Responsive Plus - Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13834 \nPublished : Feb. 15, 2025, 3:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : The Responsive Plus \u2013 Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.4 via the 'remote_request' function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T18:32:43.000000Z"}, {"uuid": "92137d5a-43ca-4b54-9541-6e361f08853d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13825", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13825\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Email Keep WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-03-08T06:00:05.198Z\n\ud83d\udccf Modified: 2025-03-08T06:00:05.198Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/368474a0-550d-49f8-855d-b2010f8b91b5/", "creation_timestamp": "2025-03-08T06:35:47.000000Z"}, {"uuid": "ac94203a-9e64-44f6-b6c1-c34e8db7f57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13608", "type": "seen", "source": "https://t.me/cvedetector/18231", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13608 - WordPress Track Logins SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13608 \nPublished : Feb. 17, 2025, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The Track Logins WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T08:10:59.000000Z"}, {"uuid": "f39cb1ac-4048-4afb-b791-983e2ef86bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13603", "type": "seen", "source": "https://t.me/cvedetector/18230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13603 - WordPress Wise Forms Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13603 \nPublished : Feb. 17, 2025, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T08:10:55.000000Z"}, {"uuid": "ca4ee65f-fb0a-4c9b-bbb1-47de27ad08a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13726", "type": "seen", "source": "https://t.me/cvedetector/18229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13726 - \"WordPress Coder Plugin SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13726 \nPublished : Feb. 17, 2025, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The  Coder  WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T08:10:55.000000Z"}, {"uuid": "241e3480-8324-4c9c-9053-8e93c81e9c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13627", "type": "seen", "source": "https://t.me/cvedetector/18228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13627 - \"OWL Carousel Slider WordPress Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13627 \nPublished : Feb. 17, 2025, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T08:10:54.000000Z"}, {"uuid": "61206d15-50dc-4145-b107-dbe8ef668fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13890", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6915", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13890\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access and above, to inject PHP code into posts and pages.\n\ud83d\udccf Published: 2025-03-08T02:24:03.309Z\n\ud83d\udccf Modified: 2025-03-08T02:24:03.309Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/412c39e9-9378-4c2c-817c-8d37f156af6e?source=cve\n2. https://plugins.trac.wordpress.org/browser/allow-php-execute/trunk/allow-php-execute.php#L10", "creation_timestamp": "2025-03-08T02:35:25.000000Z"}, {"uuid": "756c584e-3591-4854-acb4-7cdcd6419973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13497", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7661", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13497\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WordPress form builder plugin for contact forms, surveys and quizzes \u2013 Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via attachment uploads in all versions up to, and including, 8.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file.\n\ud83d\udccf Published: 2025-03-15T04:22:08.315Z\n\ud83d\udccf Modified: 2025-03-15T04:22:08.315Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fbbe006c-1afc-4c8b-a9f3-ffb21cdabb54?source=cve\n2. https://plugins.trac.wordpress.org/browser/tripetto/trunk/lib/attachments.php#L46\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3251202%40tripetto%2Ftrunk&old=3231968%40tripetto%2Ftrunk&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-15T04:45:11.000000Z"}, {"uuid": "d2789675-bcb7-4bd8-8916-dc4e78f27d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1394", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-05-12T23:02:02.486Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "creation_timestamp": "2025-05-12T23:29:31.000000Z"}, {"uuid": "b2c4de74-5954-42a6-9337-54f375366541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "https://t.me/cvedetector/18172", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13488 - Estes LTL Freight Quotes WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13488 \nPublished : Feb. 15, 2025, 12:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T15:12:01.000000Z"}, {"uuid": "bd1f00b7-594a-4171-8469-3160ff80dc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "https://t.me/cvedetector/18171", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13439 - WordPress Team Members Showcase Plugin Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13439 \nPublished : Feb. 15, 2025, 12:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The Team \u2013 Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response() function in all versions up to, and including, 4.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T15:12:00.000000Z"}, {"uuid": "31cb931b-c439-4fe7-887b-ace7190b3f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "https://t.me/cvedetector/18173", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13500 - WordPress WP Project Manager SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13500 \nPublished : Feb. 15, 2025, 12:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The WP Project Manager \u2013 Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018orderby\u2019 parameter in all versions up to, and including, 2.6.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T15:12:01.000000Z"}, {"uuid": "93f418b9-39f8-47e2-be96-b44550f8f6f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13563", "type": "seen", "source": "https://t.me/cvedetector/18169", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13563 - WordPress Front End Users Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13563 \nPublished : Feb. 15, 2025, 9:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's forgot-password shortcode in all versions up to, and including, 3.2.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T12:41:30.000000Z"}, {"uuid": "eda3d452-956e-4085-b36c-23d174ee645a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13796", "type": "seen", "source": "Telegram/JdTF9cA6lYGjgIkRZtMnYlzNIqYTWwqEqOEw8Ue95B_dwXRz", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "bd7f0312-85f7-4cec-8027-117bfc5623e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "https://t.me/cvedetector/18164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13752 - WordPress Project Manager Unauthenticated Data Disclosure and Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13752 \nPublished : Feb. 15, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The WP Project Manager \u2013 Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the '/pm/v2/settings/notice' endpoint all versions up to, and including, 2.6.17. This makes it possible for authenticated attackers, with Subscriber-level access and above, to cause a persistent denial of service condition. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T12:41:23.000000Z"}, {"uuid": "af369c16-271a-4567-bed4-22bd6720c9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "https://t.me/cvedetector/18162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13513 - Oliver POS - WooCommerce Point of Sale WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13513 \nPublished : Feb. 15, 2025, 8:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Oliver POS \u2013 A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.2.3 via the logging functionality. This makes it possible for unauthenticated attackers to extract sensitive data including the plugin's clientToken, which in turn can be used to change user account information including emails and account type. This allows attackers to then change account passwords resulting in a complete site takeover. Version 2.4.2.3 disabled logging but left sites with existing log files vulnerable. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T11:00:59.000000Z"}, {"uuid": "553416d6-d010-424f-8fb9-5daf34d92dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13208", "type": "seen", "source": "https://t.me/cvedetector/18160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13208 - Google Maps for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13208 \nPublished : Feb. 15, 2025, 6:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : The Maps Plugin using Google Maps for WordPress  WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T08:30:32.000000Z"}, {"uuid": "478b2ec6-f11a-4b9c-b0db-9b5d64856d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13306", "type": "seen", "source": "https://t.me/cvedetector/18159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13306 - Google Maps for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13306 \nPublished : Feb. 15, 2025, 6:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : The Maps Plugin using Google Maps for WordPress  WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T08:30:32.000000Z"}, {"uuid": "33f12a7d-36b5-40dd-9d99-2c2e114c1bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13791", "type": "seen", "source": "https://t.me/cvedetector/18083", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13791 - Bit Assist WordPress Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-13791 \nPublished : Feb. 14, 2025, 11:15 a.m. | 51\u00a0minutes ago \nDescription : Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the downloadResponseFile() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T13:14:59.000000Z"}, {"uuid": "07cc2072-fed4-4202-90a7-40808ca564d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "https://t.me/cvedetector/17975", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13227 - Rank Math Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13227 \nPublished : Feb. 13, 2025, 5:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : The Rank Math SEO \u2013 AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:48:02.000000Z"}, {"uuid": "24b80f66-9ba3-402d-9289-43e042e662c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13735", "type": "seen", "source": "https://t.me/cvedetector/18084", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13735 - HurryTimer WordPress & WooCommerce Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13735 \nPublished : Feb. 14, 2025, 10:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : The HurryTimer \u2013 An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping of a campaign name. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T13:14:59.000000Z"}, {"uuid": "a3b01589-3397-4948-915b-c42477e42341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "https://t.me/cvedetector/17992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13639 - WordPress Read More & Accordion Plugin Unauthorized Data Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13639 \nPublished : Feb. 13, 2025, 9:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary 'read more' posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T12:58:57.000000Z"}, {"uuid": "05346154-f3fb-4f2f-aec0-0c60f3f77969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "seen", "source": "https://t.me/cvedetector/18077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13641 - WooCommerce Return Management System Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13641 \nPublished : Feb. 14, 2025, 6:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The Return Refund and Exchange For WooCommerce \u2013 Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/attachment directory which can contain file attachments for order refunds. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T09:04:07.000000Z"}, {"uuid": "106bcee6-da4c-4dd7-bce3-7a69e830e18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "https://t.me/cvedetector/18076", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13493 - Sensly Online Presence Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13493 \nPublished : Feb. 14, 2025, 6:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The Sensly Online Presence WordPress plugin through 0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T09:04:06.000000Z"}, {"uuid": "b1015ab8-cc76-4687-bdd7-7e3c5fc62753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "https://t.me/cvedetector/18074", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13692 - WooCommerce Return Refund and Exchange Plugin Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13692 \nPublished : Feb. 14, 2025, 6:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The Return Refund and Exchange For WooCommerce \u2013 Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.4.5 via several functions due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to overwrite linked refund image attachments, overwrite refund request message, overwrite order messages, and read order messages of other users. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T09:04:01.000000Z"}, {"uuid": "c9df6ac3-09fa-4866-af1a-8a200666d68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13095", "type": "seen", "source": "https://t.me/cvedetector/16437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13095 - WordPress Triggers Lite SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13095 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:17.000000Z"}, {"uuid": "f95df2bf-9188-48c5-b2a5-27ddfa3a439b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13056", "type": "seen", "source": "https://t.me/cvedetector/16434", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13056 - Dyn Business Panel WordPress Plugin Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13056 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:11.000000Z"}, {"uuid": "5d94507c-3ebf-4dd8-9381-e31f8779332a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13055", "type": "seen", "source": "https://t.me/cvedetector/16433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13055 - Dyn Business Panel WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13055 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:11.000000Z"}, {"uuid": "cdf431ee-0e94-4250-ae5d-29f182db30e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "https://t.me/cvedetector/17996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13182 - WordPress Directorybox Manager Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13182 \nPublished : Feb. 13, 2025, 1:15 p.m. | 19\u00a0minutes ago \nDescription : The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_parse_request' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T14:39:09.000000Z"}, {"uuid": "4dd5a486-c01a-4a67-b615-be7ac7f19905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "https://t.me/cvedetector/17989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13606 - WordPress JS Help Desk Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13606 \nPublished : Feb. 13, 2025, 10:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : The JS Help Desk \u2013 The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/jssupportticketdata directory which can contain file attachments included in support tickets. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T12:58:55.000000Z"}, {"uuid": "6fbb280a-33ec-449c-a647-309451fa62ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "https://t.me/cvedetector/17988", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13867 - Listivo WordPress Theme - Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13867 \nPublished : Feb. 13, 2025, 10:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : The Listivo - Classified Ads WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 2.3.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T12:58:54.000000Z"}, {"uuid": "da5bd1f0-55a5-4ed0-af02-9fc2358137cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "https://t.me/cvedetector/17987", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13345 - Avada Builder WordPress Arbitrary Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13345 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:37.000000Z"}, {"uuid": "f92f1851-a21b-4974-acd4-0b0bbdf7bbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "https://t.me/cvedetector/17985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13346 - Avada WordPress Website Builder Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13346 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:36.000000Z"}, {"uuid": "4462133b-9f72-4b8e-b446-325fffd63648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13814", "type": "seen", "source": "https://t.me/cvedetector/17851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13814 - The Global Gallery WordPress Responsive Gallery Plugin Arbitrary Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13814 \nPublished : Feb. 12, 2025, 9:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:57.000000Z"}, {"uuid": "f8d3020f-d9b9-429c-81d4-89aaf0d6c072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13605", "type": "seen", "source": "Telegram/HwnCGkSNlXsVr3lghcHzWmwY3og78-JzDVpRsqnTZvKnj-GB", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "1709eb31-22c7-40c9-b8f0-649be43cdf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "https://t.me/cvedetector/17976", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13229 - Rank Math SEO Unauthorized Data Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13229 \nPublished : Feb. 13, 2025, 5:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : The Rank Math SEO \u2013 AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the update_metadata() function in all versions up to, and including, 1.0.235. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete any schema metadata assigned to any post. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:48:02.000000Z"}, {"uuid": "db46649f-689b-4a2a-931e-3f5f540cdb8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "Telegram/t0XrKhc1kiVejZaDwdDtjo7jIIsYmbiN6sM7WK6vqjUaGJDE", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "705e7ce9-c85c-413e-b95d-4d44e0b04986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "https://t.me/cvedetector/17974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13770 - \"WP Magazine / Review with Store PHP Object Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13770 \nPublished : Feb. 13, 2025, 5:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'view_more_posts' AJAX action. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. The developer opted to remove the software from the repository, so an update is not available and it is recommended to find a replacement software. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:48:01.000000Z"}, {"uuid": "0434b6d4-3a3a-4ea0-af87-1e827378783b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "https://t.me/cvedetector/17971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13120 - WordPress Paid Membership Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13120 \nPublished : Feb. 13, 2025, 6:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content  WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:47:55.000000Z"}, {"uuid": "11108d22-643a-4927-bd58-b655ea2eaa93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13119", "type": "seen", "source": "https://t.me/cvedetector/17970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13119 - WordPress Paid Membership Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13119 \nPublished : Feb. 13, 2025, 6:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content  WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:47:54.000000Z"}, {"uuid": "5bd17c9d-1366-44c4-a6f2-ae4c64d5b869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "https://t.me/cvedetector/17965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13125 - Everest Forms Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13125 \nPublished : Feb. 13, 2025, 6:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The Everest Forms  WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:47:50.000000Z"}, {"uuid": "308f70e1-2b16-4ad7-8553-790398438b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "https://t.me/cvedetector/17964", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13121 - WordPress Paid Membership Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13121 \nPublished : Feb. 13, 2025, 6:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content  WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:47:49.000000Z"}, {"uuid": "e66cef16-07f7-45f8-a6a8-f66a8682e68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "Telegram/mC9OTeGGRXoeWZlfY_A8lY75W2D5z3n-Ti7l8_6buIw1X-Kf", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "50ae4c4e-4121-468f-bcbe-7efa51eb1c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13394", "type": "seen", "source": "https://t.me/cvedetector/15408", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13394 - ViewMedica WordPress Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-13394 \nPublished : Jan. 15, 2025, 6:15 a.m. | 43\u00a0minutes ago \nDescription : The ViewMedica 9 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'viewmedica' shortcode in all versions up to, and including, 1.4.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T08:25:04.000000Z"}, {"uuid": "63bbb9bb-c0b4-464e-b45d-b840c88511d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13644", "type": "seen", "source": "https://t.me/cvedetector/17956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13644 - Elementor DethemeKit Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13644 \nPublished : Feb. 13, 2025, 2:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's De Gallery widget in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T04:36:55.000000Z"}, {"uuid": "5e7f6269-fc3f-47f4-ac77-685959948e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "Telegram/2DEtsJwuz9F6K8ZqQ1-7qkpu6ceUAHyx0J6wRgc2mL0W7Dzj", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "6dd6c121-8aa7-4f93-9c39-24000fc5a010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://t.me/cybersecplayground/13", "content": "CVE-2024-12912&CVE-2024-13062 \n:Injection and execution vulnerabilities in certain ASUS router firmware series.\n\ud83d\udcca 1.2m+ Services are found on hunter.how yearly.\n\ud83d\udd17Hunter Link: hunter.how/list?searchVal\u2026\n\ud83d\udc47Query\nHUNTER :/product.name=\"ASUS AiCloud\"\nFOFA : product=\"ASUS-AiCloud\"\nSHODAN : product:\"ASUS AiCloud\"\n\ud83d\udcf0Refer:securityonline.info/cve-2024-12912\u2026\nasus.com/content/asus-p\u2026\n#ASUS #hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-07-19T19:48:50.000000Z"}, {"uuid": "269c9147-dc5d-4d20-b852-cb37ad76caa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://t.me/CyberBulletin/1930", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-03T06:34:25.000000Z"}, {"uuid": "137d21d7-287c-491f-8f5f-cc2542376213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "seen", "source": "https://t.me/DarkWebInformer_News/1789", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2024-13871, CVE-2024-13872: Unauthenticated Command Injection in Bitdefender BOX v1 and Insecure Update Mechanism Vulnerability in libboxhermes.so in Bitdefender BOX v1\nLink: https://darkwebinformer.com/cve-2024-13871-cve-2024-13872-unauthenticated-command-injection-in-bitdefender-box-v1-and-insecure-update-mechanism-vulnerability-in-libboxhermes-so-in-bitdefender-box-v1/", "creation_timestamp": "2025-03-12T16:15:20.000000Z"}, {"uuid": "1a554b86-f788-463c-a5b8-bcb6dd698eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13871", "type": "seen", "source": "https://t.me/DarkWebInformer_News/1789", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2024-13871, CVE-2024-13872: Unauthenticated Command Injection in Bitdefender BOX v1 and Insecure Update Mechanism Vulnerability in libboxhermes.so in Bitdefender BOX v1\nLink: https://darkwebinformer.com/cve-2024-13871-cve-2024-13872-unauthenticated-command-injection-in-bitdefender-box-v1-and-insecure-update-mechanism-vulnerability-in-libboxhermes-so-in-bitdefender-box-v1/", "creation_timestamp": "2025-03-12T16:15:20.000000Z"}, {"uuid": "c2a15eba-7f4f-47a6-b338-fa5ec545ffe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13219", "type": "seen", "source": "https://t.me/cvedetector/16899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13219 - \"Privacy Policy Genius WordPress Plugin Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13219 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:05.000000Z"}, {"uuid": "c090cd28-4072-4eba-a95a-1ea2dc4a4289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13216", "type": "seen", "source": "https://t.me/cvedetector/16898", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13216 - WordPress Elementor HT Event Manager Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13216 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The HT Event \u2013 WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via the 'render' function in /includes/widgets/htevent_sponsor.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:04.000000Z"}, {"uuid": "603300b6-e0f2-463f-b092-15a3d4612a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13218", "type": "seen", "source": "https://t.me/cvedetector/16897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13218 - Fast Tube WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13218 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Fast Tube WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:03.000000Z"}, {"uuid": "0706157f-e754-4002-9250-4fc6dbb7cdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "Telegram/sDf-5Rsi3rlakJ0rcpb3cBRsqYmOkZqUPuiIHF12RZDYVcrn", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "057d0620-4231-4bd7-99cc-5b1da091fe33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13623", "type": "seen", "source": "https://t.me/cvedetector/16886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13623 - WooCommerce Order Export Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13623 \nPublished : Jan. 31, 2025, 7:15 a.m. | 29\u00a0minutes ago \nDescription : The Order Export for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.24 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain exported order information. The plugin is only vulnerable when 'Order data storage' is set to 'WordPress posts storage (legacy)', and cannot be exploited when the default option of 'High-performance order storage' is enabled. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:48.000000Z"}, {"uuid": "a4c27f23-e66c-4f11-8667-c320892878dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13480", "type": "seen", "source": "https://t.me/cvedetector/17861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13480 - FedEx Freight WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13480 \nPublished : Feb. 12, 2025, 12:15 p.m. | 38\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T14:22:21.000000Z"}, {"uuid": "15e520cf-8631-4b00-a8d5-cc62eeaf9372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13477", "type": "seen", "source": "https://t.me/cvedetector/17860", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13477 - Unishippers LTL Freight Quotes WordPress Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13477 \nPublished : Feb. 12, 2025, 12:15 p.m. | 38\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T14:22:21.000000Z"}, {"uuid": "540cd862-1adc-4959-adca-ec2f457a7616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/35", "content": "Ivanti Endpoint Manager \u2013 Multiple Credential Coercion Vulnerabilities\n\nProof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks.\n\nPOC: https://github.com/horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities", "creation_timestamp": "2025-02-19T14:47:33.000000Z"}, {"uuid": "860b6fc6-6a8e-4542-958a-803f8c0efbd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/480", "content": "#cve #poc #exploit\n\nCVE-2024-1346: MySQL Weak Password\ud83d\udda5\n\n\u0421\u043b\u0430\u0431\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u043a\u043e\u0440\u043d\u044f \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 MySQL \u0432 LaborOfficeFree \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 19.10. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 MySQL, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 LaborOfficeFree, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 \u043a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u044b\n\nGitHub", "creation_timestamp": "2024-02-28T09:20:34.000000Z"}, {"uuid": "9cca05ca-c582-4ee1-af47-7ae6a80acb25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13973", "type": "seen", "source": "https://t.me/true_secator/7266", "content": "Sophos \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-6704 (CVSS 9,8) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Secure PDF eXchange (SPX) \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c RCE.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c Sophos, \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u044f\u0432\u0438\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f SPX \u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA).\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2025-7624 (CVSS 9,8) - \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 SMTP \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f \u043a RCE, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u043a\u0430\u0440\u0430\u043d\u0442\u0438\u043d\u0430, \u0430 SFOS \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u0440\u0448\u0435 21.0 GA.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sophos, \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u043d\u0435\u0435 1% \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebAdmin \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2025-7382 (CVSS 8,8), \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f OTP \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sophos \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 19.0 MR2 (19.0.2.472), 20.0 MR2 (20.0.2.378), 20.0 MR3 (20.0.3.427), 21.0 GA (21.0.0.169), 21.0 MR1 (21.0.1.237), 21.0 MR1-1 (21.0.1.272), 21.0 MR1-2 (21.0.1.277) \u0438 21.5 GA (21.5.0.171).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e 21.0 MR2 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Sophos, CVE-2024-13974 \u0438 CVE-2024-13973, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b Up2Date \u0438 WebAdmin \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0414\u043b\u044f \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c DNS-\u0441\u0440\u0435\u0434\u0443 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e Sophos Firewall 21.0 MR1.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\nSophos \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2025-07-24T19:04:17.000000Z"}, {"uuid": "c7a7ee10-245f-4984-8527-59064ddd1e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13974", "type": "seen", "source": "https://t.me/true_secator/7266", "content": "Sophos \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-6704 (CVSS 9,8) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Secure PDF eXchange (SPX) \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c RCE.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c Sophos, \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u044f\u0432\u0438\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f SPX \u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA).\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2025-7624 (CVSS 9,8) - \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 SMTP \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f \u043a RCE, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u043a\u0430\u0440\u0430\u043d\u0442\u0438\u043d\u0430, \u0430 SFOS \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u0440\u0448\u0435 21.0 GA.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sophos, \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u043d\u0435\u0435 1% \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebAdmin \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2025-7382 (CVSS 8,8), \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f OTP \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sophos \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 19.0 MR2 (19.0.2.472), 20.0 MR2 (20.0.2.378), 20.0 MR3 (20.0.3.427), 21.0 GA (21.0.0.169), 21.0 MR1 (21.0.1.237), 21.0 MR1-1 (21.0.1.272), 21.0 MR1-2 (21.0.1.277) \u0438 21.5 GA (21.5.0.171).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e 21.0 MR2 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Sophos, CVE-2024-13974 \u0438 CVE-2024-13973, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b Up2Date \u0438 WebAdmin \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0414\u043b\u044f \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c DNS-\u0441\u0440\u0435\u0434\u0443 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e Sophos Firewall 21.0 MR1.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\nSophos \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2025-07-24T19:04:17.000000Z"}, {"uuid": "3df23d47-17e2-4205-978c-84bdbd6ba2b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13532", "type": "seen", "source": "https://t.me/cvedetector/17854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13532 - Purolator WordPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13532 \nPublished : Feb. 12, 2025, 12:15 p.m. | 38\u00a0minutes ago \nDescription : The Small Package Quotes \u2013 Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T14:22:12.000000Z"}, {"uuid": "9e2dc556-c80e-4c41-bcaf-b3858ec08c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13435", "type": "seen", "source": "https://t.me/cvedetector/17848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13435 - \"WordPress Ebook Downloader SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-13435 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:52.000000Z"}, {"uuid": "b5e28107-c08e-4bfb-b935-bbbd2b7cb448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13437", "type": "seen", "source": "https://t.me/cvedetector/17846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13437 - WordPress Book a Room CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13437 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Book a Room plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9. This is due to missing or incorrect nonce validation on the 'bookaroom_Settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:51.000000Z"}, {"uuid": "62182069-826d-402c-b411-da299b2d3d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://t.me/cvedetector/17845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13365 - \"CleanTalk Plugin for WordPress Arbitrary File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13365 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through the checkUploadedArchive() function  in all versions up to, and including, 2.149. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:50.000000Z"}, {"uuid": "32d06c9a-9d5f-4e9e-9cd9-527b39a26afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13490", "type": "seen", "source": "https://t.me/cvedetector/17844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13490 - XPO WordPress LTL Freight Quotes SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13490 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:49.000000Z"}, {"uuid": "deee508e-9f76-459c-a30a-7b201b27f913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13475", "type": "seen", "source": "https://t.me/cvedetector/17843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13475 - \"UPS WordPress Plugin SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13475 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Small Package Quotes \u2013 UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:45.000000Z"}, {"uuid": "502773f8-7152-4f74-a5d1-5ede2fd9d6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13473", "type": "seen", "source": "https://t.me/cvedetector/17842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13473 - WordPress LTL Freight Quotes - Worldwide Express Edition SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13473 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The LTL Freight Quotes \u2013 Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:45.000000Z"}, {"uuid": "462c0faa-0d1b-4875-a9cd-9c3c6b672f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13459", "type": "seen", "source": "https://t.me/cvedetector/17841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13459 - WordPress FuseDesk Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13459 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusedesk_newcase' shortcode in all versions up to, and including, 6.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:44.000000Z"}, {"uuid": "94f345fb-8af8-4e1f-8fe8-d42299ee6249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13456", "type": "seen", "source": "https://t.me/cvedetector/17840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13456 - WordPress Easy Quiz Maker Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13456 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Easy Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wqt-question' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:43.000000Z"}, {"uuid": "4da79cc9-26d6-4eb9-ab55-3b896a657647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13531", "type": "seen", "source": "https://t.me/cvedetector/17839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13531 - ShipEngine WordPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13531 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:42.000000Z"}, {"uuid": "ead8ef04-e4d9-49f1-b7c4-178993f19db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13528", "type": "seen", "source": "https://t.me/cvedetector/17838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13528 - WooCommerce WordPress Customer Email Verification Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13528 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The 'Fine tune placement' option must be enabled in the plugin settings in order to exploit the vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:39.000000Z"}, {"uuid": "45b0860f-cc89-4352-ba26-42ddd3177672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13821", "type": "seen", "source": "https://t.me/cvedetector/17830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13821 - WordPress WP Booking Calendar Unauthenticated Post-Confirmation Booking Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-13821 \nPublished : Feb. 12, 2025, 8:15 a.m. | 28\u00a0minutes ago \nDescription : The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and including, 10.10. This is due to the plugin not properly requiring re-verification after a booking has been made and a change is being attempted. This makes it possible for unauthenticated attackers to manipulate their confirmed bookings, even after they have been approved. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T10:10:58.000000Z"}, {"uuid": "15046c6b-4d11-4c2f-8bb3-2bee8a5c8f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13794", "type": "seen", "source": "https://t.me/cvedetector/17829", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13794 - Hide My WP Ghost WordPress Plugin Login Page Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13794 \nPublished : Feb. 12, 2025, 8:15 a.m. | 28\u00a0minutes ago \nDescription : The WP Ghost (Hide My WP Ghost) \u2013 Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possible for unauthenticated attackers to discover the hidden login page location. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T10:10:57.000000Z"}, {"uuid": "0ea67995-565c-407b-9d0a-ac138a9d9d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13472", "type": "seen", "source": "https://t.me/cvedetector/16930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13472 - WooCommerce Product Table Lite Plugin Arbitrary Shortcode Execution and Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13472 \nPublished : Jan. 31, 2025, 10:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.9.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. The same 'sc_attrs' parameter is vulnerable to Reflected Cross-Site Scripting as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:05.000000Z"}, {"uuid": "66c2a74a-4192-419b-b56d-7c89a08277d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13662", "type": "seen", "source": "https://t.me/cvedetector/16928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13662 - eHive Objects Image Grid WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13662 \nPublished : Jan. 31, 2025, 11:15 a.m. | 33\u00a0minutes ago \nDescription : The eHive Objects Image Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ehive_objects_image_grid' shortcode in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:04.000000Z"}, {"uuid": "d58735a8-5dbf-47d2-9e95-1fc7c2f4027b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13424", "type": "seen", "source": "https://t.me/cvedetector/16891", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13424 - Ni Sales Commission For WooCommerce Unauthenticated AJAX Endpoint Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13424 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'niwoosc_ajax' AJAX endpoint in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings and modify commission amounts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:56.000000Z"}, {"uuid": "e9a455b4-b324-40b0-b37b-7490712f899e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13112", "type": "seen", "source": "https://t.me/cvedetector/16896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13112 - WordPress MediaTagger Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13112 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:02.000000Z"}, {"uuid": "c3a053c9-d0e0-442c-ae90-23c7783bb1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13224", "type": "seen", "source": "https://t.me/cvedetector/16895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13224 - \"SlideDeck 1 Lite Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13224 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The SlideDeck 1 Lite Content Slider WordPress plugin through 1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:59.000000Z"}, {"uuid": "27d92374-cecf-4c8b-9e9d-22ebb2bde5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13717", "type": "seen", "source": "https://t.me/cvedetector/16893", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13717 - \"vcita WordPress Plugin Unauthorized Data Modification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13717 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae and vcita_ajax_toggle_contact functions in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to enabled and disable widgets. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:57.000000Z"}, {"uuid": "fa622d48-b592-4101-85bf-cec925f8a2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13221", "type": "seen", "source": "https://t.me/cvedetector/16904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13221 - ElasticSearch WordPress Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13221 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:12.000000Z"}, {"uuid": "7fcd370f-d636-46f8-8dbe-30b5d5eb3411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13223", "type": "seen", "source": "https://t.me/cvedetector/16903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13223 - Tabulate WordPress Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13223 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Tabulate WordPress plugin through 2.10.3 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:11.000000Z"}, {"uuid": "440693af-116f-4cde-9981-70905103b67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13222", "type": "seen", "source": "https://t.me/cvedetector/16902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13222 - \"Vulnerability: WordPress User Messages Plugin Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13222 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:10.000000Z"}, {"uuid": "18f4a916-5bab-4b06-8085-8a813a78b171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13101", "type": "seen", "source": "https://t.me/cvedetector/16901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13101 - \"WordPress MediaTagger Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13101 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:09.000000Z"}, {"uuid": "bf37c619-3072-4cfe-a7d2-f92ab9f03783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13220", "type": "seen", "source": "https://t.me/cvedetector/16900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13220 - \"WordPress Google Map Professional Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13220 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The WordPress Google Map Professional (Map In Your Language) WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:31:06.000000Z"}, {"uuid": "0982f21f-c581-4443-8f82-9a72dfc7bc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13822", "type": "seen", "source": "Telegram/8ZTpBmM0ZqnKyI1VaLHjSd2Hd2BgmU5Ibahg0Stx23_MFP_1", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "6294000c-36f8-4e53-b828-00b5af53cd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13605", "type": "seen", "source": "Telegram/3BnO7iSkhnlYlrP3cdNHDbna6QcH_2rd8rr1KfNDVNZPSGDg", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "a5eeb51b-885f-4a23-88cd-fa41b4592826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13504", "type": "seen", "source": "https://t.me/cvedetector/16892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13504 - WordPress Shared Files Frontend Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13504 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Shared Files \u2013 Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the dfxp file. This issue affects only Apache-based environments, where dfxp files are handled by default. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:57.000000Z"}, {"uuid": "621dbff1-4973-46a8-a780-ca7c9cea0e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13415", "type": "seen", "source": "https://t.me/cvedetector/16890", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13415 - WooCommerce Food Menu Authorized Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13415 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The Food Menu \u2013 Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response() function in all versions up to, and including, 5.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:52.000000Z"}, {"uuid": "77e7c028-6ea5-4917-92a6-8a886bf6ded9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13226", "type": "seen", "source": "https://t.me/cvedetector/16889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13226 - WordPress A5 Custom Login Page Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13226 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The A5 Custom Login Page WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:51.000000Z"}, {"uuid": "4823761e-5277-425c-81a2-6dede28ddc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13225", "type": "seen", "source": "https://t.me/cvedetector/16888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13225 - \"ECT Home Page Products Reflected Cross-Site Scripting Vulnerability in WordPress\"\", \n  \"Content\": \"CVE ID : CVE-2024-13225 \nPublished : Jan. 31, 2025, 6:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T09:30:51.000000Z"}, {"uuid": "5162a7ac-8433-4fe1-aeb0-39d65ea35d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13399", "type": "seen", "source": "https://t.me/cvedetector/16884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13399 - Gosign WordPress Posts Slider Block Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13399 \nPublished : Jan. 31, 2025, 3:15 a.m. | 2\u00a0hours, 24\u00a0minutes ago \nDescription : The Gosign \u2013 Posts Slider Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'posts-slider-block' block in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:27.000000Z"}, {"uuid": "44c890d5-527e-42b2-9c3d-d93882f6048a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13396", "type": "seen", "source": "https://t.me/cvedetector/16885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13396 - WordPress Frictionless Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13396 \nPublished : Jan. 31, 2025, 3:15 a.m. | 2\u00a0hours, 24\u00a0minutes ago \nDescription : The Frictionless plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'frictionless_form' shortcode[s] in all versions up to, and including, 0.0.23 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:27.000000Z"}, {"uuid": "11af8dfa-d1cf-48b1-8238-6cd2009a65de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13397", "type": "seen", "source": "https://t.me/cvedetector/16883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13397 - WordPress Radio Streaming Plugin - Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13397 \nPublished : Jan. 31, 2025, 3:15 a.m. | 2\u00a0hours, 24\u00a0minutes ago \nDescription : The WPRadio \u2013 WordPress Radio Streaming Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpradio_player' shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:26.000000Z"}, {"uuid": "d5d44392-64d2-4b9a-b512-efe374616bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13767", "type": "seen", "source": "https://t.me/cvedetector/16881", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13767 - \"Live2DWebCanvas WordPress Remote File Deletion\"\", \n  \"Content\": \"CVE ID : CVE-2024-13767 \nPublished : Jan. 31, 2025, 3:15 a.m. | 2\u00a0hours, 24\u00a0minutes ago \nDescription : The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:24.000000Z"}, {"uuid": "27816c8f-932e-4356-8da4-ccd74cb26fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13463", "type": "seen", "source": "https://t.me/cvedetector/16879", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13463 - WordPress SeatReg Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13463 \nPublished : Jan. 31, 2025, 4:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : The SeatReg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'seatreg' shortcode in all versions up to, and including, 1.56.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:20.000000Z"}, {"uuid": "ebda3100-f78d-4eca-ac1f-0f5b293e3213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13707", "type": "seen", "source": "https://t.me/cvedetector/16772", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13707 - WordPress WP Image Uploader CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13707 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The WP Image Uploader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the gky_image_uploader_main_function() function. This makes it possible for unauthenticated attackers to delete arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:21.000000Z"}, {"uuid": "2f51edf2-6d50-4a42-9de2-697c750d5668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13596", "type": "seen", "source": "https://t.me/cvedetector/16784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13596 - WordPress Survey & Poll Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13596 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The WordPress Survey & Poll \u2013 Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'survey' shortcode in all versions up to, and including, 1.7.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:36.000000Z"}, {"uuid": "5476a41c-2dc6-4bd0-8775-ce8cedc34933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13549", "type": "seen", "source": "https://t.me/cvedetector/16783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13549 - WordPress Bootstrap Blocks Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13549 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The All Bootstrap Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \"Accordion\" widget in all versions up to, and including, 1.3.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:35.000000Z"}, {"uuid": "0bdfdd42-4f0f-461f-87ee-ab92aa119274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13512", "type": "seen", "source": "https://t.me/cvedetector/16782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13512 - WordPress FontAwesome Cross-Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2024-13512 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Wonder FontAwesome plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:35.000000Z"}, {"uuid": "d5b13754-4e23-42a4-9e4d-38b29ad8972f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13700", "type": "seen", "source": "https://t.me/cvedetector/16781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13700 - \"WordPress Embed Swagger UI Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13700 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Embed Swagger UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsgui' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:34.000000Z"}, {"uuid": "dd300ada-af57-47d0-a5dd-60107a47a82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13671", "type": "seen", "source": "https://t.me/cvedetector/16780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13671 - \"WordPress Music Sheet Viewer Arbitrary File Read Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13671 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.1 via the read_score_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:33.000000Z"}, {"uuid": "87904cb6-83b9-4804-a560-46a304867bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13457", "type": "seen", "source": "https://t.me/cvedetector/16747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13457 - WordPress Event Tickets and Registration Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13457 \nPublished : Jan. 30, 2025, 7:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.18.1 via the tc-order-id parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view order details of orders they did not place, which includes ticket prices, user emails and order date. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T10:05:00.000000Z"}, {"uuid": "c62d648a-3bf6-41d2-99e6-8a7994e67e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13370", "type": "seen", "source": "https://t.me/cvedetector/16374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13370 - Youzify \u2013 BuddyPress Unauthenticated License Key Option Update Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13370 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the save_addon_key_license() function in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options to a value of a valid license key. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:52.000000Z"}, {"uuid": "0b4a5679-766f-4b65-8c3c-c4960bee8e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13642", "type": "seen", "source": "https://t.me/cvedetector/16746", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13642 - \"Stratum Elementor Widgets Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13642 \nPublished : Jan. 30, 2025, 7:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : The Stratum \u2013 Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T10:04:59.000000Z"}, {"uuid": "a27f0b29-22c8-4240-8624-6a64a14976e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13470", "type": "seen", "source": "https://t.me/cvedetector/16745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13470 - Ninja Forms WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13470 \nPublished : Jan. 30, 2025, 8:15 a.m. | 32\u00a0minutes ago \nDescription : The Ninja Forms \u2013 The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.8.24 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T10:04:59.000000Z"}, {"uuid": "3e474ba9-f87f-47ac-8645-5232e1441cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13349", "type": "seen", "source": "https://t.me/cvedetector/16789", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13349 - Stockdio Historical Chart WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13349 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Stockdio Historical Chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stockdio-historical-chart' shortcode in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:43.000000Z"}, {"uuid": "537fbca8-ed41-46ad-ae98-482fa40eafcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13646", "type": "seen", "source": "https://t.me/cvedetector/16786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13646 - WordPress Single-user-chat Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13646 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Single-user-chat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the 'single_user_chat_update_login' function in all versions up to, and including, 0.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to update option values to 'login' on the WordPress site. This may be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:41.000000Z"}, {"uuid": "7f2916b2-7d18-4683-882b-7266457b5bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13460", "type": "seen", "source": "https://t.me/cvedetector/16785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13460 - WordPress WE Testimonial Slider Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13460 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The WE \u2013 Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Testimonial Author Names in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:40.000000Z"}, {"uuid": "93acdbbe-754a-4c87-b555-03673a7b868a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13670", "type": "seen", "source": "https://t.me/cvedetector/16779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13670 - WordPress Music Sheet Viewer Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13670 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Music Sheet Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pn_msv' shortcode in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:29.000000Z"}, {"uuid": "feb9c838-167b-4c60-a28f-58fa375ebd2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13664", "type": "seen", "source": "https://t.me/cvedetector/16778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13664 - WordPress WP Post List Table Stored Cross-Site Scripting (XS)\", \n  \"Content\": \"CVE ID : CVE-2024-13664 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpb_post_list_table' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:28.000000Z"}, {"uuid": "3a0bb40b-9aa2-45da-826e-18298a0eda3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13661", "type": "seen", "source": "https://t.me/cvedetector/16777", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13661 - WordPress Table Editor Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13661 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditor_vtabs' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:28.000000Z"}, {"uuid": "004aeae0-9d7d-419a-933d-94180517429d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13652", "type": "seen", "source": "https://t.me/cvedetector/16776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13652 - WordPress ECPay Ecommerce for WooCommerce Unauthenticated Data Loss\", \n  \"Content\": \"CVE ID : CVE-2024-13652 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The ECPay Ecommerce for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'clear_ecpay_debug_log' AJAX action in all versions up to, and including, 1.1.2411060. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear the plugin's log files. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:27.000000Z"}, {"uuid": "5a8b3807-d985-4e3a-99fd-1b2201863af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13720", "type": "seen", "source": "https://t.me/cvedetector/16774", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13720 - \"WordPress WP Image Uploader Remote File Deletion\"\", \n  \"Content\": \"CVE ID : CVE-2024-13720 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploader_main_function() function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:22.000000Z"}, {"uuid": "328e14f8-49cc-45a8-a947-ba5e29074ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13715", "type": "seen", "source": "https://t.me/cvedetector/16773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13715 - \"WordPress zStore Manager Basic Plugin Cache Clearance Unauthorized Access\"\", \n  \"Content\": \"CVE ID : CVE-2024-13715 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the zstore_clear_cache() function in all versions up to, and including, 3.311. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear the plugin's cache. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:22.000000Z"}, {"uuid": "eb68ed5c-51da-4784-8092-a82ea1a36d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13742", "type": "seen", "source": "https://t.me/cvedetector/16771", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13742 - iControlWP WordPress Site Manager PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13742 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The iControlWP \u2013 Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the reqpars parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:20.000000Z"}, {"uuid": "bb0c30c6-6bd3-452f-b655-2c0020517343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13705", "type": "seen", "source": "https://t.me/cvedetector/16770", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13705 - \"WordPress StageShow Plugin Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13705 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 9.8.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:19.000000Z"}, {"uuid": "6dd9c298-552b-474b-9321-381a2e5f4f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13453", "type": "seen", "source": "https://t.me/cvedetector/16767", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13453 - PirateForms Contact Form & SMTP Plugin for WordPress Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13453 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The The Contact Form & SMTP Plugin for WordPress by PirateForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:07.000000Z"}, {"uuid": "e9458a3d-7aa1-4d84-bde4-e5f63ae44ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "Telegram/y4K9fjGlTAmL7-bu34_MvwCI8QvnT0oP9YmCmmX6pcRMTg", "content": "", "creation_timestamp": "2025-06-02T18:17:58.000000Z"}, {"uuid": "96510738-274f-49c5-b6be-a70c4a6fc95d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13706", "type": "seen", "source": "https://t.me/cvedetector/16763", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13706 - WordPress WP Image Uploader Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13706 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The WP Image Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'file' parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:01.000000Z"}, {"uuid": "82a0facc-fd62-40d4-aa80-b36044b17dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13179", "type": "seen", "source": "https://t.me/cvedetector/15306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13179 - Ivanti Avalanche Path Traversal Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13179 \nPublished : Jan. 14, 2025, 5:15 p.m. | 36\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T19:01:18.000000Z"}, {"uuid": "e020a250-ccaa-42bd-8d7c-30cf9286bb9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13758", "type": "seen", "source": "https://t.me/cvedetector/16755", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13758 - PayPal for WordPress CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13758 \nPublished : Jan. 30, 2025, 9:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.52. This is due to missing or incorrect nonce validation on the cp_contact_form_paypal_check_init_actions() function. This makes it possible for unauthenticated attackers to add discount codes via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T12:35:38.000000Z"}, {"uuid": "60079b44-25fa-4b31-9759-2e7cba79f6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13732", "type": "seen", "source": "https://t.me/cvedetector/16754", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13732 - WordPress Gutenberg Blocks Stored Cross-Site Scripting.parseColor\", \n  \"Content\": \"CVE ID : CVE-2024-13732 \nPublished : Jan. 30, 2025, 9:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The Responsive Blocks \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018section_tag\u2019 parameter in all versions up to, and including, 1.9.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T12:35:37.000000Z"}, {"uuid": "03c3861b-099a-4a02-b8ae-6719e82d1ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13694", "type": "seen", "source": "https://t.me/cvedetector/16753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13694 - \"WooCommerce Wishlist Insecure Direct Object Reference (IDOR)\"\", \n  \"Content\": \"CVE ID : CVE-2024-13694 \nPublished : Jan. 30, 2025, 9:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the download_pdf_file() function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to extract data from wishlists that they should not have access to. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T12:35:36.000000Z"}, {"uuid": "9bf866fb-bc37-4d43-bd96-22a3388684e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13368", "type": "seen", "source": "https://t.me/cvedetector/16373", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13368 - Youzify BuddyPress Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13368 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the youzify_offer_banner() function in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary site options to a value of one. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:51.000000Z"}, {"uuid": "42eb8b92-8a6d-4333-8da7-95371a3c7174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13550", "type": "seen", "source": "https://t.me/cvedetector/16370", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13550 - WordPress ABC Notation Plugin Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13550 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the 'file' attribute of the 'abcjs' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:46.000000Z"}, {"uuid": "543ace19-054f-4e01-8d41-0a2ecdc2040b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13869", "type": "seen", "source": "Telegram/7-B2hz2HD5ns3w-f5EMjyzJDjJwSUPicx7MvTV7YXoXlLcEt", "content": "", "creation_timestamp": "2025-02-23T17:38:05.000000Z"}, {"uuid": "cae7ec91-12ca-4ea4-af02-ed18a96b8414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13650", "type": "seen", "source": "https://t.me/cvedetector/23305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13650 - Piotnet Addons For Elementor WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13650 \nPublished : April 18, 2025, 2:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'PAFE Before After Image Comparison Slider' widget in all versions up to, and including, 2.4.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T06:32:45.000000Z"}, {"uuid": "59ce2e4d-2827-42b7-8b2d-5535a594abc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13484", "type": "seen", "source": "https://t.me/cvedetector/16626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13484 - ArgoCD Cluster-Wide PrometheusRule Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13484 \nPublished : Jan. 28, 2025, 6:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : A flaw was found in ArgoCD. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T21:17:56.000000Z"}, {"uuid": "b45f21e1-f30d-46bd-8281-9437370e4000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13561", "type": "seen", "source": "https://t.me/cvedetector/16684", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13561 - \"Target Video Easy Publish WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13561 \nPublished : Jan. 29, 2025, 12:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's brid_override_yt shortcode in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T15:41:10.000000Z"}, {"uuid": "6bef44e8-7589-464c-937e-91cbc40d7028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13759", "type": "seen", "source": "https://t.me/cvedetector/24972", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13759 - Avira Prime Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-13759 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64\u00a0 allows local attackers to gain system-level privileges via arbitrary file deletion \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:41.000000Z"}, {"uuid": "deeb43dd-ffbf-4cc9-a3e7-d70499d3181f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13944", "type": "seen", "source": "https://t.me/cvedetector/24971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13944 - Norton Utilities Ultimate Link Following Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13944 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:40.000000Z"}, {"uuid": "be74c8c7-c3c8-440e-9169-fe7b23caadfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13696", "type": "seen", "source": "https://t.me/cvedetector/16676", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13696 - WooCommerce Flexible Wishlist Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13696 \nPublished : Jan. 29, 2025, 8:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The Flexible Wishlist for WooCommerce \u2013 Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018wishlist_name\u2019 parameter in all versions up to, and including, 1.2.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T11:30:38.000000Z"}, {"uuid": "da0c8182-0ba7-40ed-88f2-72cc7e8c7401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13009", "type": "seen", "source": "https://t.me/cvedetector/24852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13009 - Eclipse Jetty Gzip Buffer Release Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13009 \nPublished : May 8, 2025, 6:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request  \nbody. This can result in corrupted and/or inadvertent sharing of data between requests. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T21:48:21.000000Z"}, {"uuid": "6df97079-3162-4f93-be50-2bfd10661db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13688", "type": "seen", "source": "https://t.me/cvedetector/23887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13688 - WordPress ASE Password Protection Hardcoded Password Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13688 \nPublished : April 28, 2025, 6:15 a.m. | 51\u00a0minutes ago \nDescription : The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T09:52:50.000000Z"}, {"uuid": "08f32801-7984-460a-973c-c475cf4b2f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13808", "type": "seen", "source": "https://t.me/cvedetector/23791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13808 - Xpro Elementor Addons - Pro WordPress Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13808 \nPublished : April 26, 2025, 5:15 a.m. | 18\u00a0minutes ago \nDescription : The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T07:43:24.000000Z"}, {"uuid": "42d53d80-836b-427a-832e-1cfd1c91834b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13812", "type": "seen", "source": "https://t.me/cvedetector/23802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13812 - \"Anps Theme Plugin WordPress Shortcode Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13812 \nPublished : April 26, 2025, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T11:54:13.000000Z"}, {"uuid": "a3c5b0c0-416d-4782-b76b-464fa437f38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13610", "type": "seen", "source": "https://t.me/cvedetector/22922", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13610 - \"Simple Social Media Share Buttons WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13610 \nPublished : April 15, 2025, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Simple Social Media Share Buttons  WordPress plugin before 6.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T09:04:44.000000Z"}, {"uuid": "e74f0540-18eb-4694-af32-680852a30f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13307", "type": "seen", "source": "https://t.me/cvedetector/23669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13307 - Reales WP Real Estate WordPress Theme Unauthenticated File Deletion and Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13307 \nPublished : April 24, 2025, 9:15 a.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'reales_delete_file', 'reales_delete_file_plans', 'reales_add_to_favourites', and 'reales_remove_from_favourites' functions in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to delete arbitrary attachments, and add or remove favorite property listings for any user. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T13:03:57.000000Z"}, {"uuid": "3e7e06db-837b-454d-a642-54041bd14a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13569", "type": "seen", "source": "https://t.me/cvedetector/23486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13569 - WordPress Front End Users Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13569 \nPublished : April 22, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T10:02:36.000000Z"}, {"uuid": "4ece4f53-f508-4f71-a76c-2bad601c0976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13926", "type": "seen", "source": "https://t.me/cvedetector/23374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13926 - WordPress WP-Syntax Regular Expression Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-13926 \nPublished : April 19, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-19T09:18:10.000000Z"}, {"uuid": "92ad7452-adb0-4645-9e8e-22299cb84035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13452", "type": "seen", "source": "https://t.me/cvedetector/23046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13452 - Supsystic Contact Form CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13452 \nPublished : April 16, 2025, 3:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29. This is due to missing or incorrect nonce validation on a saveAsCopy function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T07:40:01.000000Z"}, {"uuid": "1724d18f-5182-4b63-aab3-501f58a31d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13177", "type": "seen", "source": "https://t.me/cvedetector/22968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13177 - Netskope Client Mac OS Privilege Escalation Symlink Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13177 \nPublished : April 15, 2025, 4:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file \u201cnsinstallation\u201d. A standard user could potentially create a symlink of the file \u201cnsinstallation\u201d to escalate the privileges of a different file on the system.   \nThis issue affects Netskope Client: before 123.0, before 117.1.11.2310, before 120.1.10.2306. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:09.000000Z"}, {"uuid": "5c2a9feb-a214-4654-81f4-e5da0a461ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13598", "type": "seen", "source": "https://t.me/cvedetector/22857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13598 - SoftCOM iKSORIS Internet Starter Reflected XSS\", \n  \"Content\": \"CVE ID : CVE-2024-13598 \nPublished : April 14, 2025, 12:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Internet Starter, one of SoftCOM iKSORIS system modules, is  vulnerable to Reflected XSS (Cross-site Scripting) attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run the code in their's\u00a0context.\u00a0  \nThis vulnerability has been patched in version 79.0 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T17:10:59.000000Z"}, {"uuid": "09064f24-a2ce-4f2c-88fa-91ebc8e4e2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13597", "type": "seen", "source": "https://t.me/cvedetector/22856", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13597 - SoftCOM iKSORIS Reflected XSS\", \n  \"Content\": \"CVE ID : CVE-2024-13597 \nPublished : April 14, 2025, 12:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Internet Starter, one of SoftCOM\u00a0iKSORIS system modules,\u00a0is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form sent to login panel at\u00a0/softcom/ with a malicious script, what causes the script to run in user's context.\u00a0  \nThis vulnerability has been patched in version 79.0 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T17:10:59.000000Z"}, {"uuid": "5168f822-349b-441d-8814-fb4e6e52de26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13207", "type": "seen", "source": "https://t.me/cvedetector/22925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13207 - \"Widget for Social Page Feeds WordPress Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13207 \nPublished : April 15, 2025, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Widget for Social Page Feeds WordPress plugin before 6.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T09:04:49.000000Z"}, {"uuid": "97244b0f-7f85-45bd-97ea-54ca82b85255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13562", "type": "seen", "source": "https://t.me/cvedetector/16386", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13562 - \"WordPress Import WP Sensitive Information Exposure\"\", \n  \"Content\": \"CVE ID : CVE-2024-13562 \nPublished : Jan. 25, 2025, 12:15 p.m. | 1\u00a0hour ago \nDescription : The Import WP \u2013 Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads directory. This makes it possible for unauthenticated attackers to extract sensitive data  stored insecurely in the /wp-content/uploads/ directory which can contain information like imported or local user data and files. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T14:39:32.000000Z"}, {"uuid": "cc4282b7-1c4f-4257-934c-9f72da4476a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13449", "type": "seen", "source": "https://t.me/cvedetector/16385", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13449 - WordPress Boom Fest Capability Check Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13449 \nPublished : Jan. 25, 2025, 9:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Boom Fest plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'bf_admin_action' function in all versions up to, and including, 2.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings that change the appearance of the website. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T12:09:15.000000Z"}, {"uuid": "9cdc46d8-29ea-40ec-98f1-7cbc97a38ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13548", "type": "seen", "source": "https://t.me/cvedetector/16369", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13548 - \"Elementor Power Ups Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13548 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Power Ups for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'magic-button' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:45.000000Z"}, {"uuid": "984abbff-84b3-4ecd-abab-ec6b0db30aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13943", "type": "seen", "source": "https://t.me/cvedetector/24162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13943 - Tesla Model S Iris Modem Sandbox Escape Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13943 \nPublished : April 30, 2025, 8:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the QCMAP_ConnectionManager component. An attacker can abuse the service to assign LAN addresses to the WWAN. An attacker can leverage this vulnerability to access network services that were only intended to be exposed to the internal LAN. Was ZDI-CAN-23199. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T00:37:03.000000Z"}, {"uuid": "68addb82-261b-4d9f-9078-8fe0cc7ef28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13381", "type": "seen", "source": "https://t.me/cvedetector/24199", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13381 - WordPress Calculated Fields Form Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13381 \nPublished : May 1, 2025, 6:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T10:39:15.000000Z"}, {"uuid": "647caac0-e2f9-4c05-bafe-3060bf35d525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13845", "type": "seen", "source": "https://t.me/cvedetector/24183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13845 - WordPress Gravity Forms WebHooks SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13845 \nPublished : May 1, 2025, 5:15 a.m. | 55\u00a0minutes ago \nDescription : The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_Webhooks class This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T08:58:37.000000Z"}, {"uuid": "4c679b38-a550-4f52-85f0-202d082e9cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13925", "type": "seen", "source": "https://t.me/cvedetector/23217", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13925 - Klarna Checkout for WooCommerce File Log Flood Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13925 \nPublished : April 17, 2025, 6:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T10:28:11.000000Z"}, {"uuid": "65af8db3-b5b3-4d55-b99e-630a27c76692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13804", "type": "seen", "source": "https://t.me/cvedetector/21524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13804 - HPE Insight Cluster Management Utility (CMU) Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13804 \nPublished : March 30, 2025, 10:15 p.m. | 24\u00a0minutes ago \nDescription : Vulnerability in Hewlett Packard Enterprise HPE Insight Cluster Management Utility (CMU).This issue affects HPE Insight Cluster Management Utility (CMU): 8.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T00:47:01.000000Z"}, {"uuid": "452b7bb0-d0f9-490e-bd52-69f061018199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13557", "type": "seen", "source": "https://t.me/cvedetector/21508", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13557 - United Themes WordPress Shortcodes Arbitrary Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13557 \nPublished : March 29, 2025, 7:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : The Shortcodes by United Themes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T10:29:02.000000Z"}, {"uuid": "0a742fbd-dfbd-457a-bb91-f56fad1281cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13939", "type": "seen", "source": "https://t.me/cvedetector/21369", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13939 - Apache::String::Compare::ConstantTime Timing Attack Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13939 \nPublished : March 28, 2025, 3:15 a.m. | 51\u00a0minutes ago \nDescription : String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string.  \n  \nAs stated in the documentation: \"If the lengths of the strings are different, because equals returns false right away the size of the secret string may be leaked (but not its contents).\"  \n  \nThis is similar to\u00a0CVE-2020-36829 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T05:12:23.000000Z"}, {"uuid": "c555392b-4206-4839-a118-eb4561a8db95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13527", "type": "seen", "source": "https://t.me/cvedetector/16595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13527 - Philantro Donations and Donor Management - WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13527 \nPublished : Jan. 28, 2025, 9:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : The Philantro \u2013 Donations and Donor Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes like 'donate' in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:20.000000Z"}, {"uuid": "6cc1ef62-b1a9-4ebf-9f16-b1b626c22a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13448", "type": "seen", "source": "https://t.me/cvedetector/16588", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13448 - WordPress ThemeREX Addons Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13448 \nPublished : Jan. 28, 2025, 7:15 a.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions up to, and including, 2.32.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T10:25:47.000000Z"}, {"uuid": "357c3a16-57c2-4838-9848-0509dbe4f116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13509", "type": "seen", "source": "https://t.me/cvedetector/16587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13509 - \"WS Form LITE - WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13509 \nPublished : Jan. 28, 2025, 7:15 a.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The WS Form LITE \u2013 Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter in all versions up to, and including, 1.10.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability is partially fixed in 1.10.13 and completely fixed in 1.10.14. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T10:25:47.000000Z"}, {"uuid": "4e2482ae-d2bc-41c6-895c-7d4d93ef3379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13521", "type": "seen", "source": "https://t.me/cvedetector/16586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13521 - MailUp Auto Subscription CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13521 \nPublished : Jan. 28, 2025, 8:15 a.m. | 58\u00a0minutes ago \nDescription : The MailUp Auto Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the mas_options function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T10:25:46.000000Z"}, {"uuid": "97cb662c-238e-428a-8bcf-5111932eaaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13338", "type": "seen", "source": "https://t.me/cvedetector/22797", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13338 - Clearfy Cache - WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13338 \nPublished : April 12, 2025, 7:15 a.m. | 59\u00a0minutes ago \nDescription : The Clearfy Cache \u2013 WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on the wclearfy_cache_delete functionality . This makes it possible for unauthenticated attackers to clear the cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-12T10:50:29.000000Z"}, {"uuid": "8658fe01-50ab-44e2-8b40-a789b81fa2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13337", "type": "seen", "source": "https://t.me/cvedetector/22796", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13337 - Clearfy Cache \u2013 WordPress optimization plugin Cross-Site Request Forgery (CSRF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13337 \nPublished : April 12, 2025, 7:15 a.m. | 59\u00a0minutes ago \nDescription : The Clearfy Cache \u2013 WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.2. This is due to missing or incorrect nonce validation on the 'setup-wbcr_clearfy' page. This makes it possible for unauthenticated attackers to update the plugins settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-12T10:50:28.000000Z"}, {"uuid": "af39ab4c-0fbc-4fa8-b076-cf2351c05663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13861", "type": "seen", "source": "https://t.me/cvedetector/22747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13861 - Taegis Endpoint Agent Debian Package Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13861 \nPublished : April 11, 2025, 1:15 p.m. | 28\u00a0minutes ago \nDescription : A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code execution as root. Redhat-based systems using RPM packages are not affected. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-11T16:27:15.000000Z"}, {"uuid": "db9c4742-c1ec-4ad9-b753-a234e66960fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13744", "type": "seen", "source": "https://t.me/cvedetector/22080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13744 - WooCommerce Booster Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13744 \nPublished : April 4, 2025, 5:15 a.m. | 31\u00a0minutes ago \nDescription : The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the validate_product_input_fields_on_add_to_cart function in versions 4.0.1 to 7.2.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T07:58:47.000000Z"}, {"uuid": "da8c9e1d-c82b-412d-bd4d-50bcc17a571b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13673", "type": "seen", "source": "https://t.me/cvedetector/21968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13673 - WordPress Big Boom Directory Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13673 \nPublished : April 3, 2025, 8:15 a.m. | 38\u00a0minutes ago \nDescription : The Big Boom Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bbd-search' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T11:03:29.000000Z"}, {"uuid": "af391eda-28bd-464d-818d-1f52a8a06f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13310", "type": "seen", "source": "https://t.me/cvedetector/14931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13310 - Drupal Git Utilities Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13310 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal: *.*. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:08.000000Z"}, {"uuid": "9c82f643-dee4-4080-85e6-b8437859de37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13637", "type": "seen", "source": "https://t.me/cvedetector/21862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13637 - WordPress Demo Awesome Plugin Unauthenticated Plugin Installation\", \n  \"Content\": \"CVE ID : CVE-2024-13637 \nPublished : April 2, 2025, 10:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin function in all versions up to, and including, 1.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins.. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T14:59:05.000000Z"}, {"uuid": "cfb09197-2245-4564-bc68-51b605ac3de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://t.me/cvedetector/21753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13553 - WooCommerce WordPress Host Header Spoofing Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13553 \nPublished : April 1, 2025, 12:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The SMS Alert Order Notifications \u2013 WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a playground environment. This makes it possible for unauthenticated attackers to spoof the Host header to make the OTP code \"1234\" and authenticate as any user, including administrators. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T16:23:20.000000Z"}, {"uuid": "a7c86ba5-d70b-452a-96b0-b81ab324397f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13772", "type": "seen", "source": "https://t.me/cvedetector/20290", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13772 - Civi Job Board & Freelance Marketplace WordPress Theme Plugin Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13772 \nPublished : March 14, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of randomization of a password created during Single Sign-On via Google or Facebook. This makes it possible for unauthenticated attackers to change the password of arbitrary Candidate-level users if the attacker knows the username assigned to the victim during account creation. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T15:02:12.000000Z"}, {"uuid": "9c050e2c-8760-4226-ac30-8621afd06aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13924", "type": "seen", "source": "Telegram/HG0M_GwIqq-n4i0Gf-FzKxnP20cW5N5XUKms6jqt4dgi5pDp", "content": "", "creation_timestamp": "2025-03-08T16:29:02.000000Z"}, {"uuid": "2cabe808-1b17-4afd-93a8-0857c9b885ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13675", "type": "seen", "source": "Telegram/BQTfMQo3t7s-qi-eGH5SC7jduVo9ylzgCl-i9mIXzCaBKtrL", "content": "", "creation_timestamp": "2025-03-08T16:29:02.000000Z"}, {"uuid": "e1f0818e-d9e7-4080-b480-7fb3589804eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13649", "type": "seen", "source": "Telegram/jkP3wyoW6YYMaly-es_Cs2Cm1Z9O2JhX6e7Bm9qOND7YfQaU", "content": "", "creation_timestamp": "2025-03-08T16:29:02.000000Z"}, {"uuid": "bdc4898a-dafd-450e-b1c9-1ddcb57fea0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13442", "type": "seen", "source": "https://t.me/cvedetector/20637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13442 - WordPress Service Finder Bookings Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13442 \nPublished : March 19, 2025, 12:15 p.m. | 53\u00a0minutes ago \nDescription : The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.0. This is due to the plugin not properly validating a user's identity prior to (1) performing a post-booking auto-login or (2) updating their profile details (e.g. password). This makes it possible for unauthenticated attackers to (1) login as an arbitrary user if their email address is known or (2) change an arbitrary user's password, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T14:38:48.000000Z"}, {"uuid": "d6d74419-8c26-4b1c-a38a-035c0e12bb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13933", "type": "seen", "source": "https://t.me/cvedetector/20633", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13933 - FoodBakery | Delivery Restaurant Directory WordPress Theme Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13933 \nPublished : March 19, 2025, 12:15 p.m. | 53\u00a0minutes ago \nDescription : The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7. This is due to missing or incorrect nonce validation on the foodbakery_var_backup_file_delete, foodbakery_widget_file_delete, theme_option_save, export_widget_settings, ajax_import_widget_data, foodbakery_var_settings_backup_generate, foodbakery_var_backup_file_restore, and theme_option_rest_all functions. This makes it possible for unauthenticated attackers to delete arbitrary files, update theme options, export widget options, import widget options, generate backups, restore backups, and reset theme options via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T14:38:44.000000Z"}, {"uuid": "b28fd2e0-7acd-4bc8-8703-befdeabb45a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13790", "type": "seen", "source": "https://t.me/cvedetector/20630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13790 - MinimogWP Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13790 \nPublished : March 19, 2025, 9:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : The MinimogWP \u2013 The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.7.0 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T12:08:28.000000Z"}, {"uuid": "83ed5640-33ff-4fef-a572-b0f721802da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13412", "type": "seen", "source": "https://t.me/cvedetector/20628", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13412 - CozyStay WordPress Unauthenticated Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-13412 \nPublished : March 19, 2025, 7:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The CozyStay theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated attackers to execute arbitrary actions. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T10:28:11.000000Z"}, {"uuid": "688ffc7e-42e0-4025-a4d1-68a4dabdc1cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13410", "type": "seen", "source": "https://t.me/cvedetector/20627", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13410 - CozyStay WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13410 \nPublished : March 19, 2025, 7:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to, and including 3.9.0, respectively, via deserialization of untrusted input in the 'ajax_handler' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T10:28:10.000000Z"}, {"uuid": "8dae5337-062e-4e1a-897e-a6bfc93d6aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13773", "type": "seen", "source": "https://t.me/cvedetector/20286", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13773 - Civi WordPress Theme Exposed Credentials\", \n  \"Content\": \"CVE ID : CVE-2024-13773 \nPublished : March 14, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including LinkedIn client and secret keys. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T15:02:10.000000Z"}, {"uuid": "648eb37a-674d-40b0-affc-96342d4d50eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13359", "type": "seen", "source": "Telegram/9RbeSRvzztVfjacz3PaGLUrHtQm8xkFqyw2PUhOWrZxoIBem", "content": "", "creation_timestamp": "2025-03-08T16:29:01.000000Z"}, {"uuid": "8045f0a9-05e9-4f00-a520-304e703c4ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13882", "type": "seen", "source": "Telegram/vGynzEJMwZ4cp308WJJDAW1FAJRIy7c8D6GA7rYeN2X5IJ3S", "content": "", "creation_timestamp": "2025-03-08T16:29:01.000000Z"}, {"uuid": "c2115e36-0fc7-4d4b-8abd-3d261d871bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "Telegram/WkUeB9ikwxXASTyJUbHX1-4BJwrx32uR1c9bJHQgVanSYA1C", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "effaef3a-4c00-4786-acd8-fb3eafa0ef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13826", "type": "seen", "source": "Telegram/r82F31gBI-nbgo6rX8RhatVwUfvqaTgh4IkJSWyOOnkDOTA8", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "ee580c9b-52c8-4062-bbec-40d622279a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13825", "type": "seen", "source": "Telegram/ftU9OdCziMH8K9EBeVe-o4LklJT2udCQFUdEbY6w2U2CKV08", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "bec460ae-1b07-4dc5-939f-070bf7ae96a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13690", "type": "seen", "source": "https://t.me/cvedetector/21079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13690 - WordPress WP Church Donation Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13690 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : The WP Church Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several donation form submission parameters in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:08:06.000000Z"}, {"uuid": "60e655cb-d184-4505-817b-6e6cea068f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13126", "type": "seen", "source": "https://t.me/cvedetector/20407", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13126 - WordPress Download Manager Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13126 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use htaccess, allowing unauthorized access of files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:59.000000Z"}, {"uuid": "b436cf97-2a77-4cf0-ae8f-18c15230ae06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13602", "type": "seen", "source": "https://t.me/cvedetector/20402", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13602 - \"Poll Maker WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13602 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Poll Maker  WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:52.000000Z"}, {"uuid": "d881ad33-d22d-4b5f-a83c-5a27abbbd2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13847", "type": "seen", "source": "https://t.me/cvedetector/20360", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13847 - WordPress Portfolio and Projects Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13847 \nPublished : March 15, 2025, 4:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The Portfolio and Projects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:50.000000Z"}, {"uuid": "263a9317-495e-4c91-ad8a-868f12b0e7da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13497", "type": "seen", "source": "https://t.me/cvedetector/20351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13497 - Tripetto WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13497 \nPublished : March 15, 2025, 5:15 a.m. | 34\u00a0minutes ago \nDescription : The WordPress form builder plugin for contact forms, surveys and quizzes \u2013 Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via attachment uploads in all versions up to, and including, 8.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:37.000000Z"}, {"uuid": "aac9e2c5-7e68-481d-8d9e-3b8f7e6f32f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13771", "type": "seen", "source": "https://t.me/cvedetector/20289", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13771 - Civi WordPress Theme Unauthenticated Password Change Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13771 \nPublished : March 14, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change the password of arbitrary users, including administrators, if the attacker knows the username of the victim. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T15:02:12.000000Z"}, {"uuid": "765fe5d4-a76d-4536-9433-fc675d27c23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13640", "type": "seen", "source": "Telegram/R1FAI1NNYpT4dN-aCwtq_3p2iRpSTgywesk0hV61J6629EnO", "content": "", "creation_timestamp": "2025-03-08T16:28:59.000000Z"}, {"uuid": "b75a06fa-7f56-4440-9890-a16427078b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13824", "type": "seen", "source": "https://t.me/cvedetector/20282", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13824 - CiyaShop WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13824 \nPublished : March 14, 2025, 7:15 a.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : The CiyaShop - Multipurpose WooCommerce Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.19.0 via deserialization of untrusted input in the 'add_ciyashop_wishlist' and 'ciyashop_get_compare' functions. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T10:51:28.000000Z"}, {"uuid": "13434139-3e45-466c-83ba-a96d3f9d6fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13321", "type": "seen", "source": "https://t.me/cvedetector/20280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13321 - WordPress AnalyticsWP SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13321 \nPublished : March 14, 2025, 8:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : The AnalyticsWP plugin for WordPress is vulnerable to SQL Injection via the 'custom_sql' parameter in all versions up to, and including, 2.0.0 due to insufficient authorization checks on the handle_get_stats() function.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T10:51:26.000000Z"}, {"uuid": "a9189a42-ab12-4ff1-abb6-87c308394701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13407", "type": "seen", "source": "https://t.me/cvedetector/20279", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13407 - Omnipress WordPress Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13407 \nPublished : March 14, 2025, 8:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T10:51:25.000000Z"}, {"uuid": "06ccf5d9-1b45-4ae5-b1e9-2214b4f32ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13376", "type": "seen", "source": "https://t.me/cvedetector/20268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13376 - WordPress Industrial Theme Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13376 \nPublished : March 14, 2025, 6:15 a.m. | 27\u00a0minutes ago \nDescription : The Industrial theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the _ajax_get_total_content_import_items() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T08:20:49.000000Z"}, {"uuid": "69766cbc-cb15-4754-9467-9bec43a2689c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13913", "type": "seen", "source": "https://t.me/cvedetector/20265", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13913 - InstaWP Connect Cross-Site Request Forgery (CSRF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13913 \nPublished : March 14, 2025, 6:15 a.m. | 27\u00a0minutes ago \nDescription : The InstaWP Connect \u2013 1-click WP Staging & Migration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.0.83. This is due to missing or incorrect nonce validation in the '/migrate/templates/main.php' file. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T08:20:44.000000Z"}, {"uuid": "3763a01e-32e6-4728-b12e-27f7cf283982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13895", "type": "seen", "source": "Telegram/bTs0sJgsr5z_ksbA9agrV_lTVbNxYEXkJNGUqjoZK--oiPiM", "content": "", "creation_timestamp": "2025-03-08T04:37:51.000000Z"}, {"uuid": "dfd27d04-0586-4e9d-aa7b-87f452adb061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13776", "type": "seen", "source": "https://t.me/cvedetector/22183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13776 - \"ZoomSounds WordPress Wave Audio Player with Playlist Unauthorized Data Modification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13776 \nPublished : April 5, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'dzsap_delete_notice' AJAX action in all versions up to, and including, 6.91. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 'seen' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. There are several other functions also vulnerable to missing authorization. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T09:04:04.000000Z"}, {"uuid": "c2f031f5-1856-4b9c-a417-2dca865173f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13890", "type": "seen", "source": "Telegram/TTl1EQKcX_FDS65fbwLwB6vG2tjVhuV6kcy2NrdGgtSLjP4k", "content": "", "creation_timestamp": "2025-03-08T04:37:51.000000Z"}, {"uuid": "bc008397-fc06-427a-bfd5-59f9dcfa979f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13604", "type": "seen", "source": "https://t.me/cvedetector/22179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13604 - KB Support WordPress Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13604 \nPublished : April 5, 2025, 2:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : The KB Support \u2013 Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.4 via the 'kbs' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/kbs directory which can contain file attachments included in support tickets. The vulnerability was partially patched in version 1.7.3.2. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T06:33:42.000000Z"}, {"uuid": "7788d66b-9b39-4f9b-bedd-7d2a71ee638b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13835", "type": "seen", "source": "Telegram/Pl5CtMRltYuSsFiI7PP1YbTRdMFEuTXzb5wiwL9-kz_SF8hu", "content": "", "creation_timestamp": "2025-03-08T04:37:51.000000Z"}, {"uuid": "edb68006-b0cb-4138-9dee-620621f2ed5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13411", "type": "seen", "source": "https://t.me/cvedetector/21172", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13411 - Zapier for WordPress SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13411 \nPublished : March 26, 2025, 12:15 p.m. | 26\u00a0minutes ago \nDescription : The Zapier for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5.1 via the updated_user() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T13:53:24.000000Z"}, {"uuid": "e36fc398-944b-4c18-8e00-60c91c682b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13774", "type": "seen", "source": "Telegram/lU0oEwK_HwRIuUUsuaxjk9g-VFfC82mNwtRO3772hwSxPN0T", "content": "", "creation_timestamp": "2025-03-08T04:37:51.000000Z"}, {"uuid": "a6b07e52-a4ad-45a5-9d0b-9fea74aba16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13702", "type": "seen", "source": "https://t.me/cvedetector/21164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13702 - vcita WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13702 \nPublished : March 26, 2025, 9:15 a.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler' and 'vCitaSchedulingCalendar' shortcodes in all versions up to, and including, 2.7.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T12:12:53.000000Z"}, {"uuid": "17cc4165-8a3c-4e62-bfc5-c577f02a0232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13801", "type": "seen", "source": "https://t.me/cvedetector/21162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13801 - WordPress BWL Advanced FAQ Manager Unauthorized Data Modification and Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-13801 \nPublished : March 26, 2025, 9:15 a.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : The BWL Advanced FAQ Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'baf_set_notice_status' AJAX action in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to '1' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T12:12:49.000000Z"}, {"uuid": "3fd73f41-869c-45c3-bb3f-027fe3a43423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13708", "type": "seen", "source": "https://t.me/cvedetector/22102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13708 - WooCommerce Booster for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13708 \nPublished : April 4, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in versions 4.0.1 to 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T10:29:40.000000Z"}, {"uuid": "8c27c3b0-34a8-40a5-bc8e-a997e8863100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13645", "type": "seen", "source": "https://t.me/cvedetector/22101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13645 - TagDiv Composer PHP Object Instantiation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13645 \nPublished : April 4, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The tagDiv Composer plugin for WordPress is vulnerable to PHP Object Instantiation in all versions up to, and including, 5.3 via module parameter. This makes it possible for unauthenticated attackers to Instantiate a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T10:29:39.000000Z"}, {"uuid": "72b3340f-5365-4385-b15b-e7ecff42219e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13898", "type": "seen", "source": "https://t.me/cvedetector/22099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13898 - WordPress Simple Banner Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13898 \nPublished : April 4, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Simple Banner \u2013 Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T10:29:37.000000Z"}, {"uuid": "4fddea4b-6876-4c5c-bae5-1e7e7b7d0af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13710", "type": "seen", "source": "https://t.me/cvedetector/21077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13710 - Estatebud Properties & Listings Cross-Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2024-13710 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : The Estatebud \u2013 Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.0. This is due to missing or incorrect nonce validation on the 'estatebud_settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:08:04.000000Z"}, {"uuid": "d55ee222-b7e7-415d-aa7c-b886f421d6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13889", "type": "seen", "source": "https://t.me/cvedetector/21170", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13889 - WordPress Importer PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13889 \nPublished : March 26, 2025, 12:15 p.m. | 26\u00a0minutes ago \nDescription : The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.8.3 via deserialization of untrusted input in the 'maybe_unserialize' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T13:53:22.000000Z"}, {"uuid": "5fcf8303-0094-4e33-ab7c-5c0d89e626fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13146", "type": "seen", "source": "https://t.me/cvedetector/21152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13146 - Booknetic WordPress CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13146 \nPublished : March 26, 2025, 6:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T09:42:19.000000Z"}, {"uuid": "6f75d47a-ae74-4576-8f7e-45c2031ac17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13052", "type": "seen", "source": "https://t.me/cvedetector/16443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13052 - \"WordPress Dental Optimizer Patient Generator App Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13052 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Dental Optimizer Patient Generator App WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:24.000000Z"}, {"uuid": "d3e5077c-5f6a-404d-80ad-d0432e4be038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13116", "type": "seen", "source": "https://t.me/cvedetector/16438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13116 - Crelly Slider WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13116 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Crelly Slider WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:17.000000Z"}, {"uuid": "deda6e74-9639-4be9-b9bf-bf23b0d7ebc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13450", "type": "seen", "source": "https://t.me/cvedetector/16384", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13450 - Bit Form Contact Form SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13450 \nPublished : Jan. 25, 2025, 9:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.17.4 via the Webhooks integration. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. The vulnerability can also be exploited in Multisite environments. \nSeverity: 3.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T12:09:15.000000Z"}, {"uuid": "4db07862-c71e-4138-a616-64f8a4998ff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13731", "type": "seen", "source": "https://t.me/cvedetector/21078", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13731 - WordPress Alert Box Block Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13731 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : The Alert Box Block \u2013 Display notice/alerts in the front end. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Alert Box block in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:08:05.000000Z"}, {"uuid": "ea316bba-417d-46ce-ad0a-db2e2042e6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13739", "type": "seen", "source": "https://t.me/cvedetector/20853", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13739 - WordPress Newsletters Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13739 \nPublished : March 22, 2025, 5:15 a.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : The Newsletters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \"to\" parameter in all versions up to, and including, 4.9.9.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an admin user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T08:42:04.000000Z"}, {"uuid": "cdf6922c-a5a7-4a53-9dee-28152ecd764e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13122", "type": "seen", "source": "https://t.me/cvedetector/21070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13122 - WordPress AFI Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13122 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : The AFI  WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:48.000000Z"}, {"uuid": "a22fc99a-fa79-4041-a7bf-bff6907ad016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13118", "type": "seen", "source": "https://t.me/cvedetector/21069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13118 - IP Based Login CSRF Vulnerability in WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-13118 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers to make logged in users delete all logs via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:47.000000Z"}, {"uuid": "5e7b322f-5035-4e87-a9df-510f8934d6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13117", "type": "seen", "source": "https://t.me/cvedetector/16439", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13117 - \"Social Share Buttons for WordPress Philippines Urged Disclosure of Local File Inclusion\"\", \n  \"Content\": \"CVE ID : CVE-2024-13117 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Social Share Buttons for WordPress plugin through 2.7 allows an unauthenticated user to upload arbitrary images and change the path where they are uploaded \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:18.000000Z"}, {"uuid": "a54189e7-07c5-49da-8bc4-977d0727f03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13467", "type": "seen", "source": "https://t.me/cvedetector/16368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13467 - \"WordPress Contact Form7 Email Spam Blocker Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13467 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:44.000000Z"}, {"uuid": "549ecfc5-4b66-4179-b1fb-53db38229b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13124", "type": "seen", "source": "https://t.me/cvedetector/20940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13124 - 10Web Photo Gallery WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13124 \nPublished : March 24, 2025, 6:15 a.m. | 43\u00a0minutes ago \nDescription : The Photo Gallery by 10Web  WordPress plugin before 1.8.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T08:22:03.000000Z"}, {"uuid": "37234883-e14f-4138-be24-2dd11e5a674d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13922", "type": "seen", "source": "https://t.me/cvedetector/20734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13922 - WooCommerce Order Export & Import Arbitrary File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13922 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.6.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary log files on the server. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:45.000000Z"}, {"uuid": "408d88c8-25ad-42d1-9312-64f5564fdadc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13666", "type": "seen", "source": "https://t.me/cvedetector/20865", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13666 - Fluent Forms IP Address Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13666 \nPublished : March 22, 2025, 9:15 a.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The Fluent Forms \u2013 Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 5.2.12 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers spoof their IP address and submit forms that may have IP-based restrictions. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T12:52:58.000000Z"}, {"uuid": "d82489e0-183b-4ad8-a97b-e698d97065e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13903", "type": "seen", "source": "https://t.me/cvedetector/20799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13903 - QuickJS Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13903 \nPublished : March 21, 2025, 7:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JS_GetRuntime of the file quickjs.c of the component qjs. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. Upgrading to version 0.9.0 is able to address this issue. The patch is named 99c02eb45170775a9a679c32b45dd4000ea67aff. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T10:07:45.000000Z"}, {"uuid": "f918e0c6-aa88-4cf7-a8ed-ef20f25b4fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13768", "type": "seen", "source": "https://t.me/cvedetector/20863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13768 - WordPress CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13768 \nPublished : March 22, 2025, 7:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation on the cits_assign_fonts_tab() function. This makes it possible for unauthenticated attackers to delete font assignments via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T10:22:33.000000Z"}, {"uuid": "2216db95-278a-49bb-a6a9-f4e13ca3d5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13856", "type": "seen", "source": "https://t.me/cvedetector/20857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13856 - WordPress Make Builder SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13856 \nPublished : March 22, 2025, 7:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The Your Friendly Drag and Drop Page Builder \u2014 Make Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.10 via the make_builder_ajax_subscribe() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T10:22:26.000000Z"}, {"uuid": "e9b0fc22-8b1b-491c-922c-5fc2837481be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13737", "type": "seen", "source": "https://t.me/cvedetector/20849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13737 - Motors WordPress Car Dealer Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13737 \nPublished : March 22, 2025, 3:15 a.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : The Motors \u2013 Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the motors_create_template and motors_delete_template functions in all versions up to, and including, 1.4.57. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts or create listing templates. This issue requires Elementor plugin to be installed, which is a required plugin for Motors Starter Theme. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T06:11:28.000000Z"}, {"uuid": "096ac111-77a8-4c40-86cf-d58531cac02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13876", "type": "seen", "source": "https://t.me/cvedetector/20700", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13876 - WordPress mEintopf Plugin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13876 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The mEintopf WordPress plugin through 0.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:20.000000Z"}, {"uuid": "1971ea39-adbc-410f-9dfe-4de4a920aafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13558", "type": "seen", "source": "https://t.me/cvedetector/20736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13558 - WooCommerce NP Quote Request Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-13558 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : The NP Quote Request for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.179 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read the content of quote requests. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:46.000000Z"}, {"uuid": "2d526d5d-5376-497f-9e29-9c05dcfe50fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13094", "type": "seen", "source": "https://t.me/cvedetector/16436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13094 - WordPress Triggers Lite Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13094 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:16.000000Z"}, {"uuid": "6e5d7365-4900-482b-90b8-bcf2bd190844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13057", "type": "seen", "source": "https://t.me/cvedetector/16435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13057 - Dyn Business Panel Stored XSS CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13057 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:15.000000Z"}, {"uuid": "ffa7894a-044b-4a05-b482-e28be2977422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13923", "type": "seen", "source": "https://t.me/cvedetector/20735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13923 - WooCommerce Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13923 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.0 via the validate_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:46.000000Z"}, {"uuid": "36395b57-0981-48a1-827e-283644272078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13757", "type": "seen", "source": "https://t.me/cvedetector/19623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13757 - Master Slider - WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13757 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Master Slider \u2013 Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_layer shortcode in all versions up to, and including, 3.10.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:07.000000Z"}, {"uuid": "a25ed1eb-585f-411e-8761-33e461439bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13778", "type": "seen", "source": "https://t.me/cvedetector/19620", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13778 - Hero Mega Menu - WordPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13778 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to SQL Injection via several functions in all versions up to, and including, 1.16.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:02.000000Z"}, {"uuid": "584c08e5-f7b4-4856-810f-b2707d1cd251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13777", "type": "seen", "source": "https://t.me/cvedetector/19619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13777 - ZoomSounds - WordPress Wave Audio Player with Playlist PHP Object Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13777 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.91 via deserialization of untrusted input from the 'margs' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:01.000000Z"}, {"uuid": "d3e65051-d1c4-4437-9b5a-53167f1bbf31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13779", "type": "seen", "source": "https://t.me/cvedetector/19618", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13779 - Hero Mega Menu WordPress Menu Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13779 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'index' parameter in all versions up to, and including, 1.16.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:00.000000Z"}, {"uuid": "820d3abd-d9d3-4d1f-b6ad-ea6e27a1448d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13921", "type": "seen", "source": "https://t.me/cvedetector/20733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13921 - WooCommerce Order Export & Order Import PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13921 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.0 via deserialization of untrusted input from the 'form_data' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:44.000000Z"}, {"uuid": "4b968de9-505c-4b26-8f3a-88acfb15b17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13920", "type": "seen", "source": "https://t.me/cvedetector/20732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13920 - WooCommerce Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13920 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.0 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary log files on the server, which can contain sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:43.000000Z"}, {"uuid": "85149ffb-4d8a-45a2-8253-3ec2365410d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13875", "type": "seen", "source": "https://t.me/cvedetector/20701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13875 - \"WordPress WP-PManager Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13875 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The WP-PManager WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:24.000000Z"}, {"uuid": "7cbaf673-ffec-4bdb-b8a6-0ecdb7a39153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13881", "type": "seen", "source": "https://t.me/cvedetector/20696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13881 - Link My Posts WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13881 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Link My Posts WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:17.000000Z"}, {"uuid": "10c02555-0844-4e47-8bc9-17ce54011c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13880", "type": "seen", "source": "https://t.me/cvedetector/20695", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13880 - My Quota WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13880 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The My Quota WordPress plugin through 1.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:13.000000Z"}, {"uuid": "13a5c03d-0545-4e90-9965-d27909e525c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13878", "type": "seen", "source": "https://t.me/cvedetector/20694", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13878 - SpotBot WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13878 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:12.000000Z"}, {"uuid": "90bda514-78b3-4201-bf49-39791025f9df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13877", "type": "seen", "source": "https://t.me/cvedetector/20693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13877 - Passbeemedia Web Push Notification WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13877 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Passbeemedia Web Push Notification WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:11.000000Z"}, {"uuid": "774a9c0b-32fc-499c-9d0a-ca908c5512dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13893", "type": "seen", "source": "https://t.me/cvedetector/19713", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13893 - Smartwares Cameras Telnet Service Credential Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13893 \nPublished : March 6, 2025, 2:15 p.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory.  \nFor the telnet service to be enabled, the inserted SD card needs to have a folder with a specific name created.\u00a0  \nTwo products were tested, but since the vendor has not replied to reports, patching status remains unknown, as well as groups of devices and firmware ranges in which the same password is shared.  \n Newer firmware versions might be vulnerable as well. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:11:08.000000Z"}, {"uuid": "42eb36a7-e1dc-40fa-8c40-7fd8d8ab62cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13894", "type": "seen", "source": "https://t.me/cvedetector/19714", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13894 - Smartwares Cameras Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13894 \nPublished : March 6, 2025, 2:15 p.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal.   \nWhen an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by providing paths to the files. However, the directories to which a user has access are not limited, allowing for path traversal attacks and downloading sensitive information.  \nThe vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:11:09.000000Z"}, {"uuid": "689d2d7e-db40-4bb0-a9ab-b0e061d7a720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13902", "type": "seen", "source": "https://t.me/cvedetector/19694", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13902 - Huang-yk Student-Manage Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13902 \nPublished : March 6, 2025, 10:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T13:50:32.000000Z"}, {"uuid": "611d4a7f-3fa9-4855-8a93-96a3c220e2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13892", "type": "seen", "source": "https://t.me/cvedetector/19712", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13892 - Smartwares Cameras Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13892 \nPublished : March 6, 2025, 2:15 p.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : Smartwares cameras\u00a0CIP-37210AT and\u00a0C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection.   \nDuring the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly sanitized, what allows for command injection.  \nThe vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:11:05.000000Z"}, {"uuid": "4a42a434-446e-4ccf-b899-4fb5ab84c1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13897", "type": "seen", "source": "https://t.me/cvedetector/19691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13897 - WordPress Moving Media Library Arbitrary File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13897 \nPublished : March 6, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generate_json_page function in all versions up to, and including, 1.22. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T11:20:05.000000Z"}, {"uuid": "980d3798-6066-472c-ac68-79834f990bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13868", "type": "seen", "source": "https://t.me/cvedetector/19689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13868 - WooCommerce WordPress Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13868 \nPublished : March 6, 2025, 6:15 a.m. | 1\u00a0hour, 43\u00a0minutes ago \nDescription : The URL Shortener | Conversion Tracking  | AB Testing  | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T09:39:53.000000Z"}, {"uuid": "e739ea64-e439-41f1-aa8e-3625903666db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13147", "type": "seen", "source": "https://t.me/cvedetector/19634", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13147 - Merkur Software B2B Login Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13147 \nPublished : March 5, 2025, 2:15 p.m. | 53\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Merkur Software B2B Login Panel allows SQL Injection.This issue affects B2B Login Panel: before 15.01.2025. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T16:56:39.000000Z"}, {"uuid": "c71c1aba-f5c5-4653-9998-e8197fde3e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13747", "type": "seen", "source": "https://t.me/cvedetector/19622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13747 - WooMail - WooCommerce Email Customizer SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13747 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The WooMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'template_delete_saved' function in all versions up to, and including, 3.0.34. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject SQL into an existing post deletion query. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:07.000000Z"}, {"uuid": "ae0adf0c-481a-444c-aa21-ec8394fc9060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13232", "type": "seen", "source": "https://t.me/cvedetector/19621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13232 - WordPress Awesome Import & Export Plugin SQL Injection and Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-13232 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin for WordPress is vulnerable arbitrary SQL Execution and privilege escalation due to a missing capability check on the renderImport() function in all versions up to, and including, 4.1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary SQL statements that can leveraged to create a new administrative user account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:06.000000Z"}, {"uuid": "aded8c52-0b64-474e-b036-28cd9a0d45a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13811", "type": "seen", "source": "https://t.me/cvedetector/19615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13811 - Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme Unauthenticated AJAX Action Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13811 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_import_lafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import demo data that overrides the site. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:45:55.000000Z"}, {"uuid": "cc956750-525c-454f-bc82-5a6f3836f5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13810", "type": "seen", "source": "https://t.me/cvedetector/19614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13810 - Zass WooCommerce Theme Unauthenticated AJAX Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13810 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Zass - WooCommerce Theme for Handmade Artists and Artisans theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'zass_import_zass' AJAX actions in all versions up to, and including, 3.9.9.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import demo content and overwrite the site. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:45:54.000000Z"}, {"uuid": "8ed0ba42-3e48-417b-b7d6-7adedea55a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13809", "type": "seen", "source": "https://t.me/cvedetector/19613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13809 - \"Hero Slider WordPress Slider Plugin SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13809 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Hero Slider - WordPress Slider Plugin plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:45:54.000000Z"}, {"uuid": "ec9a1e36-c040-48df-a791-00f1eb233124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13423", "type": "seen", "source": "https://t.me/cvedetector/19632", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13423 - \"Sparkling WordPress Plugin Activation/Deactivation Unauthorized Access\"\", \n  \"Content\": \"CVE ID : CVE-2024-13423 \nPublished : March 5, 2025, 12:15 p.m. | 51\u00a0minutes ago \nDescription : The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparkling_activate_plugin' and 'sparkling_deactivate_plugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to activate/deactivate arbitrary plugins. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T14:26:19.000000Z"}, {"uuid": "21d7bea9-5416-4fdd-bf57-8b4556839743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13471", "type": "seen", "source": "https://t.me/cvedetector/19626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13471 - DesignThemes WordPress File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-13471 \nPublished : March 5, 2025, 12:15 p.m. | 51\u00a0minutes ago \nDescription : The DesignThemes Core Features plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dt_process_imported_file function in all versions up to, and including, 4.7. This makes it possible for unauthenticated attackers to read arbitrary files on the underlying operating system. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T14:26:12.000000Z"}, {"uuid": "1fdd28aa-e34f-4bd7-bda5-8496eede876f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13787", "type": "seen", "source": "https://t.me/cvedetector/19617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13787 - Veda WordPress Theme PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13787 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The VEDA - MultiPurpose WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2 via deserialization of untrusted input in the 'veda_backup_and_restore_action' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:00.000000Z"}, {"uuid": "edda5b8b-4cfe-4908-a192-3a273662fa7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13780", "type": "seen", "source": "https://t.me/cvedetector/19616", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13780 - Hero Mega Menu WordPress Menu Plugin File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13780 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the hmenu_delete_menu() function in all versions up to, and including, 1.16.5. This makes it possible for unauthenticated attackers to delete arbitrary directories on the server. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:45:59.000000Z"}, {"uuid": "fc77211b-7bab-439a-8667-d6ac8fd14372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13839", "type": "seen", "source": "https://t.me/cvedetector/19611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13839 - WordPress Staff Directory Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13839 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:45:52.000000Z"}, {"uuid": "f6d63b1e-7745-47bd-b1e0-7b4eee764b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13815", "type": "seen", "source": "https://t.me/cvedetector/19610", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13815 - Listinggo WordPress Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13815 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The The Listingo theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.2.7. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:45:48.000000Z"}, {"uuid": "f935e181-2c79-4b0b-a935-48053acc419a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13351", "type": "seen", "source": "https://t.me/cvedetector/15421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13351 - \"Repuso WordPress Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13351 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rw_image_badge1' shortcode in all versions up to, and including, 5.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:54.000000Z"}, {"uuid": "e0ddf6d4-9339-431e-82b9-70e8d2fdcf28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13181", "type": "seen", "source": "https://t.me/cvedetector/15308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13181 - Ivanti Avalanche Path Traversal Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13181 \nPublished : Jan. 14, 2025, 5:15 p.m. | 36\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T19:01:23.000000Z"}, {"uuid": "5ab4f605-9274-4e86-95c6-edc9a379ceef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13180", "type": "seen", "source": "https://t.me/cvedetector/15307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13180 - Ivanti Avalanche Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13180 \nPublished : Jan. 14, 2025, 5:15 p.m. | 36\u00a0minutes ago \nDescription : Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T19:01:22.000000Z"}, {"uuid": "ffb6f9ee-93a1-4006-ab13-ceac765cdd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13775", "type": "seen", "source": "https://t.me/cvedetector/17019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13775 - WooCommerce Support Ticket System for WordPress Unauthorized Access and Data Loss Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13775 \nPublished : Feb. 1, 2025, 1:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajax_delete_message', 'ajax_get_customers_partial_list', and 'ajax_get_admins_list' functions in all versions up to, and including, 17.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts, and read names, emails, and capabilities of all users. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T16:29:03.000000Z"}, {"uuid": "3f53073a-7a16-4fa6-8238-35eae0dc50ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13699", "type": "seen", "source": "https://t.me/cvedetector/17201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13699 - \"Qi Addons For Elementor WordPress Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-13699 \nPublished : Feb. 4, 2025, 1:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018cursor\u2019 parameter in all versions up to, and including, 1.8.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in versions 1.8.5, 1.8.6, and 1.8.7. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T16:23:47.000000Z"}, {"uuid": "8cdbfec3-e276-4688-a845-9e216d09987a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13403", "type": "seen", "source": "https://t.me/cvedetector/17183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13403 - WordPress WPForms Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13403 \nPublished : Feb. 4, 2025, 9:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : The WPForms \u2013 Easy Form Builder for WordPress \u2013 Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018fieldHTML\u2019 parameter in all versions up to, and including, 1.9.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T12:13:05.000000Z"}, {"uuid": "7291ac6b-570e-4298-862d-452e9079092f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13356", "type": "seen", "source": "https://t.me/cvedetector/17182", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13356 - WordPress DSGVO All in one CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13356 \nPublished : Feb. 4, 2025, 10:15 a.m. | 47\u00a0minutes ago \nDescription : The DSGVO All in one for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6. This is due to missing or incorrect nonce validation in the user_remove_form.php file. This makes it possible for unauthenticated attackers to delete admin user accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T12:13:05.000000Z"}, {"uuid": "1e5f88a9-851f-4cb7-aa67-d6c5f09b5d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13733", "type": "seen", "source": "https://t.me/cvedetector/17180", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13733 - SKT Blocks Vulnerable to Stored Cross-Site Scripting in WordPress Page Builder\", \n  \"Content\": \"CVE ID : CVE-2024-13733 \nPublished : Feb. 4, 2025, 10:15 a.m. | 47\u00a0minutes ago \nDescription : The SKT Blocks \u2013 Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's skt-blocks/post-carousel block in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T12:13:00.000000Z"}, {"uuid": "f5af775b-4b3e-4be4-9bc8-df36924eea22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13529", "type": "seen", "source": "https://t.me/cvedetector/17179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13529 - SocialV BuddyPress Theme Unauthenticated File Download Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13529 \nPublished : Feb. 4, 2025, 10:15 a.m. | 47\u00a0minutes ago \nDescription : The SocialV - Social Network and Community BuddyPress Theme theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'socialv_send_download_file' function in all versions up to, and including, 2.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download arbitrary files from the target system. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T12:12:59.000000Z"}, {"uuid": "78b9b0ae-441b-4615-8779-7c74408ac3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13510", "type": "seen", "source": "https://t.me/cvedetector/17178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13510 - ShopSite for WordPress Cross-Site Request Forgery Attack\", \n  \"Content\": \"CVE ID : CVE-2024-13510 \nPublished : Feb. 4, 2025, 10:15 a.m. | 47\u00a0minutes ago \nDescription : The ShopSite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.10. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T12:12:58.000000Z"}, {"uuid": "02cd46f1-45c3-46ba-bde0-f58329fb91de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13114", "type": "seen", "source": "https://t.me/cvedetector/17154", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13114 - WordPress Projects Portfolio with Client Testimonials Reflected Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13114 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The WP Projects Portfolio with Client Testimonials WordPress plugin through 3.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:16.000000Z"}, {"uuid": "1ea86887-dd93-4919-b55e-bc0e64aedd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13115", "type": "seen", "source": "https://t.me/cvedetector/17153", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13115 - WordPress WP Projects Portfolio with Client Testimonials XSS Action\", \n  \"Content\": \"CVE ID : CVE-2024-13115 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The WP Projects Portfolio with Client Testimonials WordPress plugin through 3.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:16.000000Z"}, {"uuid": "b877d434-7a95-41e7-8896-9567d77a111f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13332", "type": "seen", "source": "https://t.me/cvedetector/17152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13332 - TransFinanz WordPress Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13332 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:12.000000Z"}, {"uuid": "456da244-bf79-48ae-b7b5-5225a0b3ec08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13331", "type": "seen", "source": "https://t.me/cvedetector/17151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13331 - \"WP Dream Carousel Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13331 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:11.000000Z"}, {"uuid": "e6b65182-8250-4d24-b64b-babf861bd244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13330", "type": "seen", "source": "https://t.me/cvedetector/17150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13330 - JustRows Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13330 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The JustRows free WordPress plugin through 0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:11.000000Z"}, {"uuid": "cd1aa439-bcd1-4dd1-8eb2-37ed3dcacfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13329", "type": "seen", "source": "https://t.me/cvedetector/17149", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13329 - Solidres WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13329 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The Solidres  WordPress plugin through 0.9.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:10.000000Z"}, {"uuid": "5b10ee52-73ed-4f92-874f-561037ac7c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13651", "type": "seen", "source": "https://t.me/cvedetector/17003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13651 - WordPress RapidLoad Unauthorized Data Modification Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13651 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The RapidLoad \u2013 Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_deactivate() function in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset some of the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:31.000000Z"}, {"uuid": "efa381ee-5c99-41e4-860d-c48d14c1e9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13328", "type": "seen", "source": "https://t.me/cvedetector/17148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13328 - Giga Messenger WordPress Plugin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13328 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The Giga Messenger  WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:09.000000Z"}, {"uuid": "a196d57b-1ead-4cf5-b7b1-f702ccb812e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13327", "type": "seen", "source": "https://t.me/cvedetector/17147", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13327 - Musicbox WordPress Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13327 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The Musicbox WordPress plugin through 2.0.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:06.000000Z"}, {"uuid": "bc6479aa-a58d-4ebc-8c02-cdd421c61fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "seen", "source": "https://t.me/cvedetector/17146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13326 - iBuildApp WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13326 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:05.000000Z"}, {"uuid": "dced3115-e54a-47df-8c0b-26938dde6461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13325", "type": "seen", "source": "https://t.me/cvedetector/17145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13325 - Glossy WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13325 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The Glossy WordPress plugin through 2.3.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:04.000000Z"}, {"uuid": "20ed636c-3e11-424f-a629-3eed846b2dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13547", "type": "seen", "source": "https://t.me/cvedetector/17005", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13547 - aThemes Addons for Elementor Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13547 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:35.000000Z"}, {"uuid": "f7e8996d-c9d1-4830-a171-6f938c1cac18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13347", "type": "seen", "source": "https://t.me/cvedetector/17056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13347 - WordPress Essential WP Real Estate Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13347 \nPublished : Feb. 3, 2025, 6:15 a.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T09:27:14.000000Z"}, {"uuid": "27524167-b9cb-42c9-b639-cd213eba72b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13425", "type": "seen", "source": "https://t.me/cvedetector/17010", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13425 - WordPress WP Job Portal Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-13425 \nPublished : Feb. 1, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the enforcedelete() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Employer-level access and above, to delete other users companies. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:53.000000Z"}, {"uuid": "c03d2275-93cc-498a-80ad-b3ed1faa9ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13372", "type": "seen", "source": "https://t.me/cvedetector/17009", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13372 - WordPress WP Job Portal Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-13372 \nPublished : Feb. 1, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the getresumefiledownloadbyid() and getallresumefiles() functions due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to download users resumes without the appropriate authorization to do so. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:52.000000Z"}, {"uuid": "8129e106-665e-4037-8373-da31dafdebf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13428", "type": "seen", "source": "https://t.me/cvedetector/17008", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13428 - Ac wnJobs \u2013 Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13428 \nPublished : Feb. 1, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the deleteCompanyLogo() due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to delete arbitrary company logos. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:51.000000Z"}, {"uuid": "8fb8c802-ea3c-47ce-9d7d-9006a8ec455b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13612", "type": "seen", "source": "https://t.me/cvedetector/17020", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13612 - Better Messages WordPress Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13612 \nPublished : Feb. 1, 2025, 1:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : The Better Messages \u2013 Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'better_messages_live_chat_button' shortcode in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T16:29:04.000000Z"}, {"uuid": "e4a2ba18-aa4f-48ae-b4e2-e76ef8afcb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13444", "type": "seen", "source": "https://t.me/cvedetector/15919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13444 - WordPress wp-greet CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13444 \nPublished : Jan. 21, 2025, 11:15 a.m. | 29\u00a0minutes ago \nDescription : The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T12:46:39.000000Z"}, {"uuid": "f69a9260-bb65-4f5d-a235-bdd90395ccb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13230", "type": "seen", "source": "https://t.me/cvedetector/15918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13230 - WordPress Super Socializer Limited SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13230 \nPublished : Jan. 21, 2025, 11:15 a.m. | 29\u00a0minutes ago \nDescription : The Social Share, Social Login and Social Comments Plugin \u2013 Super Socializer plugin for WordPress is vulnerable to Limited SQL Injection via the \u2018SuperSocializerKey\u2019 parameter in all versions up to, and including, 7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional values into the already existing query that can be used to extract user metadata from the database. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T12:46:38.000000Z"}, {"uuid": "805f11a3-4f36-4a8c-bb25-792c3ee498a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13341", "type": "seen", "source": "https://t.me/cvedetector/17015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13341 - MultiLoca WooCommerce Multi Locations Inventory Management Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13341 \nPublished : Feb. 1, 2025, 7:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:59.000000Z"}, {"uuid": "6c17cccf-a21f-41db-9b11-c1b2077448cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13371", "type": "seen", "source": "https://t.me/cvedetector/17011", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13371 - WordPress Job Portal - Mail Server Email Sending Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-13371 \nPublished : Feb. 1, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker() function in all versions up to, and including, 2.2.6. This makes it possible for unauthenticated attackers to send arbitrary emails with arbitrary content from the sites mail server. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:53.000000Z"}, {"uuid": "71878a01-5857-410a-8aaf-7e5f7f2400dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13098", "type": "seen", "source": "https://t.me/cvedetector/16989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13098 - WordPress Email Newsletter Plugin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13098 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:14.000000Z"}, {"uuid": "9cc6af65-4c56-4689-b09c-b55292353354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13429", "type": "seen", "source": "https://t.me/cvedetector/17007", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13429 - \"WP Job Portal Missing Validation Insecure Direct Object Reference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13429 \nPublished : Feb. 1, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 via the 'jobenforcedelete' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with employer-level access and above, to delete arbitrary \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:51.000000Z"}, {"uuid": "14a2344e-ff3c-4c72-bac1-73b89ff56d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13343", "type": "seen", "source": "https://t.me/cvedetector/17002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13343 - WooCommerce Customers Manager Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13343 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_assign_new_roles() function in all versions up to, and including, 31.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:30.000000Z"}, {"uuid": "bf12d3b9-65d0-4df1-9cf6-1d1b9c28cfe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13097", "type": "seen", "source": "https://t.me/cvedetector/16995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13097 - WordPress Finance Plugin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13097 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:22.000000Z"}, {"uuid": "973b42ae-21fd-41d3-904b-fc8eefd4d1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13096", "type": "seen", "source": "https://t.me/cvedetector/16994", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13096 - WordPress Finance CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-13096 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:21.000000Z"}, {"uuid": "ec972eb9-76b1-4e32-bf08-cf743664de58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13099", "type": "seen", "source": "https://t.me/cvedetector/16991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13099 - Widget4Call WordPress Plugin Reflected Cross-Site Scripting Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-13099 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:16.000000Z"}, {"uuid": "c29c54c0-f5d3-45a0-a861-459563bbc2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13454", "type": "seen", "source": "https://t.me/cvedetector/15904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13454 - Easy-RSA Weak Private Key Encryption\", \n  \"Content\": \"CVE ID : CVE-2024-13454 \nPublished : Jan. 20, 2025, 9:15 p.m. | 41\u00a0minutes ago \nDescription : Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-20T23:24:20.000000Z"}, {"uuid": "06a621f9-7f8e-41c9-8d98-425db9e644d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13404", "type": "seen", "source": "https://t.me/cvedetector/15914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13404 - WordPress Link Library Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13404 \nPublished : Jan. 21, 2025, 10:15 a.m. | 38\u00a0minutes ago \nDescription : The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T11:56:28.000000Z"}, {"uuid": "da489edc-e855-47a5-9497-d277068d6ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13385", "type": "seen", "source": "https://t.me/cvedetector/15792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13385 - JSM Screenshot Machine Shortcode WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13385 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The JSM Screenshot Machine Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ssm' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:32.000000Z"}, {"uuid": "f7ff8ca5-62ae-4d21-b85b-0f46b06c91e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13519", "type": "seen", "source": "https://t.me/cvedetector/15788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13519 - MarketKing (WordPress) - Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13519 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The MarketKing \u2014 Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.9.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Shop Manager-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:26.000000Z"}, {"uuid": "1c0761b0-d25a-41b8-a03c-7d323888c372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13517", "type": "seen", "source": "https://t.me/cvedetector/15787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13517 - Easy Digital Downloads Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13517 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title value in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:25.000000Z"}, {"uuid": "e44ab476-2c79-41cf-8ad3-f13223e329cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13536", "type": "seen", "source": "https://t.me/cvedetector/15908", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13536 - NexusGroup Mortgage Application Plugin Full Path Disclosure Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-13536 \nPublished : Jan. 21, 2025, 5:15 a.m. | 34\u00a0minutes ago \nDescription : The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T06:55:49.000000Z"}, {"uuid": "9d36cfe2-0f94-4f64-bac4-eeafcfbe830c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13176", "type": "seen", "source": "https://t.me/cvedetector/15888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13176 - \"Apache ECDSA Timing Key Disclosure Attack\"\", \n  \"Content\": \"CVE ID : CVE-2024-13176 \nPublished : Jan. 20, 2025, 2:15 p.m. | 31\u00a0minutes ago \nDescription : Issue summary: A timing side-channel which could potentially allow recovering  \nthe private key exists in the ECDSA signature computation.  \n  \nImpact summary: A timing side-channel in ECDSA signature computations  \ncould allow recovering the private key by an attacker. However, measuring  \nthe timing would require either local access to the signing application or  \na very fast network connection with low latency.  \n  \nThere is a timing signal of around 300 nanoseconds when the top word of  \nthe inverted ECDSA nonce value is zero. This can happen with significant  \nprobability only for some of the supported elliptic curves. In particular  \nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker  \nprocess must either be located in the same physical computer or must  \nhave a very fast network connection with low latency. For that reason  \nthe severity of this vulnerability is Low. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-20T15:52:50.000000Z"}, {"uuid": "2e8882ab-7406-4b68-89de-41923fc3141b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13524", "type": "seen", "source": "https://t.me/cvedetector/15878", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13524 - OBS Studio Windows Local Privilege Escalation Search Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13524 \nPublished : Jan. 20, 2025, 3:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. It is recommended to apply a patch to fix this issue. The vendor disagrees that this issue is \"something worth reporting, as every attack surface requires privileged access/user compromise\". \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-20T05:01:05.000000Z"}, {"uuid": "a4b131b6-994f-445b-b87b-ddf8ccd89310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13355", "type": "seen", "source": "https://t.me/cvedetector/15577", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13355 - WooCommerce OrderConvo File Upload Validation Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13355 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to limited file uploads due to insufficient file type validation in the upload_file() function in all versions up to, and including, 13.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files on the affected site's server which may make remote code execution possible and is confirmed to make Cross-Site Scripting possible. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:14.000000Z"}, {"uuid": "52cb878f-96d2-44fd-bf31-72c9f95ae81a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13393", "type": "seen", "source": "https://t.me/cvedetector/15794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13393 - WordPress Video Share VOD Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13393 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The Video Share VOD \u2013 Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_videos' shortcode in all versions up to, and including, 2.6.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:33.000000Z"}, {"uuid": "789b9f28-b4ab-458d-a34a-918e2465d5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13432", "type": "seen", "source": "https://t.me/cvedetector/15795", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13432 - WordPress Webcamconsult CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13432 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The Webcamconsult plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:37.000000Z"}, {"uuid": "fefa06ba-a495-4738-9efc-b25a67fcccc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13391", "type": "seen", "source": "https://t.me/cvedetector/15793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13391 - WordPress MicroPayments Fans Paid Creator Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13391 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The MicroPayments \u2013 Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_content_upload_guest' shortcode in all versions up to, and including, 2.9.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:32.000000Z"}, {"uuid": "8cd32925-174b-4eac-bf61-468d92442ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13333", "type": "seen", "source": "https://t.me/cvedetector/15682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13333 - WordPress Advanced File Manager Plugin Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13333 \nPublished : Jan. 17, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above and upload permissions granted by an administrator, to upload arbitrary files on the affected site's server which may make remote code execution possible. The function can be exploited only if the \"Display .htaccess?\" setting is enabled. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T08:25:44.000000Z"}, {"uuid": "55e706a2-21b8-462f-868e-5b9fae31a75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13317", "type": "seen", "source": "https://t.me/cvedetector/15791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13317 - \"ShipWorks Connector for Woocommerce CSRF Vulnerability in WordPress\"\", \n  \"Content\": \"CVE ID : CVE-2024-13317 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The ShipWorks Connector for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.5. This is due to missing or incorrect nonce validation on the 'shipworks-wordpress' page. This makes it possible for unauthenticated attackers to update the services username and password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:31.000000Z"}, {"uuid": "9f46fdcf-2456-41ad-a797-17f6b45c7289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13433", "type": "seen", "source": "https://t.me/cvedetector/15785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13433 - \"Wordpress Utilities for MTG Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13433 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:23.000000Z"}, {"uuid": "2b5cfb87-76e8-4dcf-b3f0-6f5893d7d4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13516", "type": "seen", "source": "https://t.me/cvedetector/15781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13516 - Kubio AI Page Builder WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13516 \nPublished : Jan. 18, 2025, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T07:52:14.000000Z"}, {"uuid": "349c9e45-9ffe-44b2-b3e9-0cbb38aba2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13184", "type": "seen", "source": "https://t.me/cvedetector/15800", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13184 - WordPress Toolkit - WP Extended SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13184 \nPublished : Jan. 18, 2025, 9:15 a.m. | 42\u00a0minutes ago \nDescription : The The Ultimate WordPress Toolkit \u2013 WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T11:13:07.000000Z"}, {"uuid": "8c37bda6-8054-434a-8aca-dff4006e66a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "seen", "source": "https://t.me/cvedetector/15799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13375 - \"Adifier System WordPress Plugin Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-13375 \nPublished : Jan. 18, 2025, 9:15 a.m. | 42\u00a0minutes ago \nDescription : The Adifier System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.1.7. This is due to the plugin not properly validating a user's identity prior to updating their details like password through the adifier_recover() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T11:13:06.000000Z"}, {"uuid": "e0a52712-7ded-4d76-a57f-abd43c87fc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13392", "type": "seen", "source": "https://t.me/cvedetector/15797", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13392 - Apache WordPress Stored Cross-Site Scripting in Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings Plugin\", \n  \"Content\": \"CVE ID : CVE-2024-13392 \nPublished : Jan. 18, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : The Rate Star Review Vote \u2013 AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_reviews' shortcode in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T10:22:54.000000Z"}, {"uuid": "98054495-2c39-4769-8a79-3abc256d4599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13515", "type": "seen", "source": "https://t.me/cvedetector/15784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13515 - WordPress Image Source Control Lite Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13515 \nPublished : Jan. 18, 2025, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The Image Source Control Lite \u2013 Show Image Credits and Captions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'path' parameter in all versions up to, and including, 2.28.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T07:52:19.000000Z"}, {"uuid": "b5dfd7c2-c9f6-4737-8698-8418275372de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13378", "type": "seen", "source": "https://t.me/cvedetector/15697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13378 - \"Gravity Forms Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13378 \nPublished : Jan. 17, 2025, 10:15 a.m. | 22\u00a0minutes ago \nDescription : The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018style_settings\u2019 parameter in versions 2.9.0.1 up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The attack is only successful in the Chrome web browser, and requires directly browsing the media file via the attachment post. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T11:46:28.000000Z"}, {"uuid": "a74b2caf-cba9-4d3b-a383-1fbbaf9cd384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13377", "type": "seen", "source": "https://t.me/cvedetector/15696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13377 - \"Gravity Forms Stored Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-13377 \nPublished : Jan. 17, 2025, 10:15 a.m. | 22\u00a0minutes ago \nDescription : The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018alt\u2019 parameter in all versions up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T11:46:27.000000Z"}, {"uuid": "87fad2b8-af77-4df6-9a4b-6fa2c9de1f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13026", "type": "seen", "source": "https://t.me/cvedetector/15737", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13026 - \"Algo Edge Navify Algorithm Suite Authentication Token Manipulation\"\", \n  \"Content\": \"CVE ID : CVE-2024-13026 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify\u00ae Algorithm Suite.  The vulnerability impacts the authentication mechanism of this component and could allow an attacker with adjacent access to the laboratory network and the Algo Edge system to craft valid authentication tokens and access the component. Other components of navify\u00ae Algorithm Suite are not affected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:57.000000Z"}, {"uuid": "7c677248-b336-4d42-a479-29495d2d52b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13503", "type": "seen", "source": "https://t.me/cvedetector/15705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13503 - Newtec NTC2218, NTC2250, NTC2299 Classic Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-13503 \nPublished : Jan. 17, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM (Updating signaling process in the swdownload binary modules) allows Local Execution of Code, Remote Code Inclusion.  \nThis issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The issue is both present on the PowerPC versions of the modem and the ARM versions.  \n  \nA stack buffer buffer overflow in the swdownload binary allows attackers to execute arbitrary code. The parse_INFO function uses an unrestricted `sscanf` to read a string of an incoming network packet into a statically sized buffer. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T15:57:22.000000Z"}, {"uuid": "e42875b2-1252-4023-bb15-0b145a350730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13502", "type": "seen", "source": "https://t.me/cvedetector/15704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13502 - Newtec/iDirect iDirect NTC2218, NTC2250, NTC2299 OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13502 \nPublished : Jan. 17, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19.  \n  \n  \nThe `commit_multicast` page used to configure multicasts in the modem's web administration interface uses improperly parses incoming data from the request before passing it to an `eval` statement in a bash script. This allows attackers to inject arbitrary shell commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T15:57:21.000000Z"}, {"uuid": "6bd386d3-3b38-473a-851d-d7bdb7436f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13366", "type": "seen", "source": "https://t.me/cvedetector/15690", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13366 - WordPress Sandbox Plugin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13366 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Sandbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'debug' parameter in all versions up to, and including, 0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:02.000000Z"}, {"uuid": "245ca923-1b0e-4269-90a3-673c11feb487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13386", "type": "seen", "source": "https://t.me/cvedetector/15685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13386 - WordPress Quote-Posttype-Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13386 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The quote-posttype-plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Author field in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:55.000000Z"}, {"uuid": "00f4531b-d9b4-4711-8fd4-fa123ea254c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13367", "type": "seen", "source": "https://t.me/cvedetector/15684", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13367 - \"WordPress Sandbox Plugin Unauthenticated File Download Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13367 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Sandbox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the export_download action in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download an entire copy of a sandbox environment which can contain sensitive information like the wp-config.php file. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:54.000000Z"}, {"uuid": "f52dc988-daca-46c4-bbfc-20fcdc88b940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13398", "type": "seen", "source": "https://t.me/cvedetector/15680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13398 - PayPal Checkout for WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13398 \nPublished : Jan. 17, 2025, 5:15 a.m. | 20\u00a0minutes ago \nDescription : The Checkout for PayPal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'checkout_for_paypal' shortcode in all versions up to, and including, 1.0.32 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T06:45:31.000000Z"}, {"uuid": "c2507f51-c1fc-4b04-b135-407d2b616200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13401", "type": "seen", "source": "https://t.me/cvedetector/15679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13401 - \"PayPal WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13401 \nPublished : Jan. 17, 2025, 5:15 a.m. | 20\u00a0minutes ago \nDescription : The Payment Button for PayPal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_paypal_checkout' shortcode in all versions up to, and including, 1.2.3.35 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T06:45:31.000000Z"}, {"uuid": "00899658-1b7c-43e5-b491-89c9ece312e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13434", "type": "seen", "source": "https://t.me/cvedetector/15678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13434 - \"WordPress WP Inventory Manager Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13434 \nPublished : Jan. 17, 2025, 5:15 a.m. | 20\u00a0minutes ago \nDescription : The WP Inventory Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T06:45:30.000000Z"}, {"uuid": "1649d678-70f8-4232-bb66-04da1bc6fb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13387", "type": "seen", "source": "https://t.me/cvedetector/15573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13387 - WordPress Responsive Tabs Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13387 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:10.000000Z"}, {"uuid": "8cdc0d0e-4775-4da0-b8d5-e943266b38a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13135", "type": "seen", "source": "https://t.me/cvedetector/14298", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13135 - Emlog Pro Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13135 \nPublished : Jan. 5, 2025, 9:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T10:49:37.000000Z"}, {"uuid": "1a1d9941-18c8-4468-b7d4-58e62ad669e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13136", "type": "seen", "source": "https://t.me/cvedetector/14297", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13136 - Wangl1989 Mysiteforme Remote Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13136 \nPublished : Jan. 5, 2025, 9:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the file src/main/java/com/mysiteforme/admin/config/ShiroConfig.java. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T10:49:37.000000Z"}, {"uuid": "c0fece4b-5c93-4097-9409-c7f61a57b202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13134", "type": "seen", "source": "https://t.me/cvedetector/14296", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13134 - ZeroWdd Studentmanager Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13134 \nPublished : Jan. 5, 2025, 8:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T09:59:25.000000Z"}, {"uuid": "93d76b70-647f-4d16-ad5c-9fa07cec97b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13300", "type": "seen", "source": "https://t.me/cvedetector/14940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13300 - Drupal Print Anything Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13300 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Vulnerability in Drupal Print Anything.This issue affects Print Anything: *.*. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:19.000000Z"}, {"uuid": "9268f334-f016-4097-af2e-910660e2e676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13299", "type": "seen", "source": "https://t.me/cvedetector/14939", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13299 - \"Drupal Megamenu Framework: Remote Code Execution\"\", \n  \"Content\": \"CVE ID : CVE-2024-13299 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework: *.*. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:18.000000Z"}, {"uuid": "e46e8f03-a7d3-4676-b9e3-cb72adf85cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13298", "type": "seen", "source": "https://t.me/cvedetector/14938", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13298 - Drupal Tarte au Citron Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13298 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting (XSS).This issue affects Tarte au Citron: from 2.0.0 before 2.0.5. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:17.000000Z"}, {"uuid": "6973a6bf-6245-40e9-a246-cad69a896178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13297", "type": "seen", "source": "https://t.me/cvedetector/14937", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13297 - Drupal Eloqua Object Injection Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13297 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X-* before 7.X-1.15. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:17.000000Z"}, {"uuid": "73c53cf0-65a7-43e5-ab79-a22840cb4df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13422", "type": "seen", "source": "https://t.me/cvedetector/16178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13422 - \"SEO Blogger to WordPress Migration Plugin (Reflected Cross-Site Scripting)\"\", \n  \"Content\": \"CVE ID : CVE-2024-13422 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 0.4.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:04.000000Z"}, {"uuid": "e90731ad-f4ba-42ef-9f75-ea18f6a3e864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13389", "type": "seen", "source": "https://t.me/cvedetector/16177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13389 - \"WordPress Cliptakes Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13389 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The Cliptakes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cliptakes_input_email' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:03.000000Z"}, {"uuid": "b65bff5d-cb16-4272-b63c-fe46d35935f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://t.me/cvedetector/14321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13145 - Zhenfeng13 My-Blog Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13145 \nPublished : Jan. 6, 2025, 1:15 a.m. | 19\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T02:42:40.000000Z"}, {"uuid": "e378582f-7276-4305-a49d-8888d0079fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://t.me/cvedetector/14320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13144 - Zhenfeng13 My-Blog File Upload Vulnerability (Unrestricted File Upload)\", \n  \"Content\": \"CVE ID : CVE-2024-13144 \nPublished : Jan. 6, 2025, 12:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T01:52:30.000000Z"}, {"uuid": "7bd7316c-7562-45f9-b412-8b24c3b4be33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://t.me/cvedetector/14319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13143 - ZeroWdd Studentmanager Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13143 \nPublished : Jan. 6, 2025, 12:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T01:52:29.000000Z"}, {"uuid": "5c9442bb-ab42-4fff-9329-0c805ad1822a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://t.me/cvedetector/14318", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13142 - ZeroWd StudentManager Remote Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13142 \nPublished : Jan. 5, 2025, 11:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T01:02:22.000000Z"}, {"uuid": "b944ed50-b68a-4ff5-b0b8-f268335f3487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://t.me/cvedetector/14304", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13141 - \"osuuu LightPicture Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13141 \nPublished : Jan. 5, 2025, 3:15 p.m. | 18\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T16:40:35.000000Z"}, {"uuid": "1b2e5470-733a-4943-91f1-583914ce099f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://t.me/cvedetector/14302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13140 - Emlog Pro Cross-Site Scripting Vulnerability in Cover Upload Handler\", \n  \"Content\": \"CVE ID : CVE-2024-13140 \nPublished : Jan. 5, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T14:10:10.000000Z"}, {"uuid": "2153a5ca-9253-4293-8245-88627ef46f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13139", "type": "seen", "source": "https://t.me/cvedetector/14300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13139 - Wangl1989 Mysiteforme SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13139 \nPublished : Jan. 5, 2025, 11:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main/java/com/mysiteform/admin/controller/system/FileController. The manipulation of the argument content leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T13:20:04.000000Z"}, {"uuid": "1477e326-8349-4f1d-890a-446566e6ed83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13138", "type": "seen", "source": "https://t.me/cvedetector/14301", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13138 - Wangl1989 MySiteForMe Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13138 \nPublished : Jan. 5, 2025, 11:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/LocalUploadServiceImpl. The manipulation of the argument test leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T13:20:04.000000Z"}, {"uuid": "a0d259de-98a8-4859-9d34-ad026f1f14ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13137", "type": "seen", "source": "https://t.me/cvedetector/14299", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13137 - Wangl1989 MySiteforme Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13137 \nPublished : Jan. 5, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T11:39:48.000000Z"}, {"uuid": "0874f905-5bd2-4585-a0a8-a5737cb3e6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13132", "type": "seen", "source": "https://t.me/cvedetector/14294", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13132 - Emlog Pro Cross-Site Scripting Vulnerability in Subpage Handler\", \n  \"Content\": \"CVE ID : CVE-2024-13132 \nPublished : Jan. 5, 2025, 5:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T06:38:44.000000Z"}, {"uuid": "f791abb0-f88b-4826-a815-d5bcacee7f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13133", "type": "seen", "source": "https://t.me/cvedetector/14293", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13133 - ZeroWdd Studentmanager Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13133 \nPublished : Jan. 5, 2025, 5:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T06:38:43.000000Z"}, {"uuid": "ff607cca-56f8-4077-9fe4-93710f0cd00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13131", "type": "seen", "source": "https://t.me/cvedetector/14292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13131 - Dahua Web Interface Information Disclosure vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13131 \nPublished : Jan. 5, 2025, 3:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T04:58:22.000000Z"}, {"uuid": "fef25955-d3f3-40cb-8186-856085af07be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13130", "type": "seen", "source": "https://t.me/cvedetector/14291", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13130 - Dahua Web Interface Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13130 \nPublished : Jan. 5, 2025, 1:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T03:18:01.000000Z"}, {"uuid": "b74c6c2e-7388-499b-9378-457cebcdc5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13091", "type": "seen", "source": "https://t.me/cvedetector/16062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13091 - \"Wordpress WPBot Pro Remote File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13091 \nPublished : Jan. 22, 2025, 12:15 a.m. | 41\u00a0minutes ago \nDescription : The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and including, 13.5.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The exploit requires thee ChatBot Conversational Forms plugin and the Conversational Form Builder Pro addon plugin. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T02:11:13.000000Z"}, {"uuid": "9e7793b0-86b4-4faa-b70b-53599e0cf47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13129", "type": "seen", "source": "https://t.me/cvedetector/14246", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13129 - \"Roxy-WI OS Command Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13129 \nPublished : Jan. 3, 2025, 10:15 p.m. | 19\u00a0minutes ago \nDescription : A vulnerability was found in Roxy-WI up to 8.1.3. It has been declared as critical. Affected by this vulnerability is the function action_service of the file app/modules/roxywi/roxy.py. The manipulation of the argument action/service leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.1.4 is able to address this issue. The identifier of the patch is 32313928eb9ce906887b8a30bf7b9a3d5c0de1be. It is recommended to upgrade the affected component. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-03T23:42:37.000000Z"}, {"uuid": "24cf38de-193e-45b6-a21d-9faab55b5c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13447", "type": "seen", "source": "https://t.me/cvedetector/16090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13447 - WordPress WP Hotel Booking Unauthenticated Subscriber Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13447 \nPublished : Jan. 22, 2025, 11:15 a.m. | 45\u00a0minutes ago \nDescription : The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hotel_booking_load_order_user AJAX action in all versions up to, and including, 2.1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve a list of registered user emails. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T13:02:58.000000Z"}, {"uuid": "99872952-c07b-481a-b347-d3d8c80963c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13340", "type": "seen", "source": "https://t.me/cvedetector/16182", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13340 - WordPress MDTF - Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13340 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The MDTF \u2013 Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdf_results_by_ajax' shortcode in all versions up to, and including, 1.3.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:11.000000Z"}, {"uuid": "d714e2ce-d115-4a5f-b8bd-01044ccb7119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13236", "type": "seen", "source": "https://t.me/cvedetector/16181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13236 - Tainacan WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13236 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.21.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:07.000000Z"}, {"uuid": "053b82e3-037f-4763-8e46-f50a0a770ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13234", "type": "seen", "source": "https://t.me/cvedetector/16173", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13234 - WordPress WBW Product Table SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13234 \nPublished : Jan. 23, 2025, 11:15 a.m. | 42\u00a0minutes ago \nDescription : The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T13:17:51.000000Z"}, {"uuid": "0d33112e-ecd6-4ed8-b66c-0eb15f68d385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13282", "type": "seen", "source": "https://t.me/cvedetector/14910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13282 - Drupal Block Forced Browsing Insufficient Authorization\", \n  \"Content\": \"CVE ID : CVE-2024-13282 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:29.000000Z"}, {"uuid": "62445007-1c30-4dce-9ee4-9d1efacbc00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13511", "type": "seen", "source": "https://t.me/cvedetector/16169", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13511 - WooCommerce Variation Swatches CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13511 \nPublished : Jan. 23, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality. The issue exists in the settings_init() function, which processes a reset action based on specific query parameters in the URL. The related delete_settings() function performs a faulty nonce validation check, making the reset operation insecure and susceptible to unauthorized access. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T11:37:38.000000Z"}, {"uuid": "86fe43e0-4578-4104-b2e3-d7fb526f5d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13593", "type": "seen", "source": "https://t.me/cvedetector/16168", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13593 - WordPress BMLT Meeting Map Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13593 \nPublished : Jan. 23, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The BMLT Meeting Map plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.0 via the 'bmlt_meeting_map' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T11:37:37.000000Z"}, {"uuid": "c24497a6-a46d-4e8c-889e-365dad5b50e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13499", "type": "seen", "source": "https://t.me/cvedetector/16089", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13499 - GamiPress WordPress Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13499 \nPublished : Jan. 22, 2025, 11:15 a.m. | 45\u00a0minutes ago \nDescription : The The GamiPress \u2013 Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_do_shortcode() function in all versions up to, and including, 7.2.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T13:02:57.000000Z"}, {"uuid": "cdbb6bd7-7f84-4813-b20e-0bbcf882d0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13496", "type": "seen", "source": "https://t.me/cvedetector/16088", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13496 - GamiPress WordPress Plugin Time-Based SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13496 \nPublished : Jan. 22, 2025, 11:15 a.m. | 45\u00a0minutes ago \nDescription : The GamiPress \u2013 Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018orderby\u2019 parameter in all versions up to, and including, 7.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T13:02:56.000000Z"}, {"uuid": "015489fc-f392-41ea-8d1d-8bc8bfabf590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13495", "type": "seen", "source": "https://t.me/cvedetector/16087", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13495 - WordPress GamiPress Plugin Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13495 \nPublished : Jan. 22, 2025, 11:15 a.m. | 45\u00a0minutes ago \nDescription : The The GamiPress \u2013 Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipress_ajax_get_logs() function in all versions up to, and including, 7.2.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T13:02:55.000000Z"}, {"uuid": "7a40c77a-ea3b-4ca6-81d5-3fd12c231b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13361", "type": "seen", "source": "https://t.me/cvedetector/16085", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13361 - WordPress Complete AI Pack Plugin Cross-Site Scripting (XSS) and Unauthenticated File Upload\", \n  \"Content\": \"CVE ID : CVE-2024-13361 \nPublished : Jan. 22, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload image files and embed shortcode attributes in the image_alt value that will execute when sending a POST request to the attachment page. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T09:42:32.000000Z"}, {"uuid": "4b0b8ae4-7018-4513-add2-73ad5cde2b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13360", "type": "seen", "source": "https://t.me/cvedetector/16084", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13360 - WordPress AI Power: Complete AI Pack SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13360 \nPublished : Jan. 22, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector(). This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T09:42:31.000000Z"}, {"uuid": "30ec1fae-14a1-457d-b417-719e9658f4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13319", "type": "seen", "source": "https://t.me/cvedetector/16083", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13319 - Themify Builder WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13319 \nPublished : Jan. 22, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 7.6.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T09:42:31.000000Z"}, {"uuid": "bd6f7ff8-913e-4222-b10e-52a5bab6a6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13275", "type": "seen", "source": "https://t.me/cvedetector/14919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13275 - Drupal Security Kit Type Confusion HTTP DoS\", \n  \"Content\": \"CVE ID : CVE-2024-13275 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:42.000000Z"}, {"uuid": "02545a85-befd-487c-8993-5f138f282117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13272", "type": "seen", "source": "https://t.me/cvedetector/14918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13272 - Drupal Paragraphs Table Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13272 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:41.000000Z"}, {"uuid": "c995f1a9-3627-4bc8-8be3-0caed12acd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13406", "type": "seen", "source": "https://t.me/cvedetector/16078", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13406 - Google Merchant Center Plugin for WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13406 \nPublished : Jan. 22, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feed_id' parameter in all versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T08:52:24.000000Z"}, {"uuid": "93a6daff-0676-41c8-80b8-939e6f7e6492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13584", "type": "seen", "source": "https://t.me/cvedetector/16072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13584 - Wordpress Picture Gallery Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13584 \nPublished : Jan. 22, 2025, 4:15 a.m. | 37\u00a0minutes ago \nDescription : The Picture Gallery \u2013 Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_pictures' shortcode in all versions up to, and including, 1.5.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T06:21:56.000000Z"}, {"uuid": "09be408e-5b79-4033-ac0b-9da83475685a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13590", "type": "seen", "source": "https://t.me/cvedetector/16071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13590 - WordPress Ketchup Shortcodes Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13590 \nPublished : Jan. 22, 2025, 4:15 a.m. | 37\u00a0minutes ago \nDescription : The Ketchup Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spacer' shortcode in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T06:21:55.000000Z"}, {"uuid": "c7563152-9659-449e-a759-f41a166beb89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13426", "type": "seen", "source": "https://t.me/cvedetector/16070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13426 - WordPress WP-Polls Stored Cross-Site Scripting (SQL Injection)\", \n  \"Content\": \"CVE ID : CVE-2024-13426 \nPublished : Jan. 22, 2025, 3:15 a.m. | 24\u00a0minutes ago \nDescription : The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries. Those queries are stored and results are not displayed to the attacker, which means they cannot be exploited to obtain any additional information about the database. However, a properly configured payload allows for the injection of malicious JavaScript resulting in Stored Cross-Site Scripting. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T04:41:43.000000Z"}, {"uuid": "d304a5f2-088d-4724-96a2-b2c0cdf15f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://t.me/cvedetector/14889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13259 - \"Drupal Image Sizes Sensitive Information Insertion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13259 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:57.000000Z"}, {"uuid": "048d5f55-e25b-45c7-9b3a-9eac0632a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://t.me/cvedetector/14888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13258 - \"Drupal JSON API Unauthorized Access\"\", \n  \"Content\": \"CVE ID : CVE-2024-13258 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:56.000000Z"}, {"uuid": "01313ff3-019c-4d2b-83fa-32e85da5aec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://t.me/cvedetector/14887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13257 - Drupal Commerce Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-13257 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:56.000000Z"}, {"uuid": "1d4ce23c-3cde-45eb-98bb-58ed07975c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://t.me/cvedetector/14886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13256 - Drupal Email Contact Access Bypass Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-13256 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:55.000000Z"}, {"uuid": "8b8f4490-315e-481e-891e-b34a857c2603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://t.me/cvedetector/14885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13255 - Drupal RESTful Web Services Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13255 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:51.000000Z"}, {"uuid": "57d99805-cc90-48ce-b8d7-4dfe484d31ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13296", "type": "seen", "source": "https://t.me/cvedetector/14936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13296 - Drupal Mailjet Deserialization of Untrusted Data Object Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13296 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:16.000000Z"}, {"uuid": "3d7f5ba6-c991-4f62-bc31-b82ab96a4d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13318", "type": "seen", "source": "https://t.me/cvedetector/14953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13318 - \"WP Real Estate Unauthorized Access Denial of Service\"\", \n  \"Content\": \"CVE ID : CVE-2024-13318 \nPublished : Jan. 10, 2025, 12:15 p.m. | 26\u00a0minutes ago \nDescription : The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary pages and posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T13:50:03.000000Z"}, {"uuid": "db9f857b-e5cc-415f-ac25-21c8721b4ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13183", "type": "seen", "source": "https://t.me/cvedetector/14951", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13183 - \"Orbit Fox by ThemeIsle Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13183 \nPublished : Jan. 10, 2025, 8:15 a.m. | 22\u00a0minutes ago \nDescription : The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018title_tag\u2019 parameter in all versions up to, and including, 2.10.43 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T09:39:28.000000Z"}, {"uuid": "2c3316cd-616d-4895-a518-83fb31aad704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13301", "type": "seen", "source": "https://t.me/cvedetector/14933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13301 - Drupal OAuth & OpenID Connect Single Sign On - SSO Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13301 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal OAuth & OpenID Connect Single Sign On \u2013 SSO (OAuth/OIDC Client) allows Cross-Site Scripting (XSS).This issue affects OAuth & OpenID Connect Single Sign On \u2013 SSO (OAuth/OIDC Client): from 3.0.0 before 3.44.0, from 4.0.0 before 4.0.19. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:11.000000Z"}, {"uuid": "d5da35a5-2d57-404c-b289-e052e2b25c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13311", "type": "seen", "source": "https://t.me/cvedetector/14932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13311 - Drupal File Extension Filtering Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13311 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:10.000000Z"}, {"uuid": "e5c903d9-7162-47f5-a3a5-9bf8a83ff76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13041", "type": "seen", "source": "https://t.me/cvedetector/14799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13041 - GitLab SAML Provider External Group Configuration Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13041 \nPublished : Jan. 9, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T09:23:32.000000Z"}, {"uuid": "f6d32b38-c216-4168-b653-1de531dc33a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13302", "type": "seen", "source": "https://t.me/cvedetector/14934", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13302 - Drupal Pages Restriction Access Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13302 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:11.000000Z"}, {"uuid": "e4f82b1b-554a-43e0-b45b-547f998a26df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13312", "type": "seen", "source": "https://t.me/cvedetector/14921", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13312 - Drupal Open Social Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13312 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:47:55.000000Z"}, {"uuid": "8aa8b3bb-84ee-4917-8df3-dde7a4d0978c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13274", "type": "seen", "source": "https://t.me/cvedetector/14920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13274 - Drupal Open Social Rate Limiting Attack\", \n  \"Content\": \"CVE ID : CVE-2024-13274 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:43.000000Z"}, {"uuid": "8b170bcc-6df6-4eb7-b3a1-c2c60dc2ce8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13281", "type": "seen", "source": "https://t.me/cvedetector/14915", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13281 - Drupal Monster Menus Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13281 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:36.000000Z"}, {"uuid": "9f5a0087-b043-43b2-85ee-96af28354280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13309", "type": "seen", "source": "https://t.me/cvedetector/14930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13309 - Drupal Login Disable Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13309 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:05.000000Z"}, {"uuid": "04f75c55-9a85-4039-958d-0cae06e829b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13308", "type": "seen", "source": "https://t.me/cvedetector/14929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13308 - Drupal Browser Back Button Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13308 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Back Button allows Cross-Site Scripting (XSS).This issue affects Browser Back Button: from 1.0.0 before 2.0.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:04.000000Z"}, {"uuid": "926bc930-0941-4969-b75a-141add994f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13305", "type": "seen", "source": "https://t.me/cvedetector/14928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13305 - Drupal Entity Form Steps Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13305 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Entity Form Steps allows Cross-Site Scripting (XSS).This issue affects Entity Form Steps: from 0.0.0 before 1.1.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:03.000000Z"}, {"uuid": "bc13eaa7-fcc1-4bd1-b33c-12029349efdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13304", "type": "seen", "source": "https://t.me/cvedetector/14927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13304 - Drupal Minify JS CSRF Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-13304 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:02.000000Z"}, {"uuid": "86db191f-f93e-42db-a931-c7c1ff93cdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13303", "type": "seen", "source": "https://t.me/cvedetector/14926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13303 - Drupal Download All Files Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13303 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:48:01.000000Z"}, {"uuid": "aded9f7b-9737-482a-bb60-3dbdda99a79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13287", "type": "seen", "source": "https://t.me/cvedetector/14914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13287 - Drupal Views Critical Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13287 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting (XSS).This issue affects Views SVG Animation: from 0.0.0 before 1.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:35.000000Z"}, {"uuid": "ba91b43f-0df0-4be9-8f9d-074fc426a108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13286", "type": "seen", "source": "https://t.me/cvedetector/14913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13286 - Drupal SVG Embed Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13286 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal SVG Embed allows Cross-Site Scripting (XSS).This issue affects SVG Embed: from 0.0.0 before 2.1.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:34.000000Z"}, {"uuid": "2f9b9149-cbc2-43c6-abed-fa9adec3885f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13249", "type": "seen", "source": "https://t.me/cvedetector/14900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13249 - Drupal Node Access Rebuild Progressive Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13249 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:12.000000Z"}, {"uuid": "0474c978-767e-4ce3-9f09-cfc012f60b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13273", "type": "seen", "source": "https://t.me/cvedetector/14917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13273 - Drupal Open Social Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13273 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:41.000000Z"}, {"uuid": "bbc4560a-a249-44ae-858a-d2d510db4c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13284", "type": "seen", "source": "https://t.me/cvedetector/14916", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13284 - Drupal Gutenberg CSRF Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-13284 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Drupal Gutenberg allows Cross Site Request Forgery.This issue affects Gutenberg: from 0.0.0 before 2.13.0, from 3.0.0 before 3.0.5. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:40.000000Z"}, {"uuid": "e3d35207-e0e2-41f5-9a2c-612abf9e3b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13285", "type": "seen", "source": "https://t.me/cvedetector/14912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13285 - Drupal WKHTMLTOPDF Arbitrary File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13285 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf: *.*. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:33.000000Z"}, {"uuid": "695575e0-e38b-4961-8be2-040f6bdc96a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13283", "type": "seen", "source": "https://t.me/cvedetector/14911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13283 - Drupal Facets Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13283 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:33.000000Z"}, {"uuid": "f2cb9c1a-0c7e-47e8-a3c9-b85ab9bf8843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://t.me/cvedetector/14899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13250 - Drupal Symfony Mailer Lite CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13250 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:12.000000Z"}, {"uuid": "83785fab-a7b0-45fd-9eee-2a687e90fa6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13242", "type": "seen", "source": "https://t.me/cvedetector/14898", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13242 - Drupal Swift Mailer Exposed Resource Location Spoofing\", \n  \"Content\": \"CVE ID : CVE-2024-13242 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Exposed Dangerous Method or Function vulnerability in Drupal Swift Mailer allows Resource Location Spoofing.This issue affects Swift Mailer: *.*. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:11.000000Z"}, {"uuid": "963005e3-8b7c-4c03-96a2-9c919f2519de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13248", "type": "seen", "source": "https://t.me/cvedetector/14897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13248 - Drupal Private Content Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-13248 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:10.000000Z"}, {"uuid": "d908dedb-2bb3-4199-92cc-e046aceaee16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13247", "type": "seen", "source": "https://t.me/cvedetector/14896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13247 - Drupal Coffee Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13247 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:09.000000Z"}, {"uuid": "518a5810-5249-4212-a315-56c6db1b91a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13246", "type": "seen", "source": "https://t.me/cvedetector/14895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13246 - Drupal Node Access Rebuild Progressive Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13246 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 0.0.0 before 2.0.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:05.000000Z"}, {"uuid": "7af87c98-ece0-4df7-b8aa-f414d4014a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13244", "type": "seen", "source": "https://t.me/cvedetector/14894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13244 - Drupal Migrate Tools CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13244 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate Tools allows Cross Site Request Forgery.This issue affects Migrate Tools: from 0.0.0 before 6.0.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:04.000000Z"}, {"uuid": "f2102079-6aa8-4043-bfac-2f7f7b34101b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13245", "type": "seen", "source": "https://t.me/cvedetector/14893", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13245 - Drupal CKEditor 4 XSS\", \n  \"Content\": \"CVE ID : CVE-2024-13245 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting (XSS).This issue affects CKEditor 4 LTS - WYSIWYG HTML editor: from 1.0.0 before 1.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:03.000000Z"}, {"uuid": "3589c367-3080-409c-bed3-c91c1b54789f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13243", "type": "seen", "source": "https://t.me/cvedetector/14892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13243 - \"Drupal Entity Delete Log Missing Authorization\"\", \n  \"Content\": \"CVE ID : CVE-2024-13243 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:02.000000Z"}, {"uuid": "18899566-d014-45ab-9879-57c552a2b4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://t.me/cvedetector/14891", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13252 - Drupal TacJS Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13252 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:01.000000Z"}, {"uuid": "267738f6-5b39-4f7f-9798-beb50314125f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://t.me/cvedetector/14890", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13251 - Drupal Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13251 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:58.000000Z"}, {"uuid": "37cb3def-e542-466a-88f1-858ac6e56d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://t.me/cvedetector/14884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13254 - Drupal REST Views Sensitive Information Insertion\", \n  \"Content\": \"CVE ID : CVE-2024-13254 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:50.000000Z"}, {"uuid": "1965129e-e133-4615-b7e9-5fb9d706e4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://t.me/cvedetector/14883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13253 - Drupal Advanced PWA inc Push Notifications Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13253 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:49.000000Z"}, {"uuid": "1c95eca9-dac7-4d8f-9081-69c4949c308e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13153", "type": "seen", "source": "https://t.me/cvedetector/14823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13153 - Elementor for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13153 \nPublished : Jan. 9, 2025, 9:15 a.m. | 41\u00a0minutes ago \nDescription : The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: Since the widget code isn't part of the code, to apply the patch, the affected widgets: Image Tooltip, Notification, Simple Popup, Video Play Button, and Card Carousel, must be deleted and reinstalled manually. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T11:04:22.000000Z"}, {"uuid": "17e39561-031d-4a92-be9e-76b6411347da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13193", "type": "seen", "source": "https://t.me/cvedetector/14744", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13193 - SEMCMS Image Library Management Page SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13193 \nPublished : Jan. 8, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Images.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T01:01:39.000000Z"}, {"uuid": "53be7732-c70a-4877-8cab-68f31864d3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13192", "type": "seen", "source": "https://t.me/cvedetector/14743", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13192 - ZeroWdd myblog Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13192 \nPublished : Jan. 8, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in ZeroWdd myblog 1.0. Affected is the function update of the file src/main/java/com/wdd/myblog/controller/admin/BlogController.java. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T01:01:38.000000Z"}, {"uuid": "c76fc2fe-eda1-48f5-afdf-f33ec2c312ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13189", "type": "seen", "source": "https://t.me/cvedetector/14732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13189 - ZeroWdd MyBlog Remote File Permission Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13189 \nPublished : Jan. 8, 2025, 8:15 p.m. | 15\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T21:41:01.000000Z"}, {"uuid": "721a7fb3-fe9a-4c01-a2e8-734d3bcf37f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13188", "type": "seen", "source": "https://t.me/cvedetector/14729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13188 - eScan Antivirus Installation Handler Linux Default Permission Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13188 \nPublished : Jan. 8, 2025, 7:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T20:50:56.000000Z"}, {"uuid": "dee9f433-e0e1-461d-ae3a-9222cdf76dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13206", "type": "seen", "source": "https://t.me/cvedetector/14777", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13206 - REVE Antivirus Local File Permission Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13206 \nPublished : Jan. 9, 2025, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:02:48.000000Z"}, {"uuid": "0a4f867f-c9d2-4eb3-b574-b6df043b5bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13209", "type": "seen", "source": "https://t.me/cvedetector/14775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13209 - Redaxo CMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13209 \nPublished : Jan. 9, 2025, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the component Structure Management Page. The manipulation of the argument Article Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:02:47.000000Z"}, {"uuid": "11dcdaa8-022b-4531-8071-c83d89e39256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13213", "type": "seen", "source": "https://t.me/cvedetector/14773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13213 - SingMR HouseRent Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13213 \nPublished : Jan. 9, 2025, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:02:42.000000Z"}, {"uuid": "ee9cde25-3f2a-47bb-abc5-82efa84f6c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13212", "type": "seen", "source": "https://t.me/cvedetector/14772", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13212 - SingMR HouseRent Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13212 \nPublished : Jan. 9, 2025, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in SingMR HouseRent 1.0. This affects the function singleUpload/upload of the file src/main/java/com/house/wym/controller/AddHouseController.java. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:02:42.000000Z"}, {"uuid": "dcf92a3f-6aeb-4787-b4ae-1f803b011e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13210", "type": "seen", "source": "https://t.me/cvedetector/14776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13210 - \"Donglight Bookstore File Upload Unrestricted Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13210 \nPublished : Jan. 9, 2025, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:02:47.000000Z"}, {"uuid": "48be47dc-df7a-4182-b400-ae2d534087b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13211", "type": "seen", "source": "https://t.me/cvedetector/14771", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13211 - SingMR HouseRent Remote File Include Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13211 \nPublished : Jan. 9, 2025, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminController.java. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:02:41.000000Z"}, {"uuid": "1c2c7060-dda0-4914-8bd7-29f352a7b96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13200", "type": "seen", "source": "https://t.me/cvedetector/14768", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13200 - Wander-Chu SpringBoot-Blog Remote Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13200 \nPublished : Jan. 9, 2025, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the function preHandle of the file src/main/java/com/my/blog/website/interceptor/BaseInterceptor.java of the component HTTP POST Request Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T05:12:35.000000Z"}, {"uuid": "46924856-8a04-4dfc-857f-0a551fb25486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13205", "type": "seen", "source": "https://t.me/cvedetector/14767", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13205 - Kurniaramadhan E-Commerce-PHP SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13205 \nPublished : Jan. 9, 2025, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/create_product.php of the component Create Product Page. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T05:12:31.000000Z"}, {"uuid": "b6d598b3-a74b-444f-8c55-f2cf2bdeec9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13203", "type": "seen", "source": "https://t.me/cvedetector/14766", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13203 - \"Kurniaramadhan E-Commerce-PHP CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-13203 \nPublished : Jan. 9, 2025, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T05:12:31.000000Z"}, {"uuid": "3f444e8e-701d-45e3-828e-d7630ceb7854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13202", "type": "seen", "source": "https://t.me/cvedetector/14765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13202 - Wander-Chu SpringBoot-Blog Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13202 \nPublished : Jan. 9, 2025, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in wander-chu SpringBoot-Blog 1.0 and classified as problematic. This issue affects the function modifiyArticle of the file src/main/java/com/my/blog/website/controller/admin/PageController.java of the component Blog Article Handler. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T05:12:30.000000Z"}, {"uuid": "3693e33f-9f15-4bc5-9b76-75ab3361bff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13204", "type": "seen", "source": "https://t.me/cvedetector/14764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13204 - Kurniaramadhan E-Commerce-PHP SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13204 \nPublished : Jan. 9, 2025, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blog_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T05:12:29.000000Z"}, {"uuid": "c8f3d1fb-b65c-4f25-92c0-047343d067b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13201", "type": "seen", "source": "https://t.me/cvedetector/14763", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13201 - \"Wander-Chu SpringBoot-Blog Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13201 \nPublished : Jan. 9, 2025, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability has been found in wander-chu SpringBoot-Blog 1.0 and classified as critical. This vulnerability affects the function upload of the file src/main/java/com/my/blog/website/controller/admin/AttachtController.java of the component Admin Attachment Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T05:12:29.000000Z"}, {"uuid": "e0259b28-fe80-4c5d-9a5e-4d0204a2ff28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13198", "type": "seen", "source": "https://t.me/cvedetector/14762", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13198 - Langhsu Mblog Blog System Remote File Function Response Discrepancy Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13198 \nPublished : Jan. 9, 2025, 1:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T02:42:05.000000Z"}, {"uuid": "1379498a-65b0-47fe-8864-dc2956f1e55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13187", "type": "seen", "source": "https://t.me/cvedetector/14699", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13187 - Kingsoft WPS Office TCC Handler Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13187 \nPublished : Jan. 8, 2025, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability was found in Kingsoft WPS Office 6.14.0 on macOS. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component TCC Handler. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T19:09:28.000000Z"}, {"uuid": "7c701c87-e9e6-45ac-a3b7-185ff2b3c1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13199", "type": "seen", "source": "https://t.me/cvedetector/14753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13199 - Langhsu Mblog Blog System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13199 \nPublished : Jan. 9, 2025, 1:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in langhsu Mblog Blog System 3.5.0. Affected by this vulnerability is an unknown functionality of the file /search of the component Search Bar. The manipulation of the argument kw leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T02:41:55.000000Z"}, {"uuid": "4d8f2c80-552e-4dd3-bbb8-1a6d934b4e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13197", "type": "seen", "source": "https://t.me/cvedetector/14752", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13197 - \"Donglight Bookstore Critical Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13197 \nPublished : Jan. 9, 2025, 12:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0.0. It has been rated as problematic. This issue affects the function updateUser of the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T01:51:51.000000Z"}, {"uuid": "3cb35edd-7f86-45b6-bc13-797270af4769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13195", "type": "seen", "source": "https://t.me/cvedetector/14751", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13195 - Donglight Bookstore Server-Side Request Forgery (SSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-13195 \nPublished : Jan. 9, 2025, 12:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T01:51:51.000000Z"}, {"uuid": "475094ed-1973-493c-bb42-d3e060347a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13196", "type": "seen", "source": "https://t.me/cvedetector/14750", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13196 - Donglight Bookstore Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13196 \nPublished : Jan. 9, 2025, 12:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in donglight bookstore\u7535\u5546\u4e66\u57ce\u7cfb\u7edf\u8bf4\u660e 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T01:51:50.000000Z"}, {"uuid": "fd474856-4e89-4b8d-99fc-250c59cedab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13194", "type": "seen", "source": "https://t.me/cvedetector/14749", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13194 - Sucms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13194 \nPublished : Jan. 9, 2025, 12:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in Sucms 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/admin_members.php?ac=search. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T01:51:49.000000Z"}, {"uuid": "b5a6a466-58c7-4c45-9081-83390ecaf17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13191", "type": "seen", "source": "https://t.me/cvedetector/14748", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13191 - ZeroWdd Myblog Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13191 \nPublished : Jan. 8, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T01:01:45.000000Z"}, {"uuid": "3e3c9aee-171c-4fc1-ade3-c41316e746a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13190", "type": "seen", "source": "https://t.me/cvedetector/14738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13190 - ZeroWdd Myblog Xml Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13190 \nPublished : Jan. 8, 2025, 9:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in ZeroWdd myblog 1.0. This vulnerability affects unknown code of the file src/main/resources/mapper/BlogMapper.xml. The manipulation of the argument findBlogList/getTotalBlogs leads to xml injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T23:21:22.000000Z"}, {"uuid": "eb00de15-9f25-476b-b6f4-1d1f98240c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13156", "type": "seen", "source": "https://t.me/cvedetector/15238", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13156 - WordPress HTML5 Video Player DOM-Based Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13156 \nPublished : Jan. 14, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The HTML5 Video Player \u2013 mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the \u2018heading\u2019 parameter in all versions up to, and including, 2.5.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T10:38:38.000000Z"}, {"uuid": "b815a9e6-1fe5-4602-b153-4728ad14ab9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13323", "type": "seen", "source": "https://t.me/cvedetector/15231", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13323 - WordPress Booking Calendar Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13323 \nPublished : Jan. 14, 2025, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'booking' shortcode in all versions up to, and including, 10.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T08:08:18.000000Z"}, {"uuid": "19126230-1885-4f7c-80e0-c12dd046c4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13348", "type": "seen", "source": "https://t.me/cvedetector/15230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13348 - WordPress Smart Agenda CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13348 \nPublished : Jan. 14, 2025, 4:15 a.m. | 44\u00a0minutes ago \nDescription : The Smart Agenda \u2013 Prise de rendez-vous en ligne plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7. This is due to missing or incorrect nonce validation on the smartagenda_options_page_html() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T06:27:57.000000Z"}, {"uuid": "c9388fc6-e51c-4ed5-b236-92d51c486e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13024", "type": "seen", "source": "https://t.me/cvedetector/13905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13024 - Codezips Blood Bank Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13024 \nPublished : Dec. 29, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /campaign.php. The manipulation of the argument cname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T23:14:39.000000Z"}, {"uuid": "b2dc46bd-cda4-48a2-9447-1b1476b5bcf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13021", "type": "seen", "source": "https://t.me/cvedetector/13904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13021 - SourceCodester Road Accident Map Marker Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13021 \nPublished : Dec. 29, 2024, 8:15 p.m. | 18\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument mark_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T21:34:19.000000Z"}, {"uuid": "b5d9c95a-79d9-4b54-b2c9-d567338f80d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13022", "type": "seen", "source": "https://t.me/cvedetector/13903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13022 - Taisan Tarzan-cms Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13022 \nPublished : Dec. 29, 2024, 8:15 p.m. | 18\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T21:34:18.000000Z"}, {"uuid": "7b3bb7e6-7a81-448a-8fac-c680554ca20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13039", "type": "seen", "source": "https://t.me/cvedetector/13919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13039 - \"Code-Projects Simple Chat System SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-13039 \nPublished : Dec. 30, 2024, 5:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Chat System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /add_user.php. The manipulation of the argument name/email/password/number leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T06:46:05.000000Z"}, {"uuid": "43c1f64e-421a-4788-9d82-c7c7cfe77dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13037", "type": "seen", "source": "https://t.me/cvedetector/13918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13037 - \"1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13037 \nPublished : Dec. 30, 2024, 4:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendance_report of the file /admin/report.php. The manipulation of the argument course_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T05:55:55.000000Z"}, {"uuid": "619f3230-56ee-4883-bf66-3b0f770ef08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13030", "type": "seen", "source": "https://t.me/cvedetector/13910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13030 - \"D-Link DIR-823G Web Management Remote Access Control Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13030 \nPublished : Dec. 30, 2024, 1:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T03:25:19.000000Z"}, {"uuid": "6e444719-4dcb-4e6c-b62f-96f889cd2780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13029", "type": "seen", "source": "https://t.me/cvedetector/13909", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13029 - Antabot White-Jotter SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13029 \nPublished : Dec. 30, 2024, 12:15 a.m. | 22\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T01:45:02.000000Z"}, {"uuid": "97129ffc-c5a9-42d5-b42f-997cca401b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13025", "type": "seen", "source": "https://t.me/cvedetector/13908", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13025 - Codezips College Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13025 \nPublished : Dec. 29, 2024, 11:15 p.m. | 30\u00a0minutes ago \nDescription : A vulnerability was found in Codezips College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Front-end/faculty.php. The manipulation of the argument book_name/book_author leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T00:54:56.000000Z"}, {"uuid": "482e5e0e-34de-4a7d-8493-374e9c4eb751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13023", "type": "seen", "source": "Telegram/cwj5DoCvhQJY-uTdEgjmMsC70hhjm1zPLiaFtucxaYVDLDfs", "content": "", "creation_timestamp": "2025-02-18T21:11:33.000000Z"}, {"uuid": "a8340d46-2fe3-4378-848f-a4c5d1b09189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13028", "type": "seen", "source": "https://t.me/cvedetector/13907", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13028 - Antabot White-Jotter Remote File Processing Username Verification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13028 \nPublished : Dec. 29, 2024, 11:15 p.m. | 30\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This issue affects some unknown processing of the file /login. The manipulation of the argument username leads to observable response discrepancy. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T00:54:56.000000Z"}, {"uuid": "07675859-8b70-4e79-ba20-708c219c24c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13023", "type": "seen", "source": "https://t.me/cvedetector/13906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13023 - PHPGurukul Maid Hiring Management System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13023 \nPublished : Dec. 29, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/search-maid.php of the component Search Maid Page. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T23:14:40.000000Z"}, {"uuid": "bbf79e4d-478a-4f62-9f3e-45e406542682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13018", "type": "seen", "source": "Telegram/XOTBbBOGt4neERDfUctnCU3a8ZI_wxvbcy25_ZTrMkmun2vG", "content": "", "creation_timestamp": "2025-02-18T21:11:33.000000Z"}, {"uuid": "021181e3-53c2-4665-ab29-bd96ce1c7a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13007", "type": "seen", "source": "https://t.me/cvedetector/13870", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13007 - Codezips Event Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13007 \nPublished : Dec. 29, 2024, 9:15 a.m. | 24\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T10:41:19.000000Z"}, {"uuid": "6e6388c8-8d68-4f2d-9e85-5a1c63e20651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/3622", "content": "#exploit\n1. CVE-2024-1346:\nWeak MySQL database root password in LaborOfficeFree\nhttps://github.com/PeterGabaldon/CVE-2024-1346\n\n2. A modern dashboard exploit for MS Xbox\nhttps://github.com/XboxDev/endgame-exploit", "creation_timestamp": "2024-04-20T12:14:24.000000Z"}, {"uuid": "1eb5c9c7-085f-4905-89e1-7acdb3c6fdaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13038", "type": "seen", "source": "https://t.me/cvedetector/13917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13038 - CodeAstro Simple Loan Management System SQL Injection Flaw\", \n  \"Content\": \"CVE ID : CVE-2024-13038 \nPublished : Dec. 30, 2024, 4:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T05:55:55.000000Z"}, {"uuid": "8cb0b6bc-277e-44f4-9275-1fd5053cefea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13035", "type": "seen", "source": "https://t.me/cvedetector/13916", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13035 - Code-Projects Chat System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13035 \nPublished : Dec. 30, 2024, 3:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/update_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T05:05:45.000000Z"}, {"uuid": "3e90f6ae-572c-405e-99c6-5400564398e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13036", "type": "seen", "source": "https://t.me/cvedetector/13915", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13036 - Code-projects Chat System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13036 \nPublished : Dec. 30, 2024, 3:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/update_room.php. The manipulation of the argument id/name/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T05:05:44.000000Z"}, {"uuid": "f525a847-0932-4a00-be04-7b9c678d48bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13034", "type": "seen", "source": "https://t.me/cvedetector/13913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13034 - Code-projects Chat System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13034 \nPublished : Dec. 30, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T04:15:26.000000Z"}, {"uuid": "667bc4ab-b16b-4132-9ac7-211b0bd87911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13032", "type": "seen", "source": "https://t.me/cvedetector/13914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13032 - Antabot White-Jotter Server-Side Request Forgery (SSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-13032 \nPublished : Dec. 30, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T04:15:26.000000Z"}, {"uuid": "e0611068-d84b-4f53-a38f-d537446128d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13033", "type": "seen", "source": "https://t.me/cvedetector/13912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13033 - Code-projects Chat System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13033 \nPublished : Dec. 30, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T04:15:25.000000Z"}, {"uuid": "b735e831-80bd-4b7a-a5f3-cad4747c4922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13031", "type": "seen", "source": "https://t.me/cvedetector/13911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13031 - Antabot White-Jotter Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13031 \nPublished : Dec. 30, 2024, 1:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T03:25:20.000000Z"}, {"uuid": "7b37e264-d83c-4d0a-b8a5-6598c9a37c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13019", "type": "seen", "source": "https://t.me/cvedetector/13902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13019 - Code-projects Chat System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13019 \nPublished : Dec. 29, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/update_room.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T20:44:13.000000Z"}, {"uuid": "05fd976a-9855-4bf4-b365-e9ad62e06dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13020", "type": "seen", "source": "https://t.me/cvedetector/13901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13020 - Code-Projects Chat System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13020 \nPublished : Dec. 29, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T20:44:12.000000Z"}, {"uuid": "9b629cdc-ef4d-49de-8e5d-465780df3a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13018", "type": "seen", "source": "https://t.me/cvedetector/13900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13018 - PHPGurukul Maid Hiring Management System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13018 \nPublished : Dec. 29, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/profile.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T19:54:06.000000Z"}, {"uuid": "d2363420-ed2f-431c-89c7-240aee3f899b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13017", "type": "seen", "source": "https://t.me/cvedetector/13899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13017 - PHPGurukul Maid Hiring Management System Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13017 \nPublished : Dec. 29, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T19:04:01.000000Z"}, {"uuid": "789017a0-18ba-4081-bfcc-ff276a12d94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13015", "type": "seen", "source": "https://t.me/cvedetector/13898", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13015 - PHPGurukul Maid Hiring Management System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13015 \nPublished : Dec. 29, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T18:13:51.000000Z"}, {"uuid": "0f60c911-c061-459b-a677-e3a5bc5c4ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13014", "type": "seen", "source": "https://t.me/cvedetector/13896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13014 - PHPGurukul Maid Hiring Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13014 \nPublished : Dec. 29, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-maid.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T17:23:39.000000Z"}, {"uuid": "a5eb603a-35a8-41ca-ac3f-48f0a2acfd6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13016", "type": "seen", "source": "https://t.me/cvedetector/13897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13016 - PHPGurukul Maid Hiring Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13016 \nPublished : Dec. 29, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T18:13:50.000000Z"}, {"uuid": "14aec54e-b046-4453-85ee-58d6553879d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13013", "type": "seen", "source": "https://t.me/cvedetector/13895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13013 - PHPGurukul Maid Hiring Management System Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13013 \nPublished : Dec. 29, 2024, 2:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Affected is an unknown function of the file /admin/contactus.php of the component Contact Us Page. The manipulation of the argument page title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T15:43:18.000000Z"}, {"uuid": "144c099f-fd74-4bd4-b22d-086ade18c27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13008", "type": "seen", "source": "https://t.me/cvedetector/13873", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13008 - Code-projects Responsive Hotel Site SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13008 \nPublished : Dec. 29, 2024, 10:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T12:21:40.000000Z"}, {"uuid": "817e6b9e-2cd6-4210-9576-16a789e23b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13005", "type": "seen", "source": "https://t.me/cvedetector/13860", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13005 - \"1000 Projects Attendance Tracking Management System SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-13005 \nPublished : Dec. 29, 2024, 8:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendance_action.php. The manipulation of the argument attendance_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T09:50:59.000000Z"}, {"uuid": "85015696-e8aa-4f9d-be57-81b1833f7e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13006", "type": "seen", "source": "https://t.me/cvedetector/13859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13006 - Cisco 1000 Projects Human Resource Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13006 \nPublished : Dec. 29, 2024, 8:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown processing of the file /employeeview.php. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T09:50:59.000000Z"}, {"uuid": "28c32243-da95-41ab-87c1-b53bc943164b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13004", "type": "seen", "source": "https://t.me/cvedetector/13858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13004 - PHPGurukul Complaint Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13004 \nPublished : Dec. 29, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T09:00:50.000000Z"}, {"uuid": "16ef412c-1749-4be4-96aa-fc6153d112eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13002", "type": "seen", "source": "https://t.me/cvedetector/13853", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13002 - \"1000 Projects Bookstore Management System SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-13002 \nPublished : Dec. 29, 2024, 4:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /order_process.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T05:40:10.000000Z"}, {"uuid": "624ee861-b94a-44e4-b134-4d957943d770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13003", "type": "seen", "source": "https://t.me/cvedetector/13852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13003 - \"1000 Projects Portfolio Management System MCA SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13003 \nPublished : Dec. 29, 2024, 4:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /update_ed.php. The manipulation of the argument e_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T05:40:09.000000Z"}, {"uuid": "0a685fbe-69b5-4eb4-b45f-9118798713bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13000", "type": "seen", "source": "https://t.me/cvedetector/13851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13000 - PHPGurukul Small CRM SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13000 \nPublished : Dec. 29, 2024, 3:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T04:50:04.000000Z"}, {"uuid": "3baeeeed-3a62-4eaf-97e2-ab350c540ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13001", "type": "seen", "source": "https://t.me/cvedetector/13850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13001 - PHPGurukul Small CRM SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13001 \nPublished : Dec. 29, 2024, 3:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T04:50:04.000000Z"}, {"uuid": "ab791283-af05-4308-938a-4e5db071705a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13017", "type": "seen", "source": "Telegram/4cYVWSW5J04-ZjYmT3aB3qeF_tDTglzZ5OTOfqM_HS_BGtVc", "content": "", "creation_timestamp": "2025-02-18T21:11:33.000000Z"}, {"uuid": "7e5ebc26-7fb8-4765-a548-c9126ecb3d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13016", "type": "seen", "source": "Telegram/xYoKe3DhoX6TQYxzR20ve5smrD2KTsoazGDXn3uIp7igsXqm", "content": "", "creation_timestamp": "2025-02-18T21:11:33.000000Z"}, {"uuid": "56738779-aa1a-4b85-9118-0cac42eb8c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13014", "type": "seen", "source": "Telegram/K6iHcpRrOx9R9OPVKvpfFc1r43nOZXgQBbV4LoFYL79k6JX9", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}, {"uuid": "d62ecc68-3dea-448c-b673-0975526fa66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13013", "type": "seen", "source": "Telegram/FYPYm5O_QwZVpkBVOoOy-zz5nM2Orclz9_mtiMR77s02tndz", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}, {"uuid": "b0c4b80c-597f-452d-91d1-edf9a881082e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13103", "type": "seen", "source": "https://t.me/cvedetector/14115", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13103 - D-Link DIR-816 Virtual Service Handler Improper Access Controls Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13103 \nPublished : Jan. 2, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This issue affects some unknown processing of the file /goform/form2AddVrtsrv.cgi of the component Virtual Service Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T11:44:32.000000Z"}, {"uuid": "186d9f9e-4ab0-4c34-ba43-ef36e7a8b3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13102", "type": "seen", "source": "https://t.me/cvedetector/14114", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13102 - D-Link DIR-816 Vulnerability - Remote DDNS Service Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-13102 \nPublished : Jan. 2, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This vulnerability affects unknown code of the file /goform/DDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T11:44:28.000000Z"}, {"uuid": "8703f91e-cda0-41e8-af0c-0d025a3ccabc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://t.me/cvedetector/14113", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13062 - ASUS Router Unauthenticated Remote Command Execution vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13062 \nPublished : Jan. 2, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution.  \nRefer to the '\u00a001/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T11:44:27.000000Z"}, {"uuid": "88075736-dcec-4abb-b88a-08a1a99a9dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13109", "type": "seen", "source": "https://t.me/cvedetector/14141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13109 - Beijing Yunfan Internet Technology Yunfan Learning Examination System Information Disclosure Authorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13109 \nPublished : Jan. 2, 2025, 1:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. It has been rated as critical. This issue affects some unknown processing of the file /doc.html. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T15:05:26.000000Z"}, {"uuid": "24e4fc28-18c5-4a32-97e7-2819964deedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13070", "type": "seen", "source": "https://t.me/cvedetector/14040", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13070 - CodeAstro Online Food Ordering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13070 \nPublished : Dec. 31, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/update_users.php of the component Update User Page. The manipulation of the argument user_upd leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T17:03:40.000000Z"}, {"uuid": "96f40106-aa52-4f80-8fb4-0cc1302b0a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13072", "type": "seen", "source": "https://t.me/cvedetector/14038", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13072 - \"1000 Projects Beauty Parlour Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13072 \nPublished : Dec. 31, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argument sids[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T17:03:38.000000Z"}, {"uuid": "dd79284e-afa6-4902-a012-1a9271c74127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13111", "type": "seen", "source": "https://t.me/cvedetector/14153", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13111 - Beijing Yunfan Internet Technology Yunfan Learning Examination System JWT Token Handler Authentication Bypass Critical Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13111 \nPublished : Jan. 2, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token Handler. The manipulation leads to improper authentication. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T15:55:47.000000Z"}, {"uuid": "02548bad-0aa4-4429-925c-31e0390e9bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13104", "type": "seen", "source": "https://t.me/cvedetector/14118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13104 - D-Link DIR-816 WiFi Settings Handler Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13104 \nPublished : Jan. 2, 2025, 11:15 a.m. | 16\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. Affected is an unknown function of the file /goform/form2AdvanceSetup.cgi of the component WiFi Settings Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T12:34:42.000000Z"}, {"uuid": "e38fb208-6968-4b78-b3b0-b358b70e4daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13105", "type": "seen", "source": "https://t.me/cvedetector/14117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13105 - D-Link DIR-816 Dhcpd Setting Handler Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13105 \nPublished : Jan. 2, 2025, 11:15 a.m. | 16\u00a0minutes ago \nDescription : A vulnerability has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/form2Dhcpd.cgi of the component DHCPD Setting Handler. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T12:34:41.000000Z"}, {"uuid": "d9b95d03-3cc8-4a75-a50f-50fe9b394311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13108", "type": "seen", "source": "https://t.me/cvedetector/14146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13108 - D-Link DIR-816 Web Application Improper Access Control Remote Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13108 \nPublished : Jan. 2, 2025, 1:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T15:05:32.000000Z"}, {"uuid": "5ccd3704-9688-4881-9a04-b431c03fc671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13075", "type": "seen", "source": "https://t.me/cvedetector/14055", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13075 - PHPGurukul Land Record System Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13075 \nPublished : Dec. 31, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in PHPGurukul Land Record System 1.0. This vulnerability affects unknown code of the file /admin/add-propertytype.php. The manipulation of the argument Land Property Type leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T19:34:05.000000Z"}, {"uuid": "a0ff62a0-38cc-4f5e-bd7e-a4140dc304da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13076", "type": "seen", "source": "https://t.me/cvedetector/14054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13076 - PHPGurukul Land Record System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13076 \nPublished : Dec. 31, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in PHPGurukul Land Record System 1.0. This issue affects some unknown processing of the file /admin/edit-propertytype.php. The manipulation of the argument Property Type leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T19:34:05.000000Z"}, {"uuid": "8ba527b5-4df8-49a3-83b6-887454abc071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13085", "type": "seen", "source": "https://t.me/cvedetector/14067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13085 - PHPGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13085 \nPublished : Dec. 31, 2024, 11:15 p.m. | 20\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-01T00:36:22.000000Z"}, {"uuid": "418d9e27-e13e-4026-9b87-3f1ed21703df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13110", "type": "seen", "source": "https://t.me/cvedetector/14152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13110 - Yunfan Learning Examination System Remote Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13110 \nPublished : Jan. 2, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/yf/exam/modules/paper/controller/PaperController.java\uff0c of the component Exam Answer Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T15:55:47.000000Z"}, {"uuid": "1a0246fb-d774-428c-ba4c-f098ac545171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13092", "type": "seen", "source": "https://t.me/cvedetector/14098", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13092 - \"Code-Projects Job Recruitment SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13092 \nPublished : Jan. 2, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /_parse/_call_job/search_ajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T10:54:00.000000Z"}, {"uuid": "b0488dd2-8b00-4ed3-a5f6-f4c6da740020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13074", "type": "seen", "source": "https://t.me/cvedetector/14052", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13074 - PHPGurukul Land Record System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13074 \nPublished : Dec. 31, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T18:44:01.000000Z"}, {"uuid": "dc50190a-9898-4b31-8d9f-8e663588b30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13093", "type": "seen", "source": "https://t.me/cvedetector/14097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13093 - Code-projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13093 \nPublished : Jan. 2, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /_parse/_call_main_search_ajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T10:53:59.000000Z"}, {"uuid": "06f06249-fcd3-4c2d-961a-db62caea2ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13084", "type": "seen", "source": "https://t.me/cvedetector/14063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13084 - \"PHPGurukul Land Record System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13084 \nPublished : Dec. 31, 2024, 10:15 p.m. | 30\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search-property.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T23:46:13.000000Z"}, {"uuid": "808ade51-9ad6-4251-a7a7-1f987107a032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13083", "type": "seen", "source": "https://t.me/cvedetector/14062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13083 - PHPGurukul Land Record System Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13083 \nPublished : Dec. 31, 2024, 10:15 p.m. | 30\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument Admin Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T23:46:12.000000Z"}, {"uuid": "f5d21271-4e22-4d0a-bd19-95296c5c93c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13081", "type": "seen", "source": "https://t.me/cvedetector/14061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13081 - PHPGurukul Land Record System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13081 \nPublished : Dec. 31, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Land Record System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/contactus.php. The manipulation of the argument Page Description leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T22:56:04.000000Z"}, {"uuid": "f73bfacc-e663-40ca-93ab-8310dd3eeeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13082", "type": "seen", "source": "https://t.me/cvedetector/14060", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13082 - PHPGurukul Land Record System Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13082 \nPublished : Dec. 31, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Land Record System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/search-property.php. The manipulation of the argument Search By leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T22:56:03.000000Z"}, {"uuid": "f6c4af55-78b5-407b-8cd4-bade7f07518e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13079", "type": "seen", "source": "https://t.me/cvedetector/14059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13079 - PhpGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13079 \nPublished : Dec. 31, 2024, 8:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/property-details.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T22:05:55.000000Z"}, {"uuid": "fc80ec5f-5d7e-46fe-97db-16597c1ee784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13080", "type": "seen", "source": "https://t.me/cvedetector/14058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13080 - PHPGurukul Land Record System XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13080 \nPublished : Dec. 31, 2024, 8:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Land Record System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/aboutus.php. The manipulation of the argument Page Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T22:05:54.000000Z"}, {"uuid": "ddff17c3-3b74-498b-b619-973df727eb7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13077", "type": "seen", "source": "https://t.me/cvedetector/14057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13077 - PHPGurukul Land Record System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13077 \nPublished : Dec. 31, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/add-property.php. The manipulation of the argument Land Subtype leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T21:15:48.000000Z"}, {"uuid": "85f4ff2b-7b01-4bf2-a506-69ffa811757c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13078", "type": "seen", "source": "https://t.me/cvedetector/14056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13078 - PHPGurukul Land Record System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13078 \nPublished : Dec. 31, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T21:15:47.000000Z"}, {"uuid": "56debc94-5b6b-45f1-81d8-cb2d614b88dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13067", "type": "seen", "source": "https://t.me/cvedetector/13973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13067 - CodeAstro Online Food Ordering System Remote File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13067 \nPublished : Dec. 31, 2024, 9:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/all_users.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T11:11:44.000000Z"}, {"uuid": "9d90a6a5-3c42-4f40-8f30-3024d324984c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13040", "type": "seen", "source": "https://t.me/cvedetector/13967", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13040 - \"Quanta Computer QOCA Authorization Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13040 \nPublished : Dec. 31, 2024, 2:15 a.m. | 24\u00a0minutes ago \nDescription : The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling the user ID parameter, remote attackers with regular privileges could access certain features as any user, modify any user's account information and privileges, leading to privilege escalation. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T03:40:08.000000Z"}, {"uuid": "1cef841a-dba9-4f5c-a175-d1e6fd53f839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13061", "type": "seen", "source": "https://t.me/cvedetector/14005", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13061 - \"2100 Technology Electronic Official Document Management System Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-13061 \nPublished : Dec. 31, 2024, 12:15 p.m. | 18\u00a0minutes ago \nDescription : The Electronic Official Document Management System from 2100 Technology has an Authentication Bypass vulnerability. Although the product enforces an IP whitelist for the API used to query user tokens, unauthenticated remote attackers can still deceive the server to obtain tokens of arbitrary users, which can then be used to log into the system. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T13:42:40.000000Z"}, {"uuid": "b1e8993a-00d6-4b42-a781-31cd36c3aac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13058", "type": "seen", "source": "https://t.me/cvedetector/13966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13058 - SoftIron HyperCloud Elevated User Privilege sdStorage Subsystem Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-13058 \nPublished : Dec. 30, 2024, 10:15 p.m. | 42\u00a0minutes ago \nDescription : An issue exists in SoftIron HyperCloud  \n where authenticated, but non-admin users can create data pools, which could potentially impact the performance and availability of the backend software-defined storage subsystem.  \n  \nThis issue only impacts SoftIron HyperCloud and related software products (such as VM Squared) software versions 2.3.0 to before 2.5.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T00:19:40.000000Z"}, {"uuid": "e11d815c-fc78-4a75-aac6-f91cd0303798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13045", "type": "seen", "source": "https://t.me/cvedetector/13962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13045 - Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13045 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of AR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24848. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:22.000000Z"}, {"uuid": "8db1f95f-a005-4122-895d-2731c5eaf456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13044", "type": "seen", "source": "https://t.me/cvedetector/13961", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13044 - Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13044 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of AR files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24870. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:21.000000Z"}, {"uuid": "7562fca6-1193-4d02-ad5d-9bccf2fa0383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13043", "type": "seen", "source": "https://t.me/cvedetector/13960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13043 - Panda Security Dome Link Following Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13043 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the Hotspot Shield. By creating a junction, an attacker can abuse the application to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23478. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:18.000000Z"}, {"uuid": "c08f9a52-cf1a-4d82-a76a-ca991263b756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13042", "type": "seen", "source": "https://t.me/cvedetector/13959", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13042 - Tsinghua Unigroup Electronic Archives Management System File Path Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-13042 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : A vulnerability was found in Tsinghua Unigroup Electronic Archives Management System 3.2.210802(62532). It has been classified as problematic. Affected is the function download of the file SubjectController.class.php. The manipulation of the argument path leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:17.000000Z"}, {"uuid": "8298d1f2-d32e-4b44-bc43-108df7cac39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13051", "type": "seen", "source": "https://t.me/cvedetector/13956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13051 - Ashlar-Vellum Graphite VC6 File Parsing Heap Overflow Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-13051 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of VC6 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24977. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:15.000000Z"}, {"uuid": "4738ab9f-5989-4704-b690-d0fead31cdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13048", "type": "seen", "source": "https://t.me/cvedetector/13953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13048 - Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13048 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24844. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:10.000000Z"}, {"uuid": "1490e126-54e9-49c0-ae52-61bc32748f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13050", "type": "seen", "source": "https://t.me/cvedetector/13955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13050 - Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13050 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of VC6 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24976. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:11.000000Z"}, {"uuid": "84a90d0a-b1d1-4707-9b0d-1caa8399906c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13049", "type": "seen", "source": "https://t.me/cvedetector/13954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13049 - Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13049 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24847. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:10.000000Z"}, {"uuid": "6745dd1a-bc35-4eaf-a88d-486570ae0d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13047", "type": "seen", "source": "https://t.me/cvedetector/13952", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13047 - Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13047 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of CO files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24843. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:09.000000Z"}, {"uuid": "e11081d9-dc29-43f7-a6e1-1e0ccb34663f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13046", "type": "seen", "source": "https://t.me/cvedetector/13951", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13046 - Ashlar-Vellum Cobalt CO File Parsing Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13046 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of CO files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24867. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:08.000000Z"}, {"uuid": "9a5e1054-c4f9-4b67-9adc-cad419accd6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13369", "type": "seen", "source": "Telegram/4op9o7togZWDibEvlAojc60R92YQWt95kZO9NNyn38FpxXTJ", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "a9a47e09-1323-499a-8d9c-4f31fd9994e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13523", "type": "seen", "source": "Telegram/Bw0xQ_SFLAhX33_Xq6jT0wcR9PeAYZ_NUgFXvhb0myFYPTsJ", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "5828da52-ee73-46af-b15d-5ecae4e2bd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13556", "type": "seen", "source": "Telegram/3WKXBsKXC871Ka7qcAdxlgB3sHvWmKmyt3Bv4h9ZzEfdm6Ly", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "86e5dd7b-d8cd-4447-bdf5-3d551f22781b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13438", "type": "seen", "source": "Telegram/Rht8IwyMcWoURy3dRaUtUj1u7ZA0X_bsNwd8_SBs8vmpYGIX", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "4aa4b3d0-df1d-4c21-a733-63ca3d39042c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13315", "type": "seen", "source": "Telegram/PuOlwh0J0qNQZk1dYPtIj8nQrq6SUfS2MjAVjkShuVKAUTzx", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "5c9f61f8-aac4-4cf9-b355-afcfaf575728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13579", "type": "seen", "source": "Telegram/W6Vt72IcEKK_NIzBRivOs06x6l5E0rbVdXZ55EsXoKZ_9SVh", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "bfd16686-a713-415a-ad21-1a3d01952657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13578", "type": "seen", "source": "Telegram/Z8lXXuR_XY2uE49CtR_fYdvxOnLAQcxAUnjWKsEG3YJrAh5N", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "14ba6c6a-8fca-4b54-8000-14d0c6307c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13577", "type": "seen", "source": "Telegram/m6t5a5_T44EtOj8pcc111kPNfhm6SelY22bU-zbQ1JR_JiNU", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "51eb5fb9-3c24-4e5a-af2d-a4814c259ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13576", "type": "seen", "source": "Telegram/tNPYFPjzKUKYx5oXf2I-UfSqCuNLtvvlhq2Hyx1LsyCecyRD", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "2286ee9c-a586-4bdb-b5c0-3051af7cce27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13573", "type": "seen", "source": "Telegram/4A52AUYC8Vw08yCF3uVtixeO2MAtWcwf8ZY9Yr48T6dEtIoA", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "235c3846-5a9d-43b3-a39a-5294056ee0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13565", "type": "seen", "source": "Telegram/lyl9pVsPjtNGxmfcewgJ6SoK4UKs5SNwYWrIBUjfsUA_GTtf", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "ac0787fa-3c4d-41a5-a353-199fc7453a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13555", "type": "seen", "source": "Telegram/SFAK1Wi9aKgj8-vGvhA0L76hh4h47BjP5BFEoHW97UGMaORS", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "f321a783-81c9-4461-b1b7-0d67d5d321e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13538", "type": "seen", "source": "Telegram/v5j2Oi8bf63BSycY8wX7bbQsHOvSVKMDabfdBO8OMKSRIETk", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "9b088aa4-cff5-4400-b782-9b78d3d5bca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13540", "type": "seen", "source": "Telegram/OF0ceqNR5eVV44rXfW8xnOoJN9EDHEVy479_R56Fc7d6aZTD", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "85493cde-05de-4848-a95e-7caba5e33de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13535", "type": "seen", "source": "Telegram/gYhhPwWbQDEmYOQ_THE8p5kXqXItYsoriWxx0xWIM2oEnEfV", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "7c2e2464-fd86-4699-861a-6c0204521c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13522", "type": "seen", "source": "Telegram/09-SGBFbI98PdFagZtCMShiRu40wzwW7j9mCPvyybcDpB0cG", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "bd6f8359-73b4-47dc-9fb8-9fe5690ab002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13501", "type": "seen", "source": "Telegram/c9dfVfFXnLiugId5JxKOwb7ZbNT33a6aiRFqYF542sKRhN3N", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "48e34a60-6a2d-4487-a207-04d40af9427a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13464", "type": "seen", "source": "Telegram/4zc--tzrJoH033kJ8cRJOl22R3zdCNtHoORRBCExNEXjvcf_", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "cc0f4d5b-3538-4128-9310-f2e7095800a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13741", "type": "seen", "source": "Telegram/0BhLOvAb471L82qKCBhbnkEB-YElpurWqcLeLJJElzeRNhcL", "content": "", "creation_timestamp": "2025-02-18T03:37:46.000000Z"}, {"uuid": "09231124-882a-4e9f-8b90-81724d4aeb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13879", "type": "seen", "source": "Telegram/L7yV7xVZbcpKroUMYZSwqS1Jlj1YZAiFe2L8zzTA-IjpKdv4", "content": "", "creation_timestamp": "2025-02-17T23:39:44.000000Z"}, {"uuid": "4bede0bf-8111-44b8-b2dd-7ff12059b3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13625", "type": "seen", "source": "Telegram/BCjHr1BnuqgKO8Yp6a9IUq3UflwNLNm0Z4UZ2vzQGdQ2XnBy", "content": "", "creation_timestamp": "2025-02-17T15:38:32.000000Z"}, {"uuid": "86b26bfa-d33e-4bf6-ae4a-94d5d3e337da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13608", "type": "seen", "source": "Telegram/epU-YcJsJELMdvAZyg8JpJq4kxuwAJWqdfL2M_SgWMsvWCgb", "content": "", "creation_timestamp": "2025-02-17T15:38:32.000000Z"}, {"uuid": "1286d597-f1b9-4ebf-bf79-72dfad8ed248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13603", "type": "seen", "source": "Telegram/mQrDleHoOhcYgR5bcbIvYn32jThNmjV-lLsWwX9A51sm-d1K", "content": "", "creation_timestamp": "2025-02-17T15:38:32.000000Z"}, {"uuid": "35c62025-43bc-49ba-816b-8f6dc834ec79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13834", "type": "seen", "source": "Telegram/rwoptQm-KGbJkeY0nbL12OY3XqMLtDOrF1CVxZ0boJpP7VZ0", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "86241b4a-d6b6-4521-88a7-3336c0eb5b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13500", "type": "seen", "source": "Telegram/STUJUJDMknX5BFBJgYXEZDUQ3Gv7qcp61P2kciuP65oUDUqz", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "d234bde9-6b61-4203-9a40-e0d3ed35a0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "Telegram/sNjmIacX8dXMvLU3gblg0lC5Qz01PAeAHZEg-R_XYio1g56B", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "ffb33542-ef42-4550-b23f-5f902f4f6725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13439", "type": "seen", "source": "Telegram/xRrBlEv8FAKf0VUiyHLDPzvkiGoqWIhVRbJBlV078l1QTDOv", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "78702a6a-51ac-4164-a198-8d9b88d46cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13752", "type": "seen", "source": "Telegram/S9-QpAEMb-HMLj6Oz7Py6itwShvV7DTEzJGHq-OpG810DTa5", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "e9fe4d5d-b2e2-46dd-a4ac-14794c236ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13563", "type": "seen", "source": "Telegram/peinao8dGQeHTPQeuu0zAIh9sp5bKcHMNAC7uO1WwwEvF0O2", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "8b33d2b5-1759-4316-be03-3019e128bf46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13525", "type": "seen", "source": "Telegram/wMGMkkwbQbk8rTIqNssmAWMB_LWiumTo5uWKyMmts8rpqUMm", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "e27aa7a3-cd63-4243-a571-ee7b0ce0dd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "Telegram/OTtf03GpOR4iB4YWWiuCFMo8BU_y6rjUQ-K-0dRZrcSnqZkz", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "c398e245-e7ec-4af0-bef5-d7d698166b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13306", "type": "seen", "source": "Telegram/pc2hfXyg3BzfV-bL87T4G8bZslDfiNbcmjXJHyH0c-gvOy7f", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "51928a10-eef7-4918-b9aa-25220a1d0be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13208", "type": "seen", "source": "Telegram/esHqqm9H7E4FP6iznoRr92zAfx-gmowpFWlmngdX1K5DrOAG", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "27c2937c-c388-4c81-b35c-edfd9e29f1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://t.me/CyberBulletin/2668", "content": "\u26a1Laravel Framework Vulnerable to Reflected XSS Attacks (CVE-2024-13918 & CVE-2024-13919).\n\n#CyberBulletin", "creation_timestamp": "2025-03-17T12:43:30.000000Z"}, {"uuid": "ecf1bc42-5602-4e02-b4d8-be5fb63b29d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://t.me/CyberBulletin/2668", "content": "\u26a1Laravel Framework Vulnerable to Reflected XSS Attacks (CVE-2024-13918 & CVE-2024-13919).\n\n#CyberBulletin", "creation_timestamp": "2025-03-17T12:43:30.000000Z"}, {"uuid": "ea3f21c4-b3cd-44eb-98ed-e5516c28ac6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1384", "type": "seen", "source": "https://t.me/cvedetector/4397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1384 - \"WordPress Phlox Theme Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-1384 \nPublished : Aug. 29, 2024, 1:15 p.m. | 43\u00a0minutes ago \nDescription : The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_recent_portfolios_grid' shortcode in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T16:13:11.000000Z"}, {"uuid": "3eab6eae-f66c-45a5-8e40-b243aef6ce94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13365", "type": "seen", "source": "https://t.me/CyberBulletin/2326", "content": "\u26a1Hackers Can Take Over 30,000 WordPress Sites Due to Critical CleanTalk Security Flaw (CVE-2024-13365).\n\n#CyberBulletin", "creation_timestamp": "2025-02-14T15:20:22.000000Z"}, {"uuid": "10eff975-477b-47ce-8b36-122ad53e6460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1375", "type": "seen", "source": "https://t.me/cvedetector/702", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1375 - The Event post plugin for WordPress is vulnerable\", \n  \"Content\": \"CVE ID : CVE-2024-1375 \nPublished : July 12, 2024, 3:15 a.m. | 40\u00a0minutes ago \nDescription : The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing nonce check on the save_bulkdatas function in all versions up to, and including, 5.9.5. This makes it possible for unauthenticated attackers to update post_meta_data via a forged request, granted they can trick a logged-in user into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T06:02:30.000000Z"}, {"uuid": "efaa30ce-d2d6-4814-9afd-9d6f387697cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13851", "type": "seen", "source": "Telegram/DmM-npVJveckzw7r2AdRVe2S9OoIeoEyXwhSSUg-QQJcggUd", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "e19a32d5-9a91-46ec-ab15-bc856c392f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13832", "type": "seen", "source": "Telegram/3R56g4XUreeMi4KCYmHQmsrao_sf2SQJYz5M1e3c2oXJOsvo", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "ab9589b5-372d-413c-a97d-f5ea75583fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13831", "type": "seen", "source": "Telegram/1FZpbOh4wG1zbPdS276daDtpSBX8oNuxT_CFWRelKfsx3C6x", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "5f163af5-7e64-42e7-973d-872b474a73a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13716", "type": "seen", "source": "Telegram/SpMAeTrXuvEQ6oF94hZ3vTQOaewaFhQfRtrIMKmGWKpfe74i", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "147ecd45-55b7-47fa-a5af-7b6a2a3f136c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13469", "type": "seen", "source": "Telegram/ds_oPvImO8eDTy436x3EIYX6iAtNWnfUR2DNRBr-lJx0f3lB", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "3b422724-fc29-4015-b642-1e4955405b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1305", "type": "seen", "source": "https://t.me/cvedetector/213", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1305 - tap-windows6 driver version 9.26 and earlier does\", \n  \"Content\": \"CVE ID : CVE-2024-1305 \nPublished : July 8, 2024, 6:15 p.m. | 26\u00a0minutes ago \nDescription : tap-windows6 driver version 9.26 and earlier does not properly   \ncheck the size data of incomming write operations which an attacker can   \nuse to overflow memory buffers, resulting in a bug check and potentially  \n arbitrary code execution in kernel space \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T20:46:09.000000Z"}, {"uuid": "e27db744-bb1d-4ded-b47f-a065cede8552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/4301", "content": "CVE ID : CVE-2024-1346\nSystem : Mysql, laborofficefree\nType : prvilage esclation (Weakness Enumeration)\n\nExploit \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n\ud83d\udd3b Github \ud83d\udd3b\nhttps://github.com/PeterGabaldon/CVE-2024-1346\n\n#\u0627\u0633\u062a\u063a\u0644\u0627\u0644_\u062b\u063a\u0631\u0629", "creation_timestamp": "2024-04-21T09:53:16.000000Z"}, {"uuid": "9d8e73b7-90bc-4453-b05e-d61487649557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13872", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/14403", "content": "\ud83d\udea8CVE-2024-13871, CVE-2024-13872: Unauthenticated Command Injection in Bitdefender BOX v1 and Insecure Update Mechanism Vulnerability in libboxhermes.so in Bitdefender BOX v1\n\nhttps://darkwebinformer.com/cve-2024-13871-cve-2024-13872-unauthenticated-command-injection-in-bitdefender-box-v1-and-insecure-update-mechanism-vulnerability-in-libboxhermes-so-in-bitdefender-box-v1/", "creation_timestamp": "2025-03-12T17:57:55.000000Z"}, {"uuid": "8df5514c-640e-4aed-ae6e-195c087662e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13871", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/14403", "content": "\ud83d\udea8CVE-2024-13871, CVE-2024-13872: Unauthenticated Command Injection in Bitdefender BOX v1 and Insecure Update Mechanism Vulnerability in libboxhermes.so in Bitdefender BOX v1\n\nhttps://darkwebinformer.com/cve-2024-13871-cve-2024-13872-unauthenticated-command-injection-in-bitdefender-box-v1-and-insecure-update-mechanism-vulnerability-in-libboxhermes-so-in-bitdefender-box-v1/", "creation_timestamp": "2025-03-12T17:57:55.000000Z"}, {"uuid": "1ca504a6-d884-409b-8fac-f6ecdf08e352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/P_R_V_8_official/145", "content": "#exploit\n1. CVE-2024-1346:\nWeak MySQL database root password in LaborOfficeFree\nhttps://github.com/PeterGabaldon/CVE-2024-1346\n\n2. A modern dashboard exploit for MS Xbox\nhttps://github.com/XboxDev/endgame-exploit", "creation_timestamp": "2024-05-06T13:51:45.000000Z"}, {"uuid": "255592f7-606c-4a0f-bfe4-ed796aa6e249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "Telegram/A7tiL6-4Pub_cvqsl3mn41d6s3nW-fl5MNfqhYq0_o4sF65-", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "e90e7680-dcc4-40cc-8cb7-f246afa99922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "Telegram/iW8U3_nMoxaA79vuYKZZgyqiJjioPLHROfNeLhYnQIpOw7Q5", "content": "", "creation_timestamp": "2025-03-10T14:45:05.000000Z"}, {"uuid": "48827785-07d4-499e-b642-1a8554374516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "Telegram/jAskTmheJlKc4HIPLVRBaB9da8VITehGiJthYLCa_amkK845", "content": "", "creation_timestamp": "2025-03-10T14:45:05.000000Z"}, {"uuid": "69f3f2c0-de9c-4d52-aceb-f27cee4d9556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13908", "type": "seen", "source": "Telegram/8_67QVRu8jsseg50VHW5myUiec8qrRQI3FAaVTz1pKVL3997", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "8509b83b-9641-4297-b7c4-1e1463bb61df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13844", "type": "seen", "source": "Telegram/wyl2FnCYNivpBxmDKYdvg19fDJ3cmhqTx7k8Q-1IDF_4JeoT", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "8f00a110-01fc-4006-ab25-4c639f098f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "Telegram/shw0X-lljcYkBRUgN-78ZdjBcyVv0bGz8BESp3bxGNfd", "content": "", "creation_timestamp": "2024-05-18T19:34:53.000000Z"}, {"uuid": "e5f45ad2-f26f-4073-97af-a2eb27aab7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13672", "type": "seen", "source": "Telegram/fklnk37vYlTb_Y2h5HpRgLIxIJi57B45oAN7JTXY-qLlEYCB", "content": "", "creation_timestamp": "2025-02-21T08:03:23.000000Z"}, {"uuid": "2a96a775-45c6-435b-bf1e-d31eed57d102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13537", "type": "seen", "source": "Telegram/FG08fG1l_a-6F5OFtpNjVbLODW-QjmB0kOIu3hQ664Wc57kP", "content": "", "creation_timestamp": "2025-02-21T08:03:23.000000Z"}, {"uuid": "ff3aa424-3061-49a4-953e-4d6a229daeba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13388", "type": "seen", "source": "Telegram/rmUcPNqOfGmLwRMZAIDif95VrVXVzOfR7bpzQtC7BRIWYzjH", "content": "", "creation_timestamp": "2025-02-21T08:03:23.000000Z"}, {"uuid": "b6c703b3-30d1-407f-ab02-4ec88b40e527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13648", "type": "seen", "source": "Telegram/-xBIPsZP-_f0defBViLndVmNYN6G7Povb8ypfeF_V9IYqr4H", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "74440143-2b9a-4dde-830f-23cdf032a07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13461", "type": "seen", "source": "Telegram/A-pofhxUOYPGw641gkjHKGHd-AV-9FAmSJHnetNvNqh4uW74", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "54d16210-e392-40dc-882e-d05274b08b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13668", "type": "seen", "source": "Telegram/geLwGb0f69YmDBT7YdDQfEFUxSrTAPzSd0G184MUTIFfmB0G", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}, {"uuid": "9d8c3114-5839-48aa-b72c-78246fd4a5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13638", "type": "seen", "source": "Telegram/RrNz4_Zai69RjQe_-0SauIpWm86pUw__7rVC5TMlsajRga8o", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "afa7d3e4-83a2-47fb-ad4d-884a347a4cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13740", "type": "seen", "source": "Telegram/dwp6oRfeh_zFhJAp1DkGiwnDdGaDPCvzpKuHjbVLBcvYSDqt", "content": "", "creation_timestamp": "2025-02-24T14:08:43.000000Z"}, {"uuid": "06d82909-bef1-4ccc-9c3b-05d076025e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13741", "type": "seen", "source": "Telegram/6CStYVPtPMNHJI_U1txPLfXsjjZcjBvrdq0pSi4TqPg2698Q", "content": "", "creation_timestamp": "2025-02-24T14:08:43.000000Z"}, {"uuid": "036f34a8-43e2-4d48-93f9-021230219c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13822", "type": "seen", "source": "Telegram/e5264CCjDqRpMsD9Jyrti9TGR4CjXA-XLSu8-yONciZUgnXq", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "6b6c5084-17fc-48b9-a42e-1da866e3ac9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "Telegram/IwWghqUDBTx7R5edxc-BE36hqvJ8ts8UXDcVgxvTtVQ1NLxY", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "6b369999-f30e-4bd8-a664-d0128ac61ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13695", "type": "seen", "source": "Telegram/G9dtJQJKrzwPBDAlBfrpJxg1KKSbFJBAfKYJQudVm-Exk_6f", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "ce64b245-3be4-4e0f-b384-5fa73445f29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13693", "type": "seen", "source": "Telegram/wMjTIfZUi_HSDOs7hvc9iAbS-czhbg-9Y5Re0q8q89EZNmu5", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "e1dc5cb9-53bc-4a94-b416-f284762699a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "Telegram/uBJtZWNmaGF1hjZ_wFTxgdSVjOOdZvycNSQhLziqQq0Q9TQq", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "d94a56e0-ee7a-4b43-99d8-09e4facf7731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "seen", "source": "Telegram/ahIjZj75gAuB6aAQtOoZRuQ8ILnHJnA_aFpJIUgXtZlgsgNw", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "70d1d76f-3199-4732-bc99-3ba77542eace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "Telegram/MOjdhX-DHO1zNvKmda8Q2PrPwrjTJJx6jK7lZZJomyXqdmpE", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "cda89d05-0b76-4bed-bfd9-31bdd1cc4496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13668", "type": "seen", "source": "Telegram/omNU3Qkt-8XcduK7LcNSnn2Drtx121F-MrT0Bns9It0NGJQg", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "51226154-ae60-4955-8ba5-424ea6972d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13635", "type": "seen", "source": "Telegram/3P8T65sm8x6Ksqvt-LBgyDvm4k2bVFyYnwxvGzFgbJ4sIj0q", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "6866ba5c-256c-4a57-9137-3e4b460b7009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "Telegram/M4Hv7sME9GOwoM_o2UeJxsfnmX01Ckf7VGDAQ8s4cuHR1mIY", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "5f7274a0-cb03-4b83-b290-32d017d870ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13332", "type": "seen", "source": "Telegram/51e2dW2LHv8TlXiZ2c5gKE8o0cZYHiBHlfHVF7mfFqJShHs4", "content": "", "creation_timestamp": "2025-02-06T02:40:21.000000Z"}, {"uuid": "7decccda-865c-4969-b1d5-20805192185a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13331", "type": "seen", "source": "Telegram/iYHmcUyUGBzZ455AbIThM8gs-yPn1regJsueYnK_kNhncMjJ", "content": "", "creation_timestamp": "2025-02-06T02:40:21.000000Z"}, {"uuid": "05c63e17-f873-4780-b711-eeaf99daeda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13330", "type": "seen", "source": "Telegram/YLj3n4y0YaCCMlBIvUpYGxMyVfvdHPP3MqBvj5hXQzgVy_Nb", "content": "", "creation_timestamp": "2025-02-06T02:40:21.000000Z"}, {"uuid": "bec6703b-d8e6-4ab8-bcf5-5602556fe1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13329", "type": "seen", "source": "Telegram/mOdn5iRXBgrkNj341jCap2fWpg3YfXtYqOAKb9PCdyqCigrw", "content": "", "creation_timestamp": "2025-02-06T02:40:21.000000Z"}, {"uuid": "4ab8807e-c50b-47af-93bc-dea449ce8b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13328", "type": "seen", "source": "Telegram/FI8FCmz6gcsEaAPPRRmGFobmY0r2yPMdwZIMou443OmvDQq_", "content": "", "creation_timestamp": "2025-02-06T02:40:21.000000Z"}, {"uuid": "40e694e9-2b1d-4ee2-a696-836d8d389b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13327", "type": "seen", "source": "Telegram/qmfh40tGMp0rR8sIYjRUZkSamMFlBzigAix3z8wJ8CBvbELj", "content": "", "creation_timestamp": "2025-02-06T02:40:21.000000Z"}, {"uuid": "78c8ca52-cfc8-47da-bab0-f26b2f99b664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13326", "type": "seen", "source": "Telegram/49p9Rf0aokAViyo-_gqb2NhPjH3pPPsBosCGDcwV93VK10nD", "content": "", "creation_timestamp": "2025-02-06T02:40:21.000000Z"}, {"uuid": "e694e29f-1c33-43a2-ad2f-11629dec1510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13325", "type": "seen", "source": "Telegram/3jmW2vdnkNaI-aoehHCFOW7qcbAXY5uz5pmdTRFfIAk9aKy_", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "e6af732f-d27d-4778-b7a0-f3c840d5eead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13115", "type": "seen", "source": "Telegram/70X7a4YWLAPtOtwyEH2yiICkPEvGaLjp_Z7Sm_hh6dL8TmTy", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "52aef2f9-a567-45f2-b184-1a762971589f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13114", "type": "seen", "source": "Telegram/JW2LiKep5lO5FzQrxxONctYBPofFc6nApxtBGlZjbITFOHGX", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "b34483b8-0e53-402a-b75a-8364b54c646b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13490", "type": "seen", "source": "Telegram/Kg-pMbNs201LxWHsOkAk2Cq8rHJ3wusnYARHtdnRa5d3LJnF", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "bb18387b-83bd-4a9d-95d5-f91499a20670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13475", "type": "seen", "source": "Telegram/mJJRjmVsfROqJxq2Ybh4jTvGorbwNALHlROpEfVlpq0HXcvS", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "e3e48887-36ad-422f-9e8b-712b2490d0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13570", "type": "seen", "source": "Telegram/lx4wGdsY_gQLQuqVoslLB2K7y9SKVSeQioyVnDGaeQElwxGl", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "70bdfcc8-4e49-416a-a82d-37dc317d675b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13543", "type": "seen", "source": "Telegram/3rhUczMVjglw8l-CbftoJHaRJDTOOaonWDgBZmxSaFChIVsw", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "772fa234-ae31-41ee-833a-a358d938d4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13568", "type": "seen", "source": "Telegram/GPxAlcgS0v1xCkgD1fvNY5W0FxLo1wpRnKDcT_ymwBNcPpJ7", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "38ef54c2-31a2-48a7-bc2c-b9598979a148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13559", "type": "seen", "source": "Telegram/SM4otjivLIuFEnPWXoFGs_RbHCFbNb4nGQX-Jixbdt9ooLJX", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "0a3bbcda-2905-40db-a660-f8ed5dfb5415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13518", "type": "seen", "source": "Telegram/Izg7xXIBKA_YSNAYyd41hEZ3DfML9ZuPt3Qi_RxLlOS8TB0b", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "454b2775-ae72-44d0-ac44-9c693797ee5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13751", "type": "seen", "source": "Telegram/5H9FNL_h74vj6kva_yiqJBGA-kAWRU5Wm8JHG7o9RvQMjK9B", "content": "", "creation_timestamp": "2025-02-21T08:03:23.000000Z"}, {"uuid": "1fc927a2-b207-4e46-94c4-b9e189b5978d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "Telegram/ZsNl_dtqQ2XSngZF2H0A713mrv8ppvg8c-J3YfTe3UqXdzMA", "content": "", "creation_timestamp": "2025-02-14T10:08:07.000000Z"}, {"uuid": "11bb10d0-1d54-41a2-b6a3-a6fc0e136fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13746", "type": "seen", "source": "Telegram/HdQldr3caK7PH-XkqnnZofm7Aj55XGT82BHY5zteOWbq2Fsl", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "8d3bc960-4863-487f-945a-adc17528520c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13353", "type": "seen", "source": "Telegram/tXbIXOmcdGjWFW8sw7M3ij4bVJ6RUmXJcKabXoEiUgAqvUQa", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "24ce4059-162c-43d7-8ed8-9b2b7e9200cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13585", "type": "seen", "source": "Telegram/tQz3vzIMVYmn0pAiIFQPnFE0EfuuIgaTHu9nPHoKC-qxXyje", "content": "", "creation_timestamp": "2025-02-21T08:03:24.000000Z"}, {"uuid": "e96a8eb7-45f9-4d7e-ad38-5b52c1e61843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13314", "type": "seen", "source": "Telegram/N9kUoPvSIpapB6YrEsPyZSJUM7EghVzdPCT10LaEG5INNDmC", "content": "", "creation_timestamp": "2025-02-21T08:03:24.000000Z"}, {"uuid": "4a58d277-43ee-40ff-b056-0c769b9d39fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13674", "type": "seen", "source": "Telegram/Tb-4ycDB9BSMdtLm5UgLoi7FwkRdXkFv8XxYhh762_DXjuog", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "dc3302a4-4b0f-405e-bb08-52ada05ac8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13663", "type": "seen", "source": "Telegram/e0sA9YIPRrem5x01Ei_LwA5YcjWcy0JklYIxXCPtUETGQLqc", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "92e6c3ac-4117-44ba-8f8d-789a5d624f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13358", "type": "seen", "source": "Telegram/fLSiqW7UjQJfWmdiq7iiusJ6DCVp3lS8Jq8vCfbGh4kyunlS", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "7d59501d-87db-4214-aaf4-a2b9a044213c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13544", "type": "seen", "source": "Telegram/kXfQS2SjChZB0Q3iH2QOhPBUhUSBwcKVZK2Ns9Zyr_ZykmQZ", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "177225b3-437b-40b1-a71f-59056dc6fc82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "Telegram/EGZc1IKqyRLKpS486desR1-iJ3KyaOspMt95pIx2ncTFZQgz", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "e02d79da-8aad-4a5a-8005-72c4c262954b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "Telegram/HRIko_s8GBzLOk5tlHC11sbNlyLgkNwUdOjeq8STI7Fggbtu", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "f420ff6a-2f72-438a-b6ed-2034ac9d6ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "Telegram/WSo7682uaBxGefBbXv2XKHrn4vkB4TkHKWxzBkgdURsUcN9D", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "f03e692f-3f83-462f-a69c-cc2d30039ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "Telegram/i-vx1mBZIyW0fbeEKuCpcidznuYPDRHAqxFugIFDPTIXZAyQ", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "d6c32930-43ec-4eb5-bde1-6bb848af3187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "Telegram/GAal6JeMFzkdtTp1qmBD1K0LJkjmQzIBKq_luLCrgYA672Jf", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "7ff2c488-efe4-48d0-83e2-2ac15253bacd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "seen", "source": "Telegram/TSPaujDXvhjZkIvQuJ395bqkeJVYbAkw3UAWjBgIE6wSCZVY", "content": "", "creation_timestamp": "2025-03-02T11:45:39.000000Z"}, {"uuid": "34a09b95-7825-4c10-977f-1bc0837f4984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13450", "type": "seen", "source": "Telegram/7Ehd5jTSaOwoFTl-zTVtkZeKKP6bDCVLh3dlL-TAs-l05CRc", "content": "", "creation_timestamp": "2025-02-06T02:42:30.000000Z"}, {"uuid": "5cb6f49a-ad78-4025-a77f-12e072f193ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13234", "type": "seen", "source": "Telegram/O3peDQih7zybQpjO0kgfWIMOI6hPQnRDkpbdINXQ_9tZSYNj", "content": "", "creation_timestamp": "2025-02-06T02:42:30.000000Z"}, {"uuid": "e3e6c7f8-15cf-4c0e-8651-9c8dbe183baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13370", "type": "seen", "source": "Telegram/3Lb6qUirsDaCqmtdLjATvMuXb9dsIybW9xhZ-XxT-KXkr-n3", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "50c004c9-0b33-4d61-8da3-3757e2ec271b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13368", "type": "seen", "source": "Telegram/sEiqdx3u95zjhNN18j49RrHoxxdE7x-08gpc2I_aetqjznun", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "fe8f4d94-e103-4f6f-a6ad-331596897da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13531", "type": "seen", "source": "Telegram/aGIqCmndzn-sUFzvT74dwNSwaE3DbG0e2hi-AkM7TuBF9TBT", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "b05262dd-903c-479a-a535-f3eec941c0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "Telegram/HMy657Tul3xuVAgf_mLkGVru6TacPQwIW4V0oyNlv5d06zSd", "content": "", "creation_timestamp": "2025-02-14T10:08:07.000000Z"}, {"uuid": "96783144-2a76-48eb-934c-d9aa2738a17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "Telegram/dZN8eEK802Ab3G-q3uVowdnxeYc7OvXsBBGYU33dVynu598d", "content": "", "creation_timestamp": "2025-02-14T10:08:07.000000Z"}, {"uuid": "a60b2344-3040-462d-9292-c1b0ee09e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13694", "type": "seen", "source": "Telegram/Q7rekiDPy1Ezy5y6mNFcxdqL23bFVN6XxAD-11AZldxRK4xP", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "64d93e5e-4d17-4632-83b3-c71d66523584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13470", "type": "seen", "source": "Telegram/IgHyTAfJTwIJg-i6IcYTsvisjSI7PBkDm-e-wuEb3aktNVP_", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "34d857c4-fcfc-459a-beb6-0187e4cb98bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13694", "type": "seen", "source": "Telegram/qcgne1-IdDaPW8e_vshwrwJAdOq508FL094sh9p3yqsyPcE2", "content": "", "creation_timestamp": "2025-02-06T02:41:39.000000Z"}, {"uuid": "58fb4f32-c291-447f-b1a5-5b2e5e6ac6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13470", "type": "seen", "source": "Telegram/6YU6zLwio0ydpS74gilBextJk0w1pQ3BthFibM-JUYN2PYcy", "content": "", "creation_timestamp": "2025-02-06T02:41:39.000000Z"}, {"uuid": "7dc31510-e5a6-4d9b-849c-f6a301564279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13417", "type": "seen", "source": "Telegram/G8HVV-iz0RkVN13Xxt0tWNYDELo07JWH6upHnUxTADdbLJx6", "content": "", "creation_timestamp": "2025-02-21T15:03:13.000000Z"}, {"uuid": "3485f768-1865-4f76-8931-087d03030d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13532", "type": "seen", "source": "Telegram/DoJj1RlWzJm-evJlm3SDJ96fDdGsatDMHKlK1sEIsA9w2cyC", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "f52d14f4-8b6e-4f87-9b76-10284dbb4e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13612", "type": "seen", "source": "Telegram/id5c-uzd8joEnuM4Ylclj-mM_cjyr3dF-mTNzOMe9UV7go3u", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "b9195bd5-8fa8-4602-bb34-f157a5424f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "Telegram/3WkgHLD8v4U5taJDcpKQct7GilwS26fuJGx6Qv45sZ7dfYt0", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "9bbcb159-e6fc-4ce7-83e1-dc7a78839d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "Telegram/my6vNqrX1solvn-XadjYtnwfPfz7Ao_efc-ZieGiAPjxDLsO", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "471c9a78-1b0e-4c48-be93-2024163e04a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13592", "type": "seen", "source": "Telegram/47y_qQYuW0BttI7b7h3QKBNCj3qLwW-AydwZouNsFHIVKYey", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "9945b168-1f43-4af2-b2f6-a52a79123f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13657", "type": "seen", "source": "Telegram/OPOmlcDO03NExi2mdnxrZMx1ErUEvlda9H8NZmxUIhIsCKYp", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "f7a20cce-d9d9-4621-9fb3-b1a656e6b709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13591", "type": "seen", "source": "Telegram/rEsrGgHAKFBGLS1lyDz3HSjBsWyEzKXYGaZSTH2AKnDYTjB5", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "6ef52ad0-f89d-4b78-9a9d-cd940771ea36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13589", "type": "seen", "source": "Telegram/C8BgN1ve6zcjQZe_POdO9G0J2sIV7cV3F_wWi_UQnsZZ0O8G", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "1b2ff581-f5eb-4ed0-bd9c-3845e09d7228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13468", "type": "seen", "source": "Telegram/rff-tJCtuJ46yvxQW4LLz6LSbaZzNG_Lz1Yi2Ll1Xlt18CW7", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "79974326-2997-4af7-ab5f-df4ce0a2b963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13607", "type": "seen", "source": "Telegram/kQx3tJ1wXgfEp9B5VnXtcboIQ-eu5XzXixA6ruZqLMTuRjb6", "content": "", "creation_timestamp": "2025-02-06T02:40:47.000000Z"}, {"uuid": "b71ef4d4-a847-4782-a0ac-c2ab7cd5388a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13347", "type": "seen", "source": "Telegram/lO9lr_R-75oKLqqEe8tDfv1ShJC0N8at-GwIWxxWud6TiMyX", "content": "", "creation_timestamp": "2025-02-06T02:39:10.000000Z"}, {"uuid": "f3366ae2-94d1-4303-a318-ccd95a68515e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13341", "type": "seen", "source": "Telegram/BZuc27bXinzzoZs10IKQ-bkjky1ngvv5a-9BVRiKD9c_47Ho", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "fcb991b1-8097-4955-a8df-419ed56e9324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13651", "type": "seen", "source": "Telegram/L52U5l6W3xy3rdQrvf36kXcTq4KcEW2Kv9bPv3Fljyf-aX8S", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "24e11fe2-f179-40f4-8775-f42a9037f8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13575", "type": "seen", "source": "Telegram/Ky5hP4m-lhVgCP6ty9hGJUt61hpUqW0YwnWxnQOPh1FlPKX9", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "91593dc9-c208-4b90-bbdd-8046593ccb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13465", "type": "seen", "source": "Telegram/54Tpp5BNRg2I7n1sBztHm0SCcq8j8DyUQs6Ws4usItbp0zYP", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "328d17be-084f-46b0-a435-dadf4c2d043d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13021", "type": "seen", "source": "Telegram/rD863MGFiYRiwms3FsHA0ss7rNY7gu3rRjwaSIeKSXPE0Nqq", "content": "", "creation_timestamp": "2025-02-06T02:39:08.000000Z"}, {"uuid": "155227e6-65d7-41fe-84b0-a434e71e10eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13477", "type": "seen", "source": "Telegram/e16nnSARss0mhAasR2r4Yg1LbvzFamyndIy643evdXkW1-fJ", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "d0108632-caef-4392-8bf0-3e4980895bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "Telegram/F1C3bGTVWBmL3i3IPXoaEU58jZydlBmVdBw4LgGA_oSab4ue", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "69e0963f-2896-4c73-86d9-50a7439912c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13814", "type": "seen", "source": "Telegram/ajO5DL_1hrriH4e2O7NytQ7EI7vTzCmnDn91w6LXjHw4c0vD", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "1c3574ab-8117-4d9c-83c3-facabf8d52e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13821", "type": "seen", "source": "Telegram/SwP5ez4_ew3z3wXd3m5306RpDpEOGeGZ5BDNS1qFUuZ9GcSp", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "6cd065dd-649b-4cf3-b56a-159408e65d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "Telegram/kuvLYXDy3iMeNegA0O_pGIYTx5swiTOHXY8fwvYhfRrtEZIs", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "9e40a3e5-baa0-421e-bd75-b28e91980e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13155", "type": "seen", "source": "Telegram/HsoU9F2ilqhIzwE4z7rDrGwjoK5XfqSjE0Wvp9333NDsh3eG", "content": "", "creation_timestamp": "2025-02-20T23:26:54.000000Z"}, {"uuid": "cb0fd9b7-88e7-4952-a7a4-143c0a52f29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13379", "type": "seen", "source": "Telegram/X3VsAfpXZlCWA5aAlVWjEBf6KNADaf-jnfwNVB--L6TKYUH6", "content": "", "creation_timestamp": "2025-02-21T08:03:23.000000Z"}, {"uuid": "5fc941c7-ca6d-4f5d-aa0c-f661e6d05f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13235", "type": "seen", "source": "Telegram/5mGTbbG6Ifz65ey1EjV8IzDC49dorRCuSLi_7K6xQWX4n3yn", "content": "", "creation_timestamp": "2025-02-21T08:03:23.000000Z"}, {"uuid": "af761d9e-c451-4b47-be00-aea9360cd16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13843", "type": "seen", "source": "Telegram/CZFURufaSkLIw1cT3DQPWdcBFqhas-Ertsjkm6oATuRZBP2j", "content": "", "creation_timestamp": "2025-02-20T23:26:54.000000Z"}, {"uuid": "603782fb-e4d4-47b9-b0e3-0d3f1991a786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13813", "type": "seen", "source": "Telegram/o8GqCt2TUoCtk9gcOorDyE6krJxd1Kt3PnAHZRCFkO5Um1e-", "content": "", "creation_timestamp": "2025-02-20T23:26:54.000000Z"}, {"uuid": "70b1cc0b-9c77-4fe7-8302-d42d19f0a134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13842", "type": "seen", "source": "Telegram/ia114aBH1K2Jl6gLdS8GTqKvl46G_-FpBis0wBLY04uCFclK", "content": "", "creation_timestamp": "2025-02-20T23:26:54.000000Z"}, {"uuid": "5d21c0a1-28ac-42d6-a816-23dc0bc9dc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13799", "type": "seen", "source": "Telegram/7WpSiD-Hy8M_bQMA1tkjN-Zno5fhwqgwg-2McQAMBUt0I1so", "content": "", "creation_timestamp": "2025-02-19T15:39:50.000000Z"}, {"uuid": "d9ccf962-1bc1-449b-8c09-ae4f901eafae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13794", "type": "seen", "source": "Telegram/CN_5XkoS89a_dU6USSIfzvAJSVeuompeaxH6G1h0w84Mn7EJ", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "1789d991-ed0e-46a1-90db-24f07d3583d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13656", "type": "seen", "source": "Telegram/-UxU4G0z0clLJepYEEIjU6j7ClLnTywyvTy9552g-6463w7C", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "94da52d0-fcfd-4e00-adaf-878c8183f79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13654", "type": "seen", "source": "Telegram/oFAdjuVeEmnP5JeWP5Eo6axmhW05z7lySQa9aaOuFfUcAEpC", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "950553a7-af80-49af-9b88-9f9b7a22f2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13679", "type": "seen", "source": "Telegram/JIj0Mh_0GYoXpFcEexbQQN-52kcxFaucXBBVFmYzzuAKX6aL", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "463de7f0-d103-4c87-9922-c6643a102ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13676", "type": "seen", "source": "Telegram/OiuD8FGzgyWqAoq3l1wFVpQnzuJSubPA1fevUFBrixEB2aBS", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "75376c43-de47-4ee8-8d46-fd622ebb95e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13462", "type": "seen", "source": "Telegram/5RyhNZvD7xlkDFfik4nQXDe9Z7mhyhLdwYGwVJ5zs4Gos6UV", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "dde5ee46-760b-41bc-a20d-1f5bad15bbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13405", "type": "seen", "source": "Telegram/aoShcIu_PRXtYB36qaeLIpBPq4O0kVeww9wNpnFJJ_Xs7WbX", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "6de756de-aba6-425b-ad05-aaecfdf5d2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13390", "type": "seen", "source": "Telegram/6GJszkcWyUxdNxO416gIgUibBH_Oz4HHJ9FwvS945oXsyY0u", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "22f9349c-05cd-4537-acfb-d8f7199ff2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13443", "type": "seen", "source": "Telegram/RgBcvaf9qQLSwIn_qHNFZeblR9TSxAPbNcKHELcK2fXu9D6t", "content": "", "creation_timestamp": "2025-02-19T15:39:49.000000Z"}, {"uuid": "f9adae45-4548-4d17-acca-86b81d3c2b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "Telegram/pSRjZSDRDvzW7qZgle124MCZCc_qlBe9uZbYoTKryH9ziFn4", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "de0dfe2e-09b4-4ad8-b66c-08ce528bda2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "Telegram/EVDk7KOsizbcEgGcLOUYsd0ZU6QJz5m7xXqghohdznrcdjO5", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "4fc5eddc-2e0d-4f6c-b964-49a990a62602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "Telegram/bMUlE-45CYnn9s4VOP7mMFMcLLEJ6RhG5EDZk8er3tckYqHD", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "e74749a9-cbe9-4864-ae09-da7a6eb6401e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13603", "type": "seen", "source": "Telegram/taS_vB6zws2Tn1hCno_petLChGnOPCXZc6K7iegrpz88mNUc", "content": "", "creation_timestamp": "2025-02-19T19:13:53.000000Z"}, {"uuid": "238727c6-a05f-47a8-89a9-0209a100125c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13603", "type": "seen", "source": "Telegram/9oB4vM-wMqRczITAL8NQuJ82RzAy4YcOFBDfNSnUW6zLrQs5", "content": "", "creation_timestamp": "2025-02-19T15:39:58.000000Z"}, {"uuid": "cede77d8-ccc9-464a-8f2f-0e8e46cbd7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13489", "type": "seen", "source": "Telegram/TnQfLbxcjly3Ul9O-IGFILhYxPlQF33kvwvpE8tielK3QuvF", "content": "", "creation_timestamp": "2025-02-19T15:39:58.000000Z"}, {"uuid": "11a44a43-a07c-46ec-be1b-086087056e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13364", "type": "seen", "source": "Telegram/Gj1cLMj0b3E0PXIfTOdlhYvkrZXk36M1mBoc_O8K4gJXHpHI", "content": "", "creation_timestamp": "2025-02-19T15:39:58.000000Z"}, {"uuid": "bee13fef-bcec-4d5d-9fc7-bf37ccc19016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13363", "type": "seen", "source": "Telegram/YdrpF2x6UBV-oEoV5u--OrpRbPmmEYFwZxS5MZ4iq-x_wjv4", "content": "", "creation_timestamp": "2025-02-19T15:39:58.000000Z"}, {"uuid": "2bd94f32-7e11-4aac-bcfe-0f8263f7a824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13339", "type": "seen", "source": "Telegram/3cyM9pvUY2a1yqRlJYw75vl03Qf6SHtmeG4O2buOJhfdOLER", "content": "", "creation_timestamp": "2025-02-19T15:39:58.000000Z"}, {"uuid": "1278220c-dc32-43d6-a43a-9b8162a9999a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13336", "type": "seen", "source": "Telegram/BOl-ElAC7JkOZ-ESooRIOvRVfi7XSkqzCfws2DEM5MTh0EQV", "content": "", "creation_timestamp": "2025-02-19T15:39:53.000000Z"}, {"uuid": "5ac5dfa5-3abf-4662-aa5b-e7a7b6c8f9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13711", "type": "seen", "source": "Telegram/vGvYvC6BpTjB2Ain6vusWnVIDPRrEpxFyGaN8RwETM7ZCwAk", "content": "", "creation_timestamp": "2025-02-19T15:39:53.000000Z"}, {"uuid": "81362222-2e0b-45ea-902b-6357103a4eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13660", "type": "seen", "source": "Telegram/TzvUH-zm5l50saCG0owQrntPI8N3zWoKlnarJs9VXiTsDM_N", "content": "", "creation_timestamp": "2025-02-19T15:39:52.000000Z"}, {"uuid": "01ae2134-4fed-4abb-9831-7060ae86e0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13639", "type": "seen", "source": "Telegram/dA0PlbSTTTjc1CmbWn1AVG6XBkjv3zITYQoEnU4uNcrmcsqd", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "7c3d8e59-dc93-4999-886d-58268ff6605e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13119", "type": "seen", "source": "Telegram/_0nRAREVu9_rXHctizv-ApjUjNsFwyQplX3KFp6FEQpKa66v", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "88c02762-e7f4-4a5d-accb-36a5b7114fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13182", "type": "seen", "source": "Telegram/OgZGjEX9D_B2XnkUZu0MPSKVoNCi-RtZJdyvsAOid0WaMhOQ", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "b57ad503-499b-4f5a-8c29-58a5ddf1df81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13867", "type": "seen", "source": "Telegram/K_CcpKZFwpFdAI2nVyjbHp4IG7-9HyUcRSa9yXyzl1Hco05q", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "8848b7b8-4ef1-4d04-91f1-3f74bbc37cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13606", "type": "seen", "source": "Telegram/NIjPZEhrzfXioCtQ3pyjOoEZEH53HcwLSXpzOCEZoAIAs43H", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "540a319f-d801-4556-8531-dda1d5e055a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13644", "type": "seen", "source": "Telegram/HNkDmXcza9pmgk0K81a8vT59XW7utMqZ18pl_YTuAz7A6eQ3", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "8ce58b27-130f-4f64-a577-52412dcc4e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13477", "type": "seen", "source": "Telegram/8kvc95_Ky8p4_eeAqO8oA4q2-bx1vYeqFohEFq4oaskI5Xi0", "content": "", "creation_timestamp": "2025-02-14T10:04:58.000000Z"}, {"uuid": "a7004bdc-8612-4e21-8258-77d4d3250d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13653", "type": "seen", "source": "Telegram/FntiDlWnhurY7d3_OnfrAHjJiggRmuRPXr9yeqBKjgNiBVgF", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "30637e7c-7b87-4cf5-ac80-ef8717778981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13421", "type": "seen", "source": "Telegram/xTjoccFUQwvLIHGJt86D87C7K87Lp1WStIQjAjMBI-0kKwsP", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "d2610e6c-c5d2-4b1d-9278-9f9c6d797aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13472", "type": "seen", "source": "Telegram/IYFfPtP47mjbmUV0KoLLsh4l94pyGzyve8qGndai0I40PUwc", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "11eecdfa-e462-415a-9c5a-2b193c43834b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "seen", "source": "Telegram/r7YVn5c5SEER-msaEu-X9On6oKZx2IQ_5ue3ZNCwJoAqKspH", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "2b943229-d904-40cf-9e31-ae5e3466ce3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13345", "type": "seen", "source": "Telegram/yKFIcEeLH2LRxfEArFmWr6CY5NxXcWU8F9vyN_AMZqyAmg-I", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "61bc2f95-e86d-4087-8c07-7c23d88b1097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13125", "type": "seen", "source": "Telegram/mRFWiZmvYxw6PK_wv3vXO7nAweWSrvNP4mAQkC0TZ97WFu-V", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "f36b9771-428b-436f-92cd-6d4367f44266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13121", "type": "seen", "source": "Telegram/yje8F83J5BUwOlho59WUdXkypd9MOZeAyQ5boCxZUiv25tlf", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "3cbe0744-1d22-44f5-97cb-8b1d89e05b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13120", "type": "seen", "source": "Telegram/2WIhu85WkfeQ0wB4Gi6DusPGsFU6dQRRKMQN7RW9fnKneil2", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "1382ca6b-92fd-4649-b0ee-92f6ea83d4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13770", "type": "seen", "source": "Telegram/dOpSBZh4Xj0Gwbqp__Y8L8wIU2OTvHcmD0m_O8gIpeOfB5-d", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "046aebe5-0ac3-4fa4-b75b-866a733d91d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13229", "type": "seen", "source": "Telegram/pXv8ll-M1ppVOz-oz8x2HZYHnpzLIQ3_YadriPb6qn9DbjI4", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "7e4d69dc-900e-4131-adca-e0b71258e89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13227", "type": "seen", "source": "Telegram/yiRxc95mEs6j0V4lPy5Nd2rAy4KhUhskrRR_qNy3sXrVipT6", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "df486dc7-2a9d-481a-abc5-31ae72d964a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13600", "type": "seen", "source": "Telegram/A0DexrSW9lH0Ki6RJJ9Z5NBWRa7m-WufawHBOEvUsfWUkIlV", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "062755f5-ac08-45ef-8324-98c1b457a729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13374", "type": "seen", "source": "Telegram/UNyVZQts5UVBBph6n70XOQ5wxVSd41mmm3MPdxRN9bwSFvDx", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "8107b701-c077-4ce7-9b67-a0b469a58abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13643", "type": "seen", "source": "Telegram/SSNfKwTQW0dHV9QvY5oNIW9qfwYJDWDD7DvJvhTHUdB4oTEx", "content": "", "creation_timestamp": "2025-02-14T10:01:39.000000Z"}, {"uuid": "43b772b5-5f89-4106-bd11-89756c4dd2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13532", "type": "seen", "source": "Telegram/WljlRHAPp515FqKzB9xLJEgnqaoRSXKdGk85o4djbzJ8PjAz", "content": "", "creation_timestamp": "2025-02-14T10:04:59.000000Z"}, {"uuid": "1eb28aa1-c4d5-4e03-bfd1-6172abca3760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13480", "type": "seen", "source": "Telegram/Xl6PLMRVBOJT1giBl4R3Mg1dVXBnSs41glBD4P0NVx7mLQL1", "content": "", "creation_timestamp": "2025-02-14T10:04:58.000000Z"}, {"uuid": "7e988645-443f-40bf-adf6-adfcbcd02fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13700", "type": "seen", "source": "Telegram/5EiRE4hZWr8nn_TXxBqwv7xLtXbatLNbiNc3WD9AD4cDBWRS", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "799e61fb-13d0-4f44-918e-4b09aa74ecfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13749", "type": "seen", "source": "Telegram/t2zkrsbm0rjbQbTmQtrSG11lbcvr2Q43inytvocJ3uE2tPpK", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "0e57eecc-52a0-468d-a3a2-32a1f8e4a8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13701", "type": "seen", "source": "Telegram/5tGhnS3rSJwCEIJLdIbXHKBzUtaucWd3ycHANGHqvI6ye0Jq", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "1b70130c-d034-4eef-880f-0c9c3e0b71be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13554", "type": "seen", "source": "Telegram/f6Cz5mSDDhV2et9GKaYBmPn3AqXMjPSG7rSM-olp5QsNhKVY", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "827b0efa-8f44-405d-9f31-426511f04a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13541", "type": "seen", "source": "Telegram/Ko77njhd0Sz0jOfKGQBbk5mFcOWnd5bl5qgkrNcYL4gE-BIS", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "dff06e17-3513-4393-a0a6-e2cc8cb00fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13539", "type": "seen", "source": "Telegram/iwpa8DqX1KKmp527jsuftSmYU7sS1NlhgXDLJR-BohUvzYQG", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "1e6e77a7-671e-4726-a352-1f2a66b7ab35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "seen", "source": "Telegram/YK_wf-F-_IVLv0FYD56MqqSLRHFIO3oQsZpuhtxc3P6uosxH", "content": "", "creation_timestamp": "2025-02-14T10:01:38.000000Z"}, {"uuid": "8d7a8725-427d-45cc-b9b2-8602ea4537de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13714", "type": "seen", "source": "Telegram/-XCJKEhz18ssWVwoRAXjVWwC9JZ7rZOrnDRDaN7Omi3IRYyk", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "ed287c56-1c1c-4d5c-b072-10e2a2a9fe65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13601", "type": "seen", "source": "Telegram/XRYhXbDzdR_8ER_JS87ybTWVkXaf1y36P8xI6qmwNSKQQiJT", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "5ff49e66-1a25-416a-b334-ed0aac5975ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1368", "type": "seen", "source": "Telegram/3jW098M2-8OSWyGLuQA0MsMCa_fetnLjTcLnOy0GvMDARmQf", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "5448faca-008b-4c4b-9ea2-000dd990fc2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13440", "type": "seen", "source": "Telegram/ntFCoD_nFhfIkIVN0ngxmQMOQXaZVh3Eez1RZys2Gpv94cge", "content": "", "creation_timestamp": "2025-02-14T10:03:11.000000Z"}, {"uuid": "62625fd0-354c-49da-a209-55ddcab9f446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13723", "type": "seen", "source": "Telegram/-O0gm-KBQfEqAHn52vcgH0Vcaug6O9f7T6PD7p3r_qDDfVzq", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "f483d187-e2d5-47f1-9f05-dd9cceb81b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13409", "type": "seen", "source": "Telegram/wMdaHP1ZG2vdI-rNdyRgb9jGya3-w1UPhw7FaaM8JabJjNJ1", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "4e2973dd-71d9-4c35-b3fa-cccda3316f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13511", "type": "seen", "source": "Telegram/cmvkNzz8uW4nrmzmPwekPfRRU8s3veDZ318IU1Plz73BmDbw", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "b11029d3-7d58-4120-a804-6ef25e0b4e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13594", "type": "seen", "source": "Telegram/RYHCu3Kjh-6CyN6-vv7q599vh0hEc9TM4HOcA_X5FTYlEqeW", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"}, {"uuid": "2aad0820-bd7e-4e51-ac08-7957b03b8084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13829", "type": "seen", "source": "Telegram/wTpdvNgKhy16yLU3yBZ46XmrqLagH2tFAqPk9FsCRUVx01ao", "content": "", "creation_timestamp": "2025-02-06T02:43:28.000000Z"}, {"uuid": "b03f1df8-8c42-4b0f-8b00-8b4ac9b1c3c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13722", "type": "seen", "source": "Telegram/KyXpNaGSt77xKmd0Nk8dHw88PaE58vwtoAYJsW_m9Sp6t8sl", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "0fc212e7-2b54-43c4-9cb2-74c692ade107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13572", "type": "seen", "source": "Telegram/2kFzb7ZNCW5gW7NiL1UIix6EpsL9Sb57B8XLi2CCM7JWY-vp", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "10a84caa-03fa-4382-a866-5dde62cc8c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13408", "type": "seen", "source": "Telegram/_B35eMhkm_opkWcVCMqbrchLg4cbwfDTB1gR0fIAR6-w0qUL", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "522ae2c5-152f-4d5f-94c1-3aee4cbd2a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13354", "type": "seen", "source": "Telegram/cuho_Iw95lUXD1Jl_qzIGB7GaUwDvDnDyI5DJ3zcQ6L3LWFt", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "62362c60-6d23-4e5c-9c6d-e8cbea53ece4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1380", "type": "seen", "source": "Telegram/kHT3_0yXpPDep_imDODFZdDEqhbXa4jYJbMvwyQAAdrf6ehA", "content": "", "creation_timestamp": "2025-02-01T17:28:08.000000Z"}, {"uuid": "6d854f6f-505e-4752-8658-d397e0da22e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13692", "type": "seen", "source": "Telegram/FZdHXtWJDbFsWtutk1BFsycuCltFd3Zv3IDmGG2r8cslLr_D", "content": "", "creation_timestamp": "2025-02-14T10:09:25.000000Z"}, {"uuid": "ce289bad-9d36-45b8-8d9e-639361003391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13641", "type": "seen", "source": "Telegram/kRjlnja-Z0LDkhIKhjaTNXEz5pf5lAuC-cHfMlJWW464CGdI", "content": "", "creation_timestamp": "2025-02-14T10:09:24.000000Z"}, {"uuid": "82975db7-0c3d-4b90-a0e8-119f4d519415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13493", "type": "seen", "source": "Telegram/de4--PPdRNhl-0T8C6T-nddu6RQFu6cP5-jvsuV-E9_mE_dX", "content": "", "creation_timestamp": "2025-02-14T10:09:24.000000Z"}, {"uuid": "4d757445-c6b4-4b6a-8a23-ee9917c94cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13699", "type": "seen", "source": "Telegram/1UGO0w9YwPmo6y_faX6lLF2hGNIgCdjGtan_0-K8k4SlR5Vz", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "7d4faa6e-37bf-46d5-8123-093ecd52885b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13542", "type": "seen", "source": "Telegram/RaqcPWITufAlbe3YttsQeU0eBYLcWeeJUvMXGFj09y6Es5oO", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "f8590441-5ba9-4a92-bc0d-a8b3650db2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13662", "type": "seen", "source": "Telegram/qSX2tcwwnq4_LouCKNlcj4aK3tl5O5sc3fouP0JWbtWL6Kkl", "content": "", "creation_timestamp": "2025-02-01T17:28:08.000000Z"}, {"uuid": "aa84ea82-6977-4159-b29c-94c3f0a3f3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13583", "type": "seen", "source": "Telegram/y95Tsyr194brxCsA7MR7NBp6yoXR0l9vGuN0U-qIXaQ_iqLA", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "c8e9edf2-8168-4536-9e76-5743d0fd855b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1371", "type": "seen", "source": "Telegram/TC3hkhsB1_ogBjjjuypfrk1BL-Y_U6oebancwcJCI0QT6U0Q", "content": "", "creation_timestamp": "2024-04-30T13:38:34.000000Z"}, {"uuid": "2d4287c8-d5ac-4fdd-a3db-8af718429452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/intell137/82", "content": "#exploit\n1. CVE-2024-1346:\nWeak MySQL database root password in LaborOfficeFree\nhttps://github.com/PeterGabaldon/CVE-2024-1346\n\n2. A modern dashboard exploit for MS Xbox\nhttps://github.com/XboxDev/endgame-exploit", "creation_timestamp": "2024-02-26T04:03:18.000000Z"}, {"uuid": "ee320299-0d38-42c3-8b91-ca2e0a5145c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/75", "content": "CVE ID : CVE-2024-1346\nSystem : Mysql, laborofficefree\nType : prvilage esclation (Weakness Enumeration)\n\nExploit \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n\ud83d\udd3b Github \ud83d\udd3b\nhttps://github.com/PeterGabaldon/CVE-2024-1346\n\n#\u0627\u0633\u062a\u063a\u0644\u0627\u0644_\u062b\u063a\u0631\u0629", "creation_timestamp": "2024-04-19T18:46:29.000000Z"}, {"uuid": "6a1bbfd7-0523-4f6d-9f37-6f09df38f517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1345", "type": "seen", "source": "https://t.me/arpsyndicate/3675", "content": "#ExploitObserverAlert\n\nCVE-2024-1345\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1345. Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password.", "creation_timestamp": "2024-02-20T18:55:35.000000Z"}, {"uuid": "b04f6308-eff1-49c3-8c27-e866e245bf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "seen", "source": "https://t.me/arpsyndicate/3662", "content": "#ExploitObserverAlert\n\nCVE-2024-1346\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1346. Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.", "creation_timestamp": "2024-02-20T18:34:00.000000Z"}, {"uuid": "9aca9158-6d43-4be6-86aa-722d5c29eeee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1343", "type": "seen", "source": "https://t.me/arpsyndicate/3673", "content": "#ExploitObserverAlert\n\nCVE-2024-1343\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1343. A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfiles(x86)% LaborOfficeFree BackUp'.", "creation_timestamp": "2024-02-20T18:53:16.000000Z"}, {"uuid": "561c8ed5-c385-43b9-9424-1ccd7c7940a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1344", "type": "seen", "source": "https://t.me/arpsyndicate/3671", "content": "#ExploitObserverAlert\n\nCVE-2024-1344\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1344. Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOF_service.exe' and 'LaborOfficeFree.exe' located in the '%programfiles(x86)%\\LaborOfficeFree\\' directory. This user can log in remotely and has root-like privileges.", "creation_timestamp": "2024-02-20T18:48:15.000000Z"}, {"uuid": "6b4312d8-12c3-4ae0-9d78-1246695e80b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13346", "type": "published-proof-of-concept", "source": "Telegram/XVyQALRyoayeGm8FH6yyapjdt6GN_CcPYVKpdTiVoQ39sQo", "content": "", "creation_timestamp": "2025-03-22T16:00:08.000000Z"}, {"uuid": "51ed0371-f410-4041-8516-d69665d17c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13375", "type": "published-proof-of-concept", "source": "Telegram/IYQCJdoDg1iSlKbn8ZslzoAumxbXC4NXxOL9Gs1tonDBX0k", "content": "", "creation_timestamp": "2025-01-19T15:39:14.000000Z"}, {"uuid": "7f486dfc-bfbb-4e27-a2d4-693f9069731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "published-proof-of-concept", "source": "Telegram/d7gGT6P5w0167A29QfsK40zTkPYvAXOZDKJHbAQ3B_NYmJE", "content": "", "creation_timestamp": "2025-02-20T12:00:10.000000Z"}, {"uuid": "cdd92dcb-cf4a-4ed4-95e8-a0002c006220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "published-proof-of-concept", "source": "Telegram/lVJgfs5XAHvajpl794U45S89a4qLDVmI9MW4eeqQE3QLlDc", "content": "", "creation_timestamp": "2025-02-19T16:00:09.000000Z"}, {"uuid": "7002a22a-d2c6-44e8-9472-54ebc5ea9bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13483", "type": "published-proof-of-concept", "source": "Telegram/fqLvqvawPy0wHjcP9KYWuU804CLssO4ItWzY6I4Zad418gc", "content": "", "creation_timestamp": "2025-02-20T22:00:06.000000Z"}, {"uuid": "febaacb1-1ad7-4400-9c2e-00f876c53c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13478", "type": "published-proof-of-concept", "source": "Telegram/fqLvqvawPy0wHjcP9KYWuU804CLssO4ItWzY6I4Zad418gc", "content": "", "creation_timestamp": "2025-02-20T22:00:06.000000Z"}, {"uuid": "71384d1b-0964-4cbc-bf51-ce7cba089dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13481", "type": "published-proof-of-concept", "source": "Telegram/fqLvqvawPy0wHjcP9KYWuU804CLssO4ItWzY6I4Zad418gc", "content": "", "creation_timestamp": "2025-02-20T22:00:06.000000Z"}, {"uuid": "62a206a7-89b5-4218-aef4-b0b7306adc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13485", "type": "published-proof-of-concept", "source": "Telegram/fqLvqvawPy0wHjcP9KYWuU804CLssO4ItWzY6I4Zad418gc", "content": "", "creation_timestamp": "2025-02-20T22:00:06.000000Z"}, {"uuid": "7bd0c5e1-3ded-49d3-ac1f-44f4a445a492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13488", "type": "published-proof-of-concept", "source": "Telegram/fqLvqvawPy0wHjcP9KYWuU804CLssO4ItWzY6I4Zad418gc", "content": "", "creation_timestamp": "2025-02-20T22:00:06.000000Z"}, {"uuid": "c9866ad8-1438-4ab3-ab30-4cfc286e21de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13489", "type": "published-proof-of-concept", "source": "Telegram/fqLvqvawPy0wHjcP9KYWuU804CLssO4ItWzY6I4Zad418gc", "content": "", "creation_timestamp": "2025-02-20T22:00:06.000000Z"}, {"uuid": "74797129-a476-4ace-a6da-96f035b5b260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13479", "type": "published-proof-of-concept", "source": "Telegram/fqLvqvawPy0wHjcP9KYWuU804CLssO4ItWzY6I4Zad418gc", "content": "", "creation_timestamp": "2025-02-20T22:00:06.000000Z"}, {"uuid": "957207f5-1270-484d-86a7-d8cd82e3efbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://t.me/GrayHatsHack/9343", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-06T06:33:13.000000Z"}, {"uuid": "1d7a44d6-4695-44d6-b275-cfbc6c809c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "seen", "source": "https://t.me/samprogr0_0/520", "content": "\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062b\u063a\u0631\u0629 CVE-2024-1346 \u0644\u062e\u062f\u0645\u0629  MYSQL", "creation_timestamp": "2024-04-08T00:19:07.000000Z"}, {"uuid": "1153a54c-9ff4-4123-b3c6-52c25cba80bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/samprogr0_0/519", "content": "#exploit\n1. CVE-2024-1346:\nWeak MySQL database root password in LaborOfficeFree\nhttps://github.com/PeterGabaldon/CVE-2024-1346\n\n2. A modern dashboard exploit for MS Xbox\nhttps://github.com/XboxDev/endgame-exploit", "creation_timestamp": "2024-04-08T00:19:05.000000Z"}, {"uuid": "eb0eb789-8b38-46fa-a0c1-56510ed3890b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "Telegram/bFbvvsWFrdQ5h-XjTeMTF5qtVAXiD5xqM9z_pQQSq8_xqlI", "content": "", "creation_timestamp": "2025-01-07T21:30:05.000000Z"}, {"uuid": "7679dafd-dd0c-4362-b8f0-40cd3688879e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://t.me/CyberSecurityIL/67448", "content": "\u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d5\u05ea\u05e9\u05ea\u05d9\u05d5\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1 (CISA) \u05de\u05d5\u05e1\u05d9\u05e4\u05d4 \u05e9\u05dc\u05d5\u05e9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05dc\u05de\u05d0\u05d2\u05e8 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8 Ivanti Endpoint Manager (EPM) \ud83e\udee5\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05df:\n- CVE-2024-13159\n- CVE-2024-13160 \n- CVE-2024-13161\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d3\u05d5\u05d5\u05d7\u05d5 \u05db\u05d1\u05e8 \u05d1\u05d0\u05d5\u05e7\u05d8\u05d5\u05d1\u05e8 24 \u05d5\u05d9\u05e6\u05d0 \u05dc\u05d4\u05dd \u05ea\u05d9\u05e7\u05d5\u05df \u05d1\u05d9\u05e0\u05d5\u05d0\u05e8 25.\n\nhttps://t.me/CyberSecurityIL/6781\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2025-03-11T14:36:14.000000Z"}, {"uuid": "6fbed878-d736-486e-9606-2778fcd46e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/CyberSecurityIL/67448", "content": "\u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d5\u05ea\u05e9\u05ea\u05d9\u05d5\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1 (CISA) \u05de\u05d5\u05e1\u05d9\u05e4\u05d4 \u05e9\u05dc\u05d5\u05e9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05dc\u05de\u05d0\u05d2\u05e8 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8 Ivanti Endpoint Manager (EPM) \ud83e\udee5\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05df:\n- CVE-2024-13159\n- CVE-2024-13160 \n- CVE-2024-13161\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d3\u05d5\u05d5\u05d7\u05d5 \u05db\u05d1\u05e8 \u05d1\u05d0\u05d5\u05e7\u05d8\u05d5\u05d1\u05e8 24 \u05d5\u05d9\u05e6\u05d0 \u05dc\u05d4\u05dd \u05ea\u05d9\u05e7\u05d5\u05df \u05d1\u05d9\u05e0\u05d5\u05d0\u05e8 25.\n\nhttps://t.me/CyberSecurityIL/6781\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2025-03-11T14:36:14.000000Z"}, {"uuid": "006b9dc3-a451-4b73-9052-45bef2f684f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://t.me/CyberSecurityIL/67448", "content": "\u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d5\u05ea\u05e9\u05ea\u05d9\u05d5\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1 (CISA) \u05de\u05d5\u05e1\u05d9\u05e4\u05d4 \u05e9\u05dc\u05d5\u05e9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05dc\u05de\u05d0\u05d2\u05e8 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8 Ivanti Endpoint Manager (EPM) \ud83e\udee5\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05df:\n- CVE-2024-13159\n- CVE-2024-13160 \n- CVE-2024-13161\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d3\u05d5\u05d5\u05d7\u05d5 \u05db\u05d1\u05e8 \u05d1\u05d0\u05d5\u05e7\u05d8\u05d5\u05d1\u05e8 24 \u05d5\u05d9\u05e6\u05d0 \u05dc\u05d4\u05dd \u05ea\u05d9\u05e7\u05d5\u05df \u05d1\u05d9\u05e0\u05d5\u05d0\u05e8 25.\n\nhttps://t.me/CyberSecurityIL/6781\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2025-03-11T14:36:14.000000Z"}, {"uuid": "8f821f85-e605-4e96-b3c6-5d53961193bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1305", "type": "seen", "source": "https://t.me/true_secator/6083", "content": "Microsoft \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c OpenVPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 RCE \u0438 LPE.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0431\u044b\u043b \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 Black Hat USA 2024, \u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0443\u0433\u043b\u0443\u0431\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b OpenVPN.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenVPN \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 2.6.10 \u0438 2.5.10 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-27459: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438 LPE \u0432 Windows;\n\n- CVE-2024-24974: \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u0430\u043d\u0430\u043b\u0443 \u00ab\\\\openvpn\\\\service\u00bb \u0432 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043d\u0438\u043c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0430 \u043d\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438;\n\n- CVE-2024-27903: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE \u0432 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 LPE \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 Android, iOS, macOS \u0438 BSD;\n\n- CVE-2024-1305: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a DoS \u0432 Windows\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u0442\u0440\u0438 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c openvpnserv, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f - \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c Windows Terminal Access Point (TAP).\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c OpenVPN \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0438\u0445 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438: CVE-2024-24974 \u0438 CVE-2024-27903 \u0438\u043b\u0438 CVE-2024-27459 \u0438 CVE-2024-27903, \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f RCE \u0438 LPE \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0442\u0440\u0438 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u044e\u0449\u0438\u0445 RCE \u0438 LPE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u043e\u0449\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a. \n\n\u041f\u043e\u0441\u043b\u0435 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f LPE \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432, \u043a\u0430\u043a BYOVD, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Protect Process Light (PPL) \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a Microsoft Defender, \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.", "creation_timestamp": "2024-08-12T17:40:05.000000Z"}, {"uuid": "4cee2c9d-4c54-4d87-bf17-52c6503719a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13179", "type": "seen", "source": "https://t.me/true_secator/6633", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Avalanche, Application Control Engine \u0438 EPM.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Ivanti EPM, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2024-10811, CVE-2024-13159 - CVE-2024-13161 \u0438\u043c\u0435\u044e\u0442 9,8 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 EMP 2024 \u0438 2022 SU6 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043d\u043e\u044f\u0431\u0440\u044c 2024.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 12 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE, DoS \u0438 EoP \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 Avalanche 6.4.7 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 CVE-2024-13179 - CVE-2024-13181 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0415\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e Ivanti \u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u043a\u0441\u0435\u0441\u0441\u0443\u0430\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0442\u044c\u0441\u044f \u0432\u043c\u0435\u0441\u0442\u0435 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c (\u0444\u043e\u0442\u043e \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u043c).", "creation_timestamp": "2025-01-17T18:40:05.000000Z"}, {"uuid": "068fcfc9-b3aa-4b2b-aabe-757cf94477b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://t.me/true_secator/6633", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Avalanche, Application Control Engine \u0438 EPM.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Ivanti EPM, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2024-10811, CVE-2024-13159 - CVE-2024-13161 \u0438\u043c\u0435\u044e\u0442 9,8 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 EMP 2024 \u0438 2022 SU6 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043d\u043e\u044f\u0431\u0440\u044c 2024.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 12 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE, DoS \u0438 EoP \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 Avalanche 6.4.7 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 CVE-2024-13179 - CVE-2024-13181 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0415\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e Ivanti \u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u043a\u0441\u0435\u0441\u0441\u0443\u0430\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0442\u044c\u0441\u044f \u0432\u043c\u0435\u0441\u0442\u0435 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c (\u0444\u043e\u0442\u043e \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u043c).", "creation_timestamp": "2025-01-17T18:40:05.000000Z"}, {"uuid": "31dec15e-7d98-48aa-84fd-f8a78de57c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/true_secator/6633", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Avalanche, Application Control Engine \u0438 EPM.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Ivanti EPM, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2024-10811, CVE-2024-13159 - CVE-2024-13161 \u0438\u043c\u0435\u044e\u0442 9,8 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 EMP 2024 \u0438 2022 SU6 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043d\u043e\u044f\u0431\u0440\u044c 2024.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 12 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE, DoS \u0438 EoP \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 Avalanche 6.4.7 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 CVE-2024-13179 - CVE-2024-13181 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0415\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e Ivanti \u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u043a\u0441\u0435\u0441\u0441\u0443\u0430\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0442\u044c\u0441\u044f \u0432\u043c\u0435\u0441\u0442\u0435 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c (\u0444\u043e\u0442\u043e \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u043c).", "creation_timestamp": "2025-01-17T18:40:05.000000Z"}, {"uuid": "79a7e93c-dff9-41a1-ad43-c369ebafb06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13181", "type": "seen", "source": "https://t.me/true_secator/6633", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Avalanche, Application Control Engine \u0438 EPM.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Ivanti EPM, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2024-10811, CVE-2024-13159 - CVE-2024-13161 \u0438\u043c\u0435\u044e\u0442 9,8 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 EMP 2024 \u0438 2022 SU6 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043d\u043e\u044f\u0431\u0440\u044c 2024.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 12 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE, DoS \u0438 EoP \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 Avalanche 6.4.7 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 CVE-2024-13179 - CVE-2024-13181 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0415\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e Ivanti \u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u043a\u0441\u0435\u0441\u0441\u0443\u0430\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0442\u044c\u0441\u044f \u0432\u043c\u0435\u0441\u0442\u0435 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c (\u0444\u043e\u0442\u043e \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u043c).", "creation_timestamp": "2025-01-17T18:40:05.000000Z"}, {"uuid": "0940bb26-788b-4449-aa5a-6db62df6b7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6764", "content": "\u0418 \u0432\u043d\u043e\u0432\u044c \u0447\u0435\u0440\u043d\u0430\u044f (\u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u0430\u044f) \u043f\u043e\u043b\u043e\u0441\u0430 \u0432 \u0436\u0438\u0437\u043d\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Palo Alto Networks \u0438 Ivanti.\n\n\u0423 \u043f\u0435\u0440\u0432\u044b\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 PAN-OS\u2019\u043e\u043c, \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2025-0111) \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 CVE-2025-0108 \u0438 CVE-2024-9474 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2025-0108 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Assetnote\u00a0\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC,\u00a0\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439, \u043a\u0430\u043a CVE-2025-0108 \u0438 CVE-2024-9474 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 root \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 PAN-OS.\n\nCVE-2024-9474 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 PAN-OS, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443 PAN-OS \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root. \u0423\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n\u0414\u043d\u0435\u043c \u043f\u043e\u0437\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GreyNoise \u043d\u0430\u0447\u0430\u043b\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u0434\u0432\u0443\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0417\u0430\u0442\u0435\u043c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0441\u044f, \u043d\u043e \u0438, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c GreyNoise, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0430.\n\nGreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 25 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 CVE-2025-0108, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0421\u0428\u0410, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Macnica \u042e\u0442\u0430\u043a\u0430 \u0421\u044d\u0434\u0437\u0438\u044f\u043c\u0430 \u0432\u044b\u044f\u0432\u0438\u043b \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 PAN-OS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0418\u0437 3490 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 1168 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u043d\u043e \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-9474.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0432 \u043f\u0440\u0438\u0437\u043c\u0435 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, 65% (2262 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430) \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u0437 \u043d\u0438\u0445.\n\n\u041f\u043e Ivanti \u0432\u0441\u0435 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 CVE-2024-10811, CVE-2024-13161, CVE-2024-13160 \u0438 CVE-2024-13159 (CVSS 9,8) \u0432 Ivanti Endpoint Manager (EPM) \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Horizon3.ai \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0438\u0441\u044c PoC.\n\n\u042d\u0442\u043e \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043c\u0430\u0448\u0438\u043d\u044b Ivanti EPM \u0432 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0442\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 EPM.", "creation_timestamp": "2025-02-20T18:30:05.000000Z"}, {"uuid": "1d802f29-ff8a-469d-b42f-ba4f22528162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6764", "content": "\u0418 \u0432\u043d\u043e\u0432\u044c \u0447\u0435\u0440\u043d\u0430\u044f (\u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u0430\u044f) \u043f\u043e\u043b\u043e\u0441\u0430 \u0432 \u0436\u0438\u0437\u043d\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Palo Alto Networks \u0438 Ivanti.\n\n\u0423 \u043f\u0435\u0440\u0432\u044b\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 PAN-OS\u2019\u043e\u043c, \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2025-0111) \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 CVE-2025-0108 \u0438 CVE-2024-9474 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2025-0108 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Assetnote\u00a0\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC,\u00a0\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439, \u043a\u0430\u043a CVE-2025-0108 \u0438 CVE-2024-9474 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 root \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 PAN-OS.\n\nCVE-2024-9474 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 PAN-OS, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443 PAN-OS \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root. \u0423\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n\u0414\u043d\u0435\u043c \u043f\u043e\u0437\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GreyNoise \u043d\u0430\u0447\u0430\u043b\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u0434\u0432\u0443\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0417\u0430\u0442\u0435\u043c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0441\u044f, \u043d\u043e \u0438, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c GreyNoise, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0430.\n\nGreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 25 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 CVE-2025-0108, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0421\u0428\u0410, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Macnica \u042e\u0442\u0430\u043a\u0430 \u0421\u044d\u0434\u0437\u0438\u044f\u043c\u0430 \u0432\u044b\u044f\u0432\u0438\u043b \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 PAN-OS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0418\u0437 3490 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 1168 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u043d\u043e \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-9474.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0432 \u043f\u0440\u0438\u0437\u043c\u0435 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, 65% (2262 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430) \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u0437 \u043d\u0438\u0445.\n\n\u041f\u043e Ivanti \u0432\u0441\u0435 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 CVE-2024-10811, CVE-2024-13161, CVE-2024-13160 \u0438 CVE-2024-13159 (CVSS 9,8) \u0432 Ivanti Endpoint Manager (EPM) \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Horizon3.ai \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0438\u0441\u044c PoC.\n\n\u042d\u0442\u043e \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043c\u0430\u0448\u0438\u043d\u044b Ivanti EPM \u0432 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0442\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 EPM.", "creation_timestamp": "2025-02-20T18:30:05.000000Z"}, {"uuid": "e08fa3b5-a04f-4443-931f-708d8b67e6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6764", "content": "\u0418 \u0432\u043d\u043e\u0432\u044c \u0447\u0435\u0440\u043d\u0430\u044f (\u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u0430\u044f) \u043f\u043e\u043b\u043e\u0441\u0430 \u0432 \u0436\u0438\u0437\u043d\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Palo Alto Networks \u0438 Ivanti.\n\n\u0423 \u043f\u0435\u0440\u0432\u044b\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 PAN-OS\u2019\u043e\u043c, \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2025-0111) \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 CVE-2025-0108 \u0438 CVE-2024-9474 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2025-0108 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Assetnote\u00a0\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC,\u00a0\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439, \u043a\u0430\u043a CVE-2025-0108 \u0438 CVE-2024-9474 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 root \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 PAN-OS.\n\nCVE-2024-9474 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 PAN-OS, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443 PAN-OS \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root. \u0423\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n\u0414\u043d\u0435\u043c \u043f\u043e\u0437\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GreyNoise \u043d\u0430\u0447\u0430\u043b\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u0434\u0432\u0443\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0417\u0430\u0442\u0435\u043c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0441\u044f, \u043d\u043e \u0438, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c GreyNoise, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0430.\n\nGreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 25 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 CVE-2025-0108, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0421\u0428\u0410, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Macnica \u042e\u0442\u0430\u043a\u0430 \u0421\u044d\u0434\u0437\u0438\u044f\u043c\u0430 \u0432\u044b\u044f\u0432\u0438\u043b \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 PAN-OS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0418\u0437 3490 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 1168 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u043d\u043e \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-9474.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0432 \u043f\u0440\u0438\u0437\u043c\u0435 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, 65% (2262 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430) \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u0437 \u043d\u0438\u0445.\n\n\u041f\u043e Ivanti \u0432\u0441\u0435 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 CVE-2024-10811, CVE-2024-13161, CVE-2024-13160 \u0438 CVE-2024-13159 (CVSS 9,8) \u0432 Ivanti Endpoint Manager (EPM) \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Horizon3.ai \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0438\u0441\u044c PoC.\n\n\u042d\u0442\u043e \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043c\u0430\u0448\u0438\u043d\u044b Ivanti EPM \u0432 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0442\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 EPM.", "creation_timestamp": "2025-02-20T18:30:05.000000Z"}, {"uuid": "92e544da-fee2-4dcc-9c96-bc7e65fe4c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1309", "type": "seen", "source": "https://t.me/true_secator/5542", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0426\u0435\u043d\u0442\u0440\u0430 \u0418\u0411 \u0438\u043c\u0435\u043d\u0438 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 CISPA \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0439 \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 DoS-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 300 000 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u041d\u043e\u0432\u0430\u044f \u0441\u0430\u043c\u043e\u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0449\u0435\u0439\u0441\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Loop DoS, \u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b CVE CVE-2024-1309 \u0438 CVE-2024-2169.\n\n\u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u0430 \u0441\u0447\u0435\u0442 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0434\u043c\u0435\u043d\u0443 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u0432\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433 \u0441 \u0434\u0440\u0443\u0433\u043e\u043c \u043d\u0430 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0440\u043e\u043a, \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u044f\u0441\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043d\u0438 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0431\u044a\u0435\u043c\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043b\u0438 \u0441\u0435\u0442\u0435\u0439.\n\n\u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043f\u0435\u0442\u0435\u043b\u044c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c TTL, Loop DoS-\u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\u00a0\n\n\u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438\u0433\u0433\u0435\u0440 \u0432\u0432\u0435\u0434\u0435\u043d \u0438 \u0446\u0438\u043a\u043b \u0437\u0430\u043f\u0443\u0449\u0435\u043d, \u0434\u0430\u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u0436\u0435 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443.\u00a0\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0435\u0442\u043b\u0438 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0447\u0438\u0441\u043b\u043e\u043c \u0438\u0442\u0435\u0440\u0430\u0446\u0438\u0439 \u0446\u0438\u043a\u043b\u0430.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0441\u043b\u0443\u0436\u0431\u0443 \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0442\u0438, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043c\u0430\u0433\u0438\u0441\u0442\u0440\u0430\u043b\u044c \u0441\u0435\u0442\u0438, \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DoS \u0438\u043b\u0438 DDoS-\u0430\u0442\u0430\u043a.\u00a0\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u0435, - NTP, DNS \u0438 TFTP, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 Echo, Chargen \u0438 QOTD.\u00a0\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b\u043e\u043c.\u00a0\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u043e\u043a\u043e\u043b\u043e 300 000 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0445\u043e\u0441\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0447\u0442\u0438 90 000 \u0441 NTP, 63 000 \u0441 DNS, 56 000 \u0441 Echo \u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043f\u043e 20 000 \u0441 TFTP, Chargen \u0438 QOTD.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 NTP \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u044e\u00a0ntpd, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u0443\u044e \u0434\u043e 2010 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2009-3563.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 CERT \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041a\u0430\u0440\u043d\u0435\u0433\u0438-\u041c\u0435\u043b\u043b\u043e\u043d, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u0435 CVE-2024-2169 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Broadcom, Honeywell, Microsoft \u0438 MikroTik.\u00a0\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e Broadcom \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\u00a0Microsoft \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 Windows.\n\nMikroTik \u0442\u0430\u043a\u0436\u0435 \u0441\u043a\u043e\u0440\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442 \u043f\u0430\u0442\u0447. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0438 Zyxel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 CVE-2009-3563, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u043d\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 EOL.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u0441\u043e\u0432\u0435\u0442\u0443\u044f \u0440\u044f\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u0440\u044b\u0432\u043e\u043c \u0446\u0438\u043a\u043b\u0430 DoS \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0430\u0442\u0430\u043a\u0438.", "creation_timestamp": "2024-03-20T11:53:17.000000Z"}, {"uuid": "0e6b6eca-f5e9-4b89-8063-eea1b7330d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1397", "type": "seen", "source": "https://t.me/ctinow/206303", "content": "https://ift.tt/azhk7Eg\nCVE-2024-1397", "creation_timestamp": "2024-03-13T00:26:48.000000Z"}, {"uuid": "f2028e0c-c54a-4f26-b98e-4d9fd4b2fc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1397", "type": "seen", "source": "https://t.me/ctinow/206300", "content": "https://ift.tt/azhk7Eg\nCVE-2024-1397", "creation_timestamp": "2024-03-13T00:21:44.000000Z"}, {"uuid": "324251f2-6d38-448a-908c-1cfa48998818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1388", "type": "seen", "source": "https://t.me/ctinow/208016", "content": "https://ift.tt/3SK1cY5\nCVE-2024-1388 | Yuki Plugin up to 1.3.13 on WordPress Theme Setting authorization (ID 217428)", "creation_timestamp": "2024-03-14T18:26:48.000000Z"}, {"uuid": "8ec626b4-b3f4-4671-9b20-bab0c89cf5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1302", "type": "seen", "source": "https://t.me/ctinow/205900", "content": "https://ift.tt/k6n8WAZ\nCVE-2024-1302", "creation_timestamp": "2024-03-12T17:32:09.000000Z"}, {"uuid": "8aa2b70f-1ae9-4b63-8795-1d2088222ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1301", "type": "seen", "source": "https://t.me/ctinow/205899", "content": "https://ift.tt/iI9WnUC\nCVE-2024-1301", "creation_timestamp": "2024-03-12T17:32:08.000000Z"}, {"uuid": "2dded38f-4e4a-44d3-a0f1-8c36971af444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1304", "type": "seen", "source": "https://t.me/ctinow/205894", "content": "https://ift.tt/AEjhO0s\nCVE-2024-1304", "creation_timestamp": "2024-03-12T17:32:02.000000Z"}, {"uuid": "1df3ab64-9718-4ff2-86f4-6c5cac35fca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1303", "type": "seen", "source": "https://t.me/ctinow/205893", "content": "https://ift.tt/rTNGyo4\nCVE-2024-1303", "creation_timestamp": "2024-03-12T17:32:01.000000Z"}, {"uuid": "4baac835-2df8-4612-b24d-62d4f1789144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1323", "type": "seen", "source": "https://t.me/ctinow/207636", "content": "https://ift.tt/N5ojtTv\nCVE-2024-1323 | ThemeIsle Orbit Fox Plugin up to 2.10.30 on WordPress cross site scripting (ID 3040304)", "creation_timestamp": "2024-03-14T11:21:26.000000Z"}, {"uuid": "8946a271-e7cb-4f3e-905f-232814a81e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1362", "type": "seen", "source": "https://t.me/ctinow/206916", "content": "https://ift.tt/a6HvJuL\nCVE-2024-1362 | Colibri Page Builder Plugin up to 1.0.253 on WordPress cp_shortcode_refresh cross-site request forgery (ID 3039597)", "creation_timestamp": "2024-03-13T17:11:56.000000Z"}, {"uuid": "2343ac41-b293-4217-aa88-a7e3ce10cef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1360", "type": "seen", "source": "https://t.me/ctinow/206874", "content": "https://ift.tt/apFrH6X\nCVE-2024-1360 | Colibri WP Plugin up to 1.0.94 on WordPress Limited Plugin Installation cross-site request forgery (ID 218308)", "creation_timestamp": "2024-03-13T16:41:43.000000Z"}, {"uuid": "d4086839-bf0d-4cf2-b4c1-0116765cb5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1304", "type": "seen", "source": "https://t.me/ctinow/205902", "content": "https://ift.tt/AEjhO0s\nCVE-2024-1304", "creation_timestamp": "2024-03-12T17:32:11.000000Z"}, {"uuid": "4efe7c33-f347-4037-8746-371cc40861e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1303", "type": "seen", "source": "https://t.me/ctinow/205901", "content": "https://ift.tt/rTNGyo4\nCVE-2024-1303", "creation_timestamp": "2024-03-12T17:32:10.000000Z"}, {"uuid": "2ff6c9fb-561e-4134-8c93-fa8be1518974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1361", "type": "seen", "source": "https://t.me/ctinow/206833", "content": "https://ift.tt/UQlxB7G\nCVE-2024-1361 | Colibri Page Builder Plugin up to 1.0.253 on WordPress extend_builder cross-site request forgery (ID 3039597)", "creation_timestamp": "2024-03-13T16:11:53.000000Z"}, {"uuid": "e46cd807-d004-4f48-84c8-8b2eb7d199d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1302", "type": "seen", "source": "https://t.me/ctinow/205892", "content": "https://ift.tt/k6n8WAZ\nCVE-2024-1302", "creation_timestamp": "2024-03-12T17:32:00.000000Z"}, {"uuid": "340453f1-58f3-4b01-98c8-fa59a4a4a63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1301", "type": "seen", "source": "https://t.me/ctinow/205891", "content": "https://ift.tt/iI9WnUC\nCVE-2024-1301", "creation_timestamp": "2024-03-12T17:31:59.000000Z"}, {"uuid": "065deb8a-7f29-4b34-8ced-85d2e8acf91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1328", "type": "seen", "source": "https://t.me/ctinow/205491", "content": "https://ift.tt/1xPSRVq\nCVE-2024-1328", "creation_timestamp": "2024-03-12T10:26:56.000000Z"}, {"uuid": "46e6b7f1-c1da-4389-9759-a1a6f814b69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1333", "type": "seen", "source": "https://t.me/ctinow/210756", "content": "https://ift.tt/NP4nVGM\nCVE-2024-1333", "creation_timestamp": "2024-03-18T17:26:53.000000Z"}, {"uuid": "3810daf8-426e-4bc6-8b2c-167b3f9b7037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1331", "type": "seen", "source": "https://t.me/ctinow/210755", "content": "https://ift.tt/kSO5I7K\nCVE-2024-1331", "creation_timestamp": "2024-03-18T17:26:52.000000Z"}, {"uuid": "944a249c-8b84-4e0e-960c-06a8a10d7104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1333", "type": "seen", "source": "https://t.me/ctinow/210770", "content": "https://ift.tt/NP4nVGM\nCVE-2024-1333", "creation_timestamp": "2024-03-18T17:31:58.000000Z"}, {"uuid": "d53a67c2-6f43-407a-bf25-58a5e948aed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1331", "type": "seen", "source": "https://t.me/ctinow/210769", "content": "https://ift.tt/kSO5I7K\nCVE-2024-1331", "creation_timestamp": "2024-03-18T17:31:57.000000Z"}, {"uuid": "cd367859-cef6-4935-a467-7c6ccfec01c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1320", "type": "seen", "source": "https://t.me/ctinow/203821", "content": "https://ift.tt/vyWcRHQ\nCVE-2024-1320", "creation_timestamp": "2024-03-09T08:26:53.000000Z"}, {"uuid": "6cd79640-9f28-432b-8d5a-cb10a910b35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1389", "type": "seen", "source": "https://t.me/ctinow/203650", "content": "https://ift.tt/WDk98hJ\nCVE-2024-1389 | iovamihai Paid Membership Subscriptions Plugin up to 2.11.1 on WordPress pms_stripe_connect_handle_authorization_return", "creation_timestamp": "2024-03-08T23:26:06.000000Z"}, {"uuid": "92d45fd1-4610-4164-960b-2f4ca75f5121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1351", "type": "seen", "source": "https://t.me/ctinow/203201", "content": "https://ift.tt/gH1o2si\nCVE-2024-1351 | MongoDB Server up to 4.4.28/5.0.24/6.0.13/7.0.5 tls.CAFile certificate validation (SERVER-72839)", "creation_timestamp": "2024-03-08T10:22:17.000000Z"}, {"uuid": "840035e5-82e5-4abc-85b1-04e01ac5645a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1328", "type": "seen", "source": "https://t.me/ctinow/205474", "content": "https://ift.tt/1xPSRVq\nCVE-2024-1328", "creation_timestamp": "2024-03-12T10:26:35.000000Z"}, {"uuid": "a73ff874-436b-4309-910d-367e42832733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1373", "type": "seen", "source": "https://t.me/ctinow/204607", "content": "https://ift.tt/WH53U6q\nCVE-2024-1373", "creation_timestamp": "2024-03-11T11:26:27.000000Z"}, {"uuid": "0ecb9dfe-23f1-4917-aa2e-0621ea12a9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1373", "type": "seen", "source": "https://t.me/ctinow/204608", "content": "https://ift.tt/WH53U6q\nCVE-2024-1373", "creation_timestamp": "2024-03-11T11:26:28.000000Z"}, {"uuid": "5d67a270-e8d8-4b49-8378-d0296fe6cbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1320", "type": "seen", "source": "https://t.me/ctinow/203815", "content": "https://ift.tt/vyWcRHQ\nCVE-2024-1320", "creation_timestamp": "2024-03-09T08:26:44.000000Z"}, {"uuid": "cba96f2c-a728-4a31-b539-6fec057650ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1309", "type": "seen", "source": "https://t.me/ctinow/199058", "content": "https://ift.tt/JiWjEke\nCVE-2024-1309 | Honeywell Niagara Framework AX up to 3.8.0/4.0 resource consumption", "creation_timestamp": "2024-03-04T08:11:41.000000Z"}, {"uuid": "5596e15a-91ea-41fd-88be-a8034649e922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1368", "type": "seen", "source": "https://t.me/ctinow/208174", "content": "https://ift.tt/t5APblq\nCVE-2024-1368 | Page Duplicator Plugin up to 0.1.1 on WordPress authorization", "creation_timestamp": "2024-03-14T21:27:04.000000Z"}, {"uuid": "f7307bf3-a278-4f60-b3c7-d024d427740f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1339", "type": "seen", "source": "https://t.me/ctinow/198301", "content": "https://ift.tt/ojNk40D\nCVE-2024-1339 | ImageRecycle PDF & Image Compression Plugin up to 3.1.13 on WordPress reinitialize cross-site request forgery (ID 3031424)", "creation_timestamp": "2024-03-02T10:11:57.000000Z"}, {"uuid": "ee9ba507-4526-4d06-abb3-d7dd6da961a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1340", "type": "seen", "source": "https://t.me/ctinow/198835", "content": "https://ift.tt/tvVfbns\nCVE-2024-1340 | Login Lockdown Plugin up to 2.08 on WordPress authorization", "creation_timestamp": "2024-03-03T17:21:44.000000Z"}, {"uuid": "885f9b8e-c42e-41e3-a7c2-306d822fa68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1322", "type": "seen", "source": "https://t.me/ctinow/198834", "content": "https://ift.tt/jazBO7g\nCVE-2024-1322 | Directorist Plugin up to 7.8.4 on WordPress Setting authorization", "creation_timestamp": "2024-03-03T17:21:42.000000Z"}, {"uuid": "4b342d9f-4001-4a31-ba2d-7f830c7dc980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1337", "type": "seen", "source": "https://t.me/ctinow/198826", "content": "https://ift.tt/ZnPtWXK\nCVE-2024-1337 | SKT Page Builder Plugin up to 4.1 on WordPress authorization (ID 3034383)", "creation_timestamp": "2024-03-03T16:51:24.000000Z"}, {"uuid": "aa462ac7-4cc2-4779-b8e0-db155eeb8278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1300", "type": "seen", "source": "https://t.me/ctinow/197786", "content": "https://ift.tt/d95qA1t\nCVE-2024-1300 | Vert.x up to 4.5.2 SNI memory leak", "creation_timestamp": "2024-03-01T16:52:10.000000Z"}, {"uuid": "b94281bd-0b11-4743-9da1-b1bf860c69bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1329", "type": "seen", "source": "https://t.me/ctinow/198373", "content": "https://ift.tt/6jpgYyD\nCVE-2024-1329 | HashiCorp Nomad/Nomad Enterprise up to 1.5.13/1.6.6/1.7.3 Template Renderer symlink", "creation_timestamp": "2024-03-02T14:46:42.000000Z"}, {"uuid": "badc3003-77b1-488c-b870-434b6123486c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1398", "type": "seen", "source": "https://t.me/ctinow/198369", "content": "https://ift.tt/jtNuJvZ\nCVE-2024-1398", "creation_timestamp": "2024-03-02T14:21:54.000000Z"}, {"uuid": "275aaae8-c0f9-420a-b2ec-c2492debfce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1398", "type": "seen", "source": "https://t.me/ctinow/198368", "content": "https://ift.tt/jtNuJvZ\nCVE-2024-1398", "creation_timestamp": "2024-03-02T14:21:53.000000Z"}, {"uuid": "286f33b9-9c06-4c11-871a-963b8d46ea63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1353", "type": "seen", "source": "https://t.me/ctinow/198366", "content": "https://ift.tt/pGhovn8\nCVE-2024-1353 | PHPEMS up to 1.0 index.api.php index picurl deserialization", "creation_timestamp": "2024-03-02T14:16:41.000000Z"}, {"uuid": "154c224d-ef52-4e21-9872-f0ecc91c54e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1336", "type": "seen", "source": "https://t.me/ctinow/198293", "content": "https://ift.tt/cdkBzs6\nCVE-2024-1336 | ImageRecycle PDF & Image Compression Plugin up to 3.1.13 on WordPress Setting optimizeAllOn cross-site request forgery (ID 3031424)", "creation_timestamp": "2024-03-02T09:36:11.000000Z"}, {"uuid": "70cf8328-c20b-4de9-a616-1c2c9d052067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1317", "type": "seen", "source": "https://t.me/ctinow/198647", "content": "https://ift.tt/t5CbHpk\nCVE-2024-1317 | Feedzy RSS Aggregator up to 4.4.2 on WordPress sql injection (ID 3033749)", "creation_timestamp": "2024-03-03T10:16:44.000000Z"}, {"uuid": "202933b3-27dc-4f20-a991-b45f9aa7c7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1318", "type": "seen", "source": "https://t.me/ctinow/198646", "content": "https://ift.tt/Sy7Fxzi\nCVE-2024-1318 | Feedzy RSS Aggregator Plugin up to 4.4.2 on WordPress Page authorization (ID 3033749)", "creation_timestamp": "2024-03-03T10:16:43.000000Z"}, {"uuid": "9d5f6812-7317-4f55-99d6-425215e36010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1338", "type": "seen", "source": "https://t.me/ctinow/198291", "content": "https://ift.tt/Ezs4FaN\nCVE-2024-1338 | ImageRecycle PDF & Image Compression Plugin up to 3.1.13 on WordPress Setting stopOptimizeAll cross-site request forgery (ID 3031424)", "creation_timestamp": "2024-03-02T09:36:09.000000Z"}, {"uuid": "623d6a6d-e883-4795-9a66-0a49d0f2fb1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1335", "type": "seen", "source": "https://t.me/ctinow/198292", "content": "https://ift.tt/MgGKsAo\nCVE-2024-1335 | ImageRecycle PDF & Image Compression Plugin up to 3.1.13 on WordPress Setting disableOptimization cross-site request forgery (ID 3031424)", "creation_timestamp": "2024-03-02T09:36:10.000000Z"}, {"uuid": "09182f57-f40f-44d0-a40b-fea93d9a3193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1334", "type": "seen", "source": "https://t.me/ctinow/198290", "content": "https://ift.tt/IcMpBrZ\nCVE-2024-1334 | ImageRecycle PDF & Image Compression Plugin up to 3.1.13 on WordPress Setting enableOptimization cross-site request forgery (ID 3031424)", "creation_timestamp": "2024-03-02T09:36:08.000000Z"}, {"uuid": "0a680a54-f11c-4dce-9fdc-94446b381fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1312", "type": "seen", "source": "https://t.me/ctinow/198279", "content": "https://ift.tt/9DUFxP4\nCVE-2024-1312 | Linux Kernel up to 6.5-rc3 Memory Management Subsystem lock_vma_under_rcu use after free", "creation_timestamp": "2024-03-02T09:06:39.000000Z"}, {"uuid": "3f0eae83-c011-453c-806a-a253149476e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1382", "type": "seen", "source": "https://t.me/ctinow/202259", "content": "https://ift.tt/F2nXVQu\nCVE-2024-1382", "creation_timestamp": "2024-03-07T10:27:04.000000Z"}, {"uuid": "6b614429-8d05-415a-ba00-6e2374433578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1377", "type": "seen", "source": "https://t.me/ctinow/202150", "content": "https://ift.tt/fQDeizt\nCVE-2024-1377", "creation_timestamp": "2024-03-07T07:26:12.000000Z"}, {"uuid": "75824e2d-706f-4f15-9337-3233742d6ff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1351", "type": "seen", "source": "https://t.me/ctinow/202636", "content": "https://ift.tt/HgXBe4j\nCVE-2024-1351", "creation_timestamp": "2024-03-07T18:32:35.000000Z"}, {"uuid": "43fac9a3-e098-4c9a-a530-edc4c0afa8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1351", "type": "seen", "source": "https://t.me/ctinow/202621", "content": "https://ift.tt/HgXBe4j\nCVE-2024-1351", "creation_timestamp": "2024-03-07T18:27:05.000000Z"}, {"uuid": "3f54f2ce-3f97-464a-b414-2908638cf467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1349", "type": "seen", "source": "https://t.me/ctinow/201720", "content": "https://ift.tt/iya8jBV\nCVE-2024-1349 | EmbedPress Plugin up to 3.9.8 on WordPress Shortcode cross site scripting", "creation_timestamp": "2024-03-06T19:51:46.000000Z"}, {"uuid": "5aff05f1-ade5-4613-bd1e-b2243c7d68be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1362", "type": "seen", "source": "https://t.me/ctinow/191678", "content": "https://ift.tt/9v4iGCY\nCVE-2024-1362", "creation_timestamp": "2024-02-23T12:26:20.000000Z"}, {"uuid": "6c2dbcbe-4fef-4a44-a280-27286247d2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1361", "type": "seen", "source": "https://t.me/ctinow/191677", "content": "https://ift.tt/nerDK7I\nCVE-2024-1361", "creation_timestamp": "2024-02-23T12:26:19.000000Z"}, {"uuid": "03eed3a5-6a97-4734-b14e-24c5f6d4b31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1360", "type": "seen", "source": "https://t.me/ctinow/191676", "content": "https://ift.tt/42GVkvZ\nCVE-2024-1360", "creation_timestamp": "2024-02-23T12:26:18.000000Z"}, {"uuid": "2aa07b89-bfeb-437c-94ba-fe5c29488b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1366", "type": "seen", "source": "https://t.me/ctinow/202145", "content": "https://ift.tt/FY9EulS\nCVE-2024-1366", "creation_timestamp": "2024-03-07T07:26:07.000000Z"}, {"uuid": "a101a66d-4f1a-42ec-ba79-b39ae481ca46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1366", "type": "seen", "source": "https://t.me/ctinow/202149", "content": "https://ift.tt/FY9EulS\nCVE-2024-1366", "creation_timestamp": "2024-03-07T07:26:11.000000Z"}, {"uuid": "834ee842-0a7f-4e8b-9238-f3dc2ea5f26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1377", "type": "seen", "source": "https://t.me/ctinow/202146", "content": "https://ift.tt/fQDeizt\nCVE-2024-1377", "creation_timestamp": "2024-03-07T07:26:08.000000Z"}, {"uuid": "9e1ed514-56e1-4199-a935-f01343e6e913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1341", "type": "seen", "source": "https://t.me/ctinow/196220", "content": "https://ift.tt/IoyAMkl\nCVE-2024-1341", "creation_timestamp": "2024-02-29T06:37:02.000000Z"}, {"uuid": "3e34644f-cb9d-4ae7-b7bd-675393554b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1341", "type": "seen", "source": "https://t.me/ctinow/196227", "content": "https://ift.tt/IoyAMkl\nCVE-2024-1341", "creation_timestamp": "2024-02-29T06:41:23.000000Z"}, {"uuid": "6967f502-d76c-47ae-8887-6dfa61d2057f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1362", "type": "seen", "source": "https://t.me/ctinow/191682", "content": "https://ift.tt/9v4iGCY\nCVE-2024-1362", "creation_timestamp": "2024-02-23T12:26:24.000000Z"}, {"uuid": "8f220fbd-5f56-4a22-9f4d-f2727511f819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1390", "type": "seen", "source": "https://t.me/ctinow/201070", "content": "https://ift.tt/WPaMZQF\nCVE-2024-1390 | Paid Membership Subscriptions Plugin up to 2.11.1 on WordPress creating_pricing_table_page authorization", "creation_timestamp": "2024-03-06T07:36:24.000000Z"}, {"uuid": "c7560ecd-abf0-428f-b6f6-27b7f76993b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1356", "type": "seen", "source": "https://t.me/ctinow/200763", "content": "https://ift.tt/42Ih6SY\nCVE-2024-1356", "creation_timestamp": "2024-03-05T22:32:08.000000Z"}, {"uuid": "08021df8-5993-4418-93b7-587a6127db89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1356", "type": "seen", "source": "https://t.me/ctinow/200753", "content": "https://ift.tt/42Ih6SY\nCVE-2024-1356", "creation_timestamp": "2024-03-05T22:26:17.000000Z"}, {"uuid": "60afba75-be01-4566-9844-1d1b607356f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1361", "type": "seen", "source": "https://t.me/ctinow/191681", "content": "https://ift.tt/nerDK7I\nCVE-2024-1361", "creation_timestamp": "2024-02-23T12:26:23.000000Z"}, {"uuid": "0290196d-734a-4327-95b7-d516e577a5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1360", "type": "seen", "source": "https://t.me/ctinow/191680", "content": "https://ift.tt/42GVkvZ\nCVE-2024-1360", "creation_timestamp": "2024-02-23T12:26:22.000000Z"}, {"uuid": "39860e72-bf27-48ac-9f13-4058f1045246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1323", "type": "seen", "source": "https://t.me/ctinow/194022", "content": "https://ift.tt/jxCWDuI\nCVE-2024-1323", "creation_timestamp": "2024-02-27T06:21:59.000000Z"}, {"uuid": "30a859ce-9bf5-455e-bdee-db3dbcfa796c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1319", "type": "seen", "source": "https://t.me/ctinow/199656", "content": "https://ift.tt/swVndX7\nCVE-2024-1319", "creation_timestamp": "2024-03-04T22:36:51.000000Z"}, {"uuid": "4e0efb34-a13b-430d-833f-8f3f5f9ef06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1388", "type": "seen", "source": "https://t.me/ctinow/195180", "content": "https://ift.tt/vUuZqoe\nCVE-2024-1388", "creation_timestamp": "2024-02-28T08:26:54.000000Z"}, {"uuid": "95362615-7a2c-468c-b79c-ea0bc19fef17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1388", "type": "seen", "source": "https://t.me/ctinow/195176", "content": "https://ift.tt/vUuZqoe\nCVE-2024-1388", "creation_timestamp": "2024-02-28T08:26:50.000000Z"}, {"uuid": "cac48230-86dd-4fa9-81eb-b696ecf2b2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1374", "type": "seen", "source": "https://t.me/ctinow/199834", "content": "https://ift.tt/OUoVQ5C\nCVE-2024-1374 | GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Management Console access control", "creation_timestamp": "2024-03-05T02:32:07.000000Z"}, {"uuid": "c6ee425c-71a0-4872-a068-21a8c9546c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1316", "type": "seen", "source": "https://t.me/ctinow/199655", "content": "https://ift.tt/hdqtr7S\nCVE-2024-1316", "creation_timestamp": "2024-03-04T22:36:50.000000Z"}, {"uuid": "8c2e38ea-1493-4223-9b76-bd9a6cc8ec2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1319", "type": "seen", "source": "https://t.me/ctinow/199648", "content": "https://ift.tt/swVndX7\nCVE-2024-1319", "creation_timestamp": "2024-03-04T22:27:01.000000Z"}, {"uuid": "506da222-13f7-4e3c-a88e-997347726748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1316", "type": "seen", "source": "https://t.me/ctinow/199647", "content": "https://ift.tt/hdqtr7S\nCVE-2024-1316", "creation_timestamp": "2024-03-04T22:27:00.000000Z"}, {"uuid": "ccb8ad73-d6a2-4257-a379-f80eba649aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1323", "type": "seen", "source": "https://t.me/ctinow/194023", "content": "https://ift.tt/jxCWDuI\nCVE-2024-1323", "creation_timestamp": "2024-02-27T06:21:59.000000Z"}, {"uuid": "71ded75e-c99c-4b31-a25e-4bcce40547dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1378", "type": "seen", "source": "https://t.me/ctinow/199835", "content": "https://ift.tt/xU9ELoq\nCVE-2024-1378 | GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Management Console access control", "creation_timestamp": "2024-03-05T02:32:08.000000Z"}, {"uuid": "90b288c9-ccf9-4419-92c8-11a8c493eb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1381", "type": "seen", "source": "https://t.me/ctinow/199852", "content": "https://ift.tt/nGDQLBy\nCVE-2024-1381", "creation_timestamp": "2024-03-05T03:27:53.000000Z"}, {"uuid": "892fee03-0542-468b-9a07-4972e55b3fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1372", "type": "seen", "source": "https://t.me/ctinow/199813", "content": "https://ift.tt/d3pf7gP\nCVE-2024-1372 | GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Management Console access control", "creation_timestamp": "2024-03-05T02:01:55.000000Z"}, {"uuid": "4cb0a352-7006-47ca-997d-1d01069dea74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1359", "type": "seen", "source": "https://t.me/ctinow/199811", "content": "https://ift.tt/jAtUd1i\nCVE-2024-1359 | GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Management Console access control", "creation_timestamp": "2024-03-05T02:01:53.000000Z"}, {"uuid": "a8fb1cde-39cd-4841-8d5a-96ce8d489c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1369", "type": "seen", "source": "https://t.me/ctinow/199812", "content": "https://ift.tt/nCG65r2\nCVE-2024-1369 | GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Management Console access control", "creation_timestamp": "2024-03-05T02:01:54.000000Z"}, {"uuid": "b95a0745-aeca-4fc5-8cb0-658fdd0ca7ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1355", "type": "seen", "source": "https://t.me/ctinow/199810", "content": "https://ift.tt/O1lkFaK\nCVE-2024-1355 | GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Management Console access control", "creation_timestamp": "2024-03-05T02:01:52.000000Z"}, {"uuid": "6f0b0a82-c9f9-4e5f-8a1c-9af2a1c9fa12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1354", "type": "seen", "source": "https://t.me/ctinow/199797", "content": "https://ift.tt/pZM0PkB\nCVE-2024-1354 | GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Management Console access control", "creation_timestamp": "2024-03-05T01:33:07.000000Z"}, {"uuid": "6ab83ef4-1948-4ec4-b683-df2af3d7505a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "seen", "source": "https://t.me/ctinow/187656", "content": "https://ift.tt/U9qEv4V\nCVE-2024-1346", "creation_timestamp": "2024-02-19T13:31:11.000000Z"}, {"uuid": "477233a1-8a28-4e27-9122-f117cb4c3559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1345", "type": "seen", "source": "https://t.me/ctinow/187655", "content": "https://ift.tt/cz8aWfh\nCVE-2024-1345", "creation_timestamp": "2024-02-19T13:31:10.000000Z"}, {"uuid": "c81fdfc3-e22c-429a-8c17-c67cee7d2cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "seen", "source": "https://t.me/ctinow/187652", "content": "https://ift.tt/U9qEv4V\nCVE-2024-1346", "creation_timestamp": "2024-02-19T13:27:04.000000Z"}, {"uuid": "9998a9fa-79de-414e-8585-e2d63208cace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1342", "type": "seen", "source": "https://t.me/ctinow/186527", "content": "https://ift.tt/C84AMBJ\nCVE-2024-1342", "creation_timestamp": "2024-02-16T17:21:26.000000Z"}, {"uuid": "205d17e0-610a-4b3b-8c00-affbab8078e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1344", "type": "seen", "source": "https://t.me/ctinow/187654", "content": "https://ift.tt/G0Lc2pV\nCVE-2024-1344", "creation_timestamp": "2024-02-19T13:31:09.000000Z"}, {"uuid": "35e0483f-163b-4670-b66f-3218e4409823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1343", "type": "seen", "source": "https://t.me/ctinow/187653", "content": "https://ift.tt/hPiCdaR\nCVE-2024-1343", "creation_timestamp": "2024-02-19T13:31:08.000000Z"}, {"uuid": "327e205f-6cb3-45a0-a68d-35419b5663e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1344", "type": "seen", "source": "https://t.me/ctinow/187650", "content": "https://ift.tt/G0Lc2pV\nCVE-2024-1344", "creation_timestamp": "2024-02-19T13:26:59.000000Z"}, {"uuid": "a34bb64b-bdfa-44ac-930a-e6090e08789c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1343", "type": "seen", "source": "https://t.me/ctinow/187649", "content": "https://ift.tt/hPiCdaR\nCVE-2024-1343", "creation_timestamp": "2024-02-19T13:26:58.000000Z"}, {"uuid": "8a3edae5-bcdb-4e20-a30e-c772c7422e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1345", "type": "seen", "source": "https://t.me/ctinow/187651", "content": "https://ift.tt/cz8aWfh\nCVE-2024-1345", "creation_timestamp": "2024-02-19T13:27:03.000000Z"}, {"uuid": "4c6ab234-a75b-4f03-b439-7290692130c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1300", "type": "seen", "source": "https://t.me/ctinow/180572", "content": "https://ift.tt/zIyHvBR\nCVE-2024-1300", "creation_timestamp": "2024-02-07T08:41:50.000000Z"}, {"uuid": "178af9bb-522d-4093-b876-b8defe70d9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1367", "type": "seen", "source": "https://t.me/ctinow/185119", "content": "https://ift.tt/X7uHnJK\nCVE-2024-1367", "creation_timestamp": "2024-02-14T23:26:33.000000Z"}, {"uuid": "aff41132-6803-4ffa-aae5-853a89db55bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1359", "type": "seen", "source": "https://t.me/ctinow/184139", "content": "https://ift.tt/Nz9DUvw\nCVE-2024-1359", "creation_timestamp": "2024-02-13T20:22:14.000000Z"}, {"uuid": "812479a1-ff4a-44a6-a41b-2e64b9878725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1355", "type": "seen", "source": "https://t.me/ctinow/184138", "content": "https://ift.tt/dNJwZRa\nCVE-2024-1355", "creation_timestamp": "2024-02-13T20:22:13.000000Z"}, {"uuid": "ee324080-ec65-46ea-873a-88e0bbee1084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1354", "type": "seen", "source": "https://t.me/ctinow/184137", "content": "https://ift.tt/9bpR71H\nCVE-2024-1354", "creation_timestamp": "2024-02-13T20:22:12.000000Z"}, {"uuid": "4c43279b-dc1c-4711-af05-de7dded81f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1309", "type": "seen", "source": "https://t.me/ctinow/183870", "content": "https://ift.tt/tSVU0Oz\nCVE-2024-1309", "creation_timestamp": "2024-02-13T15:22:06.000000Z"}, {"uuid": "69a30eb4-acd4-45c9-8c45-1ca66149d005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1378", "type": "seen", "source": "https://t.me/ctinow/184143", "content": "https://ift.tt/jWIuEb3\nCVE-2024-1378", "creation_timestamp": "2024-02-13T20:22:18.000000Z"}, {"uuid": "d4b7e822-3d93-464f-8df9-8de37eda5e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1374", "type": "seen", "source": "https://t.me/ctinow/184142", "content": "https://ift.tt/tKzxYgd\nCVE-2024-1374", "creation_timestamp": "2024-02-13T20:22:17.000000Z"}, {"uuid": "ec2e1055-dc48-402f-b8b4-16968f76cd0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1372", "type": "seen", "source": "https://t.me/ctinow/184141", "content": "https://ift.tt/0TLcilp\nCVE-2024-1372", "creation_timestamp": "2024-02-13T20:22:16.000000Z"}, {"uuid": "880d11c3-fc34-4f7b-8f6b-cebad8ce2ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1369", "type": "seen", "source": "https://t.me/ctinow/184140", "content": "https://ift.tt/UeBAsD2\nCVE-2024-1369", "creation_timestamp": "2024-02-13T20:22:15.000000Z"}, {"uuid": "b6ba5e67-727b-4f07-bcc8-68458f7a1650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1353", "type": "seen", "source": "https://t.me/ctinow/181767", "content": "https://ift.tt/KFEluty\nCVE-2024-1353", "creation_timestamp": "2024-02-09T02:26:25.000000Z"}, {"uuid": "6a84d1e4-ac9e-4a97-b3a5-3ad159649e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1312", "type": "seen", "source": "https://t.me/ctinow/181388", "content": "https://ift.tt/l7LeJb2\nCVE-2024-1312", "creation_timestamp": "2024-02-08T14:21:56.000000Z"}, {"uuid": "5f169536-12bd-4b3e-813e-5b59d561a23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:07.803833Z"}, {"uuid": "7c12c3ff-8f14-43fc-9639-2c9a4f9b4621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13059", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/53414", "content": "CVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Execution\nhttps://www.offsec.com/blog/cve-2024-13059/\n\nDiscover CVE-2024-13059, a critical vulnerability flat that affects AnythingLLM's handling of ASCII filenames in the multer library. \nThe post CVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Execution (https://www.offsec.com/blog/cve-2024-13059/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-04-17T21:22:20.000000Z"}, {"uuid": "d447e93e-d865-42af-b144-77a65898c38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "https://t.me/thehackernews/6372", "content": "\ud83d\uded1 UPDATE: Researchers reveal tech details on credential coercion vulnerabilities (CVE-2024-13159-13161, 10811) in Ivanti EPM. Attackers could compromise servers via relay attacks.\n\n\u26a1 Patch urgently if you haven\u2019t done so already\u2014PoC exploit now in the wild.\n\nhttps://thehackernews.com/2025/01/researcher-uncovers-critical-flaws-in.html", "creation_timestamp": "2025-02-20T06:29:05.000000Z"}, {"uuid": "d0999f7c-5773-4d7c-885b-cc46f69315ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13062", "type": "seen", "source": "https://t.me/CyberBulletin/27034", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-03T06:34:25.000000Z"}, {"uuid": "692d1d8c-9faa-4520-89a5-6676744971b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2033", "content": "https://github.com/PeterGabaldon/CVE-2024-1346\n\nWeak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants\n#github #poc", "creation_timestamp": "2024-02-26T07:49:00.000000Z"}, {"uuid": "26793d11-8198-4b86-9ce4-80e25460459f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.827359Z"}, {"uuid": "0914117f-931b-46e0-a0ef-f1405a03eea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.887413Z"}, {"uuid": "5063fae7-464b-4ca7-95ca-789708690066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1346", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10044", "content": "#exploit\n1. CVE-2024-1346:\nWeak MySQL database root password in LaborOfficeFree\nhttps://github.com/PeterGabaldon/CVE-2024-1346\n\n2. A modern dashboard exploit for MS Xbox\nhttps://github.com/XboxDev/endgame-exploit\n\n3. CVE-2024-26582:\nLinux Kernel TLS Vulnerability\nhttps://lore.kernel.org/linux-cve-announce/2024022139-spruce-prelude-c358@gregkh", "creation_timestamp": "2024-02-26T12:44:22.000000Z"}, {"uuid": "ee45b785-1a9f-4a86-ad8a-8102d14d0eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:23.012538Z"}, {"uuid": "e01baab5-d670-40d6-8a22-dc7a89ed00c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13418", "type": "seen", "source": "https://t.me/cvedetector/24321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13418 - WordPress Theme/Plugin Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13418 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files that can make remote code execution possible. This issue was escalated to Envato over two months from the date of this disclosure and the issue, while partially patched, is still vulnerable. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:48.000000Z"}, {"uuid": "e02ef0ca-a149-4f39-8797-409662da3543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13419", "type": "seen", "source": "https://t.me/cvedetector/24322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13419 - WordPress Smart Framework Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13419 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : Multiple plugins and/or themes for WordPress using Smart Framework are vulnerable to Stored Cross-Site Scripting due to a missing capability check on the saveOptions() and importThemeOptions() functions in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings which includes custom JavaScript that is enabled site-wide. This issue was escalated to Envato over two months from the date of this disclosure and the issue is still vulnerable. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:49.000000Z"}, {"uuid": "0193ff60-d83f-40d7-aafe-a4da3c5de7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13322", "type": "seen", "source": "https://t.me/cvedetector/24323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13322 - WordPress Ads Pro Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13322 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'a_id' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:50.000000Z"}, {"uuid": "36689e68-a424-4ae3-a185-b8dff976f1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13793", "type": "seen", "source": "https://t.me/cvedetector/24789", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13793 - Walmart | WooCommerce Theme WordPress Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13793 \nPublished : May 8, 2025, 5:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : The Wolmart | Multi-Vendor Marketplace WooCommerce Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.8.11. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T09:14:17.000000Z"}, {"uuid": "0ad8878d-4c09-454e-9285-f3b00a607b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13860", "type": "seen", "source": "https://t.me/cvedetector/24337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13860 - Buddyboss WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13860 \nPublished : May 2, 2025, 7:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018bbp_topic_title\u2019 parameter in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T11:45:45.000000Z"}, {"uuid": "f8e7255a-9e9f-4b9c-b706-293591b10bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13859", "type": "seen", "source": "https://t.me/cvedetector/24338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13859 - Buddyboss WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13859 \nPublished : May 2, 2025, 7:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018bp_nouveau_ajax_media_save\u2019 function in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T11:45:46.000000Z"}, {"uuid": "ba0590fc-73a9-4b70-a7e5-d13358f76c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13420", "type": "seen", "source": "https://t.me/cvedetector/24317", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13420 - WordPress Envato Theme/Plugin Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13420 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:42.000000Z"}, {"uuid": "a00a16a8-f6f4-4335-ab59-687599b7bd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13344", "type": "seen", "source": "https://t.me/cvedetector/24320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13344 - WooCommerce Advance Seat Reservation SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13344 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : The Advance Seat Reservation Management for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'profileId' parameter in all versions up to, and including, 3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:45.000000Z"}, {"uuid": "6cc6a22d-8584-4fcb-8da6-7530f83a1fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13858", "type": "seen", "source": "https://t.me/cvedetector/24339", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13858 - Buddyboss Platform Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13858 \nPublished : May 2, 2025, 7:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018invitee_name\u2019 parameter in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T11:45:46.000000Z"}, {"uuid": "120f1fd9-97c4-4499-b714-4a2c2cb57f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13738", "type": "seen", "source": "https://t.me/cvedetector/24394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13738 - \"Motors Car Dealer, Rental & Listing WordPress Theme Shortcode Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13738 \nPublished : May 3, 2025, 3:15 a.m. | 27\u00a0minutes ago \nDescription : The The Motors - Car Dealer, Rental & Listing WordPress theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.6.65. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.  \n  \n*It is unclear exactly which version the issue was patched in from the changelog. Therefore, we used the latest version at the time of verification. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T06:10:30.000000Z"}, {"uuid": "ef7031bd-bfc5-42f0-9076-cac544004b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/7080", "content": "Ivanti Endpoint Manager \u2013 Multiple Credential Coercion Vulnerabilities\n\nProof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks.\n\nPOC: https://github.com/horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities", "creation_timestamp": "2025-03-30T22:19:46.000000Z"}, {"uuid": "60e0de62-804f-4ac2-840a-adef2cb5f84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkq2bwcdzl2c", "content": "CVE-2024-13971 - Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro\nCVE ID : CVE-2024-13971\n \n Published : April 30, 2026, 1:16 p.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : Unauthenticated attackers can exploit a weakness in the XML ...", "creation_timestamp": "2026-04-30T16:36:09.882957Z"}, {"uuid": "28ff0897-7e4c-4693-b4de-a89442ae35f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkrkanvanl2i", "content": "CVE-2024-13362 - Freemius\nCVE ID : CVE-2024-13362\n \n Published : May 1, 2026, 5:29 a.m. | 49\u00a0minutes ago\n \n Description : Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient...", "creation_timestamp": "2026-05-01T06:54:27.479088Z"}, {"uuid": "85501c91-a7c0-4e27-936e-e548cca2c538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml2q3tjkdc2i", "content": "CVE-2024-13362 yet-another-stars-rating (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-04T22:33:05.655712Z"}, {"uuid": "6a9f31f6-e6e8-4b75-afe6-d46a9a2de3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml2th5p7fl2u", "content": "CVE-2024-13362 spotlight-social-photo-feeds (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-04T23:33:06.749942Z"}, {"uuid": "7b32fe16-d793-47c2-b5e1-c8d2aaf836d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml2wsftiia2s", "content": "CVE-2024-13362 events-addon-for-elementor (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T00:33:05.914865Z"}, {"uuid": "a5568338-0f93-4e5c-8895-2e60dcb11dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml325p4d762l", "content": "CVE-2024-13362 music-player-for-elementor (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T01:33:05.352894Z"}, {"uuid": "9272aa7b-33d5-4836-b9ee-a646fcd504ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml35izexw52s", "content": "CVE-2024-13362 share-this-image (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T02:33:06.580627Z"}, {"uuid": "8af8f5bb-0d8c-4c2e-8dd4-e4728350c8ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3aubnzwo24", "content": "CVE-2024-13362 woo-coupon-usage (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T03:33:06.126357Z"}, {"uuid": "e5d0434d-a4eb-4325-aeee-d60e8aa9dfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3e7kzgrp2h", "content": "CVE-2024-13362 wp-books-gallery (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T04:33:05.756032Z"}, {"uuid": "ad29dc6e-c0c5-49b1-9ed8-4f0d3782e604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3hkugamy2h", "content": "CVE-2024-13362 bp-better-messages (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T05:33:06.193656Z"}, {"uuid": "285ebc9b-650a-4c10-8a3f-472a492a8c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3kw5dyfo2s", "content": "CVE-2024-13362 widget-for-eventbrite-api (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T06:33:05.435294Z"}, {"uuid": "69c28e41-dc6f-4697-ba7e-daf2304ec193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3obgvq6r2h", "content": "CVE-2024-13362 primary-addon-for-elementor (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T07:33:05.841469Z"}, {"uuid": "ca8419f2-69e6-47e8-8805-25eb528fa0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3rmplhzw2i", "content": "CVE-2024-13362 cf7-styler (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T08:33:05.518817Z"}, {"uuid": "c156c8a0-cf98-4319-92d9-e052746e728c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3uxz5vyb2s", "content": "CVE-2024-13362 interactive-geo-maps (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T09:33:05.809007Z"}, {"uuid": "af47e56e-33c8-4e3f-84fd-c300f844c5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml3ydcfqip2g", "content": "CVE-2024-13362 gpt3-ai-content-generator (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T10:33:06.133995Z"}, {"uuid": "e7f144a2-f05b-4c9d-9327-b835424a1cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml43olqrv42a", "content": "CVE-2024-13362 url-shortify (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T11:33:05.882525Z"}, {"uuid": "8c0d37a1-e3a9-4e75-8039-b6ba2d1fafbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml4cf64tt72h", "content": "CVE-2024-13362 eazydocs (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T13:33:05.573515Z"}, {"uuid": "c210b2a6-2d41-421b-b0a8-24a7ca5f8449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml4fqhj5422i", "content": "CVE-2024-13362 ga-for-wp (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T14:33:06.465794Z"}, {"uuid": "d8ac0daa-fa89-4071-b9e9-31aaae7d9ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml4j3qyhcd2s", "content": "CVE-2024-13362 webba-booking-lite (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T15:33:06.282463Z"}, {"uuid": "58bb242c-59d8-4208-bfba-7199013e22b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml4mh27w5x2c", "content": "CVE-2024-13362 master-addons (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T16:33:06.126843Z"}, {"uuid": "d65d25bc-948e-4c68-b622-88cbbe26b10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml4wiwvyjw2x", "content": "CVE-2024-13362 b-blocks (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T19:33:07.079497Z"}, {"uuid": "fe2c241c-c657-4287-86c6-c8632e90dcea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml557is25h2h", "content": "CVE-2024-13362 blockspare (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T21:33:06.550070Z"}, {"uuid": "c547521b-96af-4fa5-a884-9bc0a5f4c6f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mla6gu4fp62l", "content": "CVE-2024-13362 integrate-google-drive (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T02:33:06.182349Z"}, {"uuid": "4568f943-f4a2-4a1e-8570-b7bcbd50c56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlaf5gejg22h", "content": "CVE-2024-13362 automatic-youtube-gallery (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T04:33:06.078120Z"}, {"uuid": "4ebb0c3d-318c-4733-957a-f167e723721f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlabs4m6qg2u", "content": "CVE-2024-13362 streamweasels-twitch-integration (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T03:33:05.515252Z"}, {"uuid": "9ba6be8c-055d-4d2b-b00e-dd29a8ebd9f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlaiipjt3d2h", "content": "CVE-2024-13362 tripetto (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T05:33:05.867833Z"}, {"uuid": "0c56e7f9-6fd5-487f-a94b-1998627ca60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlaltyppu22x", "content": "CVE-2024-13362 open-user-map (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T06:33:10.566132Z"}, {"uuid": "3000f122-7aa0-4f77-889c-4b9cfb0c8036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlap7bw4uo2a", "content": "CVE-2024-13362 bulletin-announcements (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T07:33:06.107434Z"}, {"uuid": "6955f7c9-429c-4fc2-bbbf-cf50e3ece629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlaskkcs5l2g", "content": "CVE-2024-13362 geo-mashup (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T08:33:05.115427Z"}, {"uuid": "958ed611-77a0-406a-8c25-2d2e6f3ffc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlavvu7pnh2c", "content": "CVE-2024-13362 radio-player (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T09:33:06.185170Z"}, {"uuid": "64d5ce55-b775-42d0-a3a0-791114b6595d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.278280Z"}, {"uuid": "90205f3a-5742-46af-9bbc-622ce1b9a978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.311168Z"}, {"uuid": "04d09c7a-522f-44c1-8b3e-ca2b95aedd15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlazb55llp2c", "content": "CVE-2024-13362 ocean-extra (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T10:33:06.118791Z"}, {"uuid": "07ca97e2-3a00-478e-b1d2-f97656bf4dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlb4mgmn4x2i", "content": "CVE-2024-13362 restaurant-cafe-addon-for-elementor (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T11:33:05.837447Z"}, {"uuid": "fab98e4c-d4b0-478b-b73d-892f7d7ce361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlb7xpkctj2c", "content": "CVE-2024-13362 add-search-to-menu (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T12:33:05.693677Z"}, {"uuid": "34579721-8881-4a1c-9d10-a5af9ae539ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlbdczahwo2a", "content": "CVE-2024-13362 wpbits-addons-for-elementor (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T13:33:05.913163Z"}, {"uuid": "f8141251-01ae-42df-9e89-d6182242c223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlbjzlneky2a", "content": "CVE-2024-13362 unlimited-elements-for-elementor (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T15:33:05.708163Z"}, {"uuid": "792ed6bb-bfa6-458a-8aaa-9c3b6aae7044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlbnev76li2q", "content": "CVE-2024-13362 wp-post-author (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T16:33:06.191369Z"}, {"uuid": "c5c13418-12e1-4db7-b791-4d17986587b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlbqq74rpe2c", "content": "CVE-2024-13362 shortcodes-ultimate (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T17:33:07.200276Z"}, {"uuid": "40ec7dd4-726d-4c12-a9f5-fdeca169a865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mlbqq7uxvt2t", "content": "CVE-2024-13362 shortcodes-ultimate (CVSS Score 6.1) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T17:33:08.130227Z"}, {"uuid": "2c3bf959-9dcb-49cc-8366-a9eba350fa49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.723718Z"}, {"uuid": "bb157c78-ccec-4a6d-8641-678bed6d688a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.911077Z"}, {"uuid": "9a5f0303-e115-4a58-ba3c-1aca71fe9a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.815606Z"}, {"uuid": "247ef966-a807-49ab-89d0-27f48f2eba55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlbu3inl2d2l", "content": "CVE-2024-13362 post-smtp (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T18:33:12.620088Z"}, {"uuid": "89449273-f7c3-4032-8c2e-145bdd68dace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlfg3bw7j42h", "content": "CVE-2024-13362 radio-station (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T04:33:06.892301Z"}, {"uuid": "15661f5d-4557-43a7-8e0a-35ee534ae5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlfjgkwwm22u", "content": "CVE-2024-13362 ultimeter (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T05:33:06.751802Z"}, {"uuid": "2e3212a6-d98a-4112-a4bb-d3b1abe3e3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlfmrtsoxp2s", "content": "CVE-2024-13362 automatic-internal-links-for-seo (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T06:33:17.470892Z"}, {"uuid": "799bd797-81f8-492c-b84e-3b6ac4546883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlfq555czr2x", "content": "CVE-2024-13362 easy-age-verify (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T07:33:06.369873Z"}, {"uuid": "746eface-7ecc-42ea-8e13-fce68f62c652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlftigwz3f2s", "content": "CVE-2024-13362 pdf-poster (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T08:33:07.012537Z"}, {"uuid": "23bf9fc3-438f-48b2-8746-5c9209543008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlfwtpddcj2g", "content": "CVE-2024-13362 blog-designer-pack (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T09:33:06.104972Z"}, {"uuid": "6b25ed7e-8932-41b7-8c27-f34476bce437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:10.741779Z"}, {"uuid": "199f7a23-10aa-42c2-affe-261f7ab0d7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:10.806471Z"}, {"uuid": "dedde87c-0a9e-48b8-950d-9ee3bf149121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlg26yo2pz2l", "content": "CVE-2024-13362 wp-stripe-donation (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T10:33:06.387512Z"}, {"uuid": "e7a37a9d-2652-430e-a812-b737ec0fa8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlg5kbf4622c", "content": "CVE-2024-13362 gs-testimonial (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T11:33:05.414666Z"}, {"uuid": "9dda5f69-31d2-4f1c-ad4d-86b7acbe8b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mlgro2rstp2i", "content": "CVE-2024-13362 wps-team (CVSS Score 6.1) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T17:33:08.144265Z"}, {"uuid": "a0f05308-5b36-4c23-ad29-cbc9662ee7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlgavkmg4u2u", "content": "CVE-2024-13362 woocustomizer (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T12:33:05.895147Z"}, {"uuid": "0b4e2bb4-60c4-4093-bd1a-022d5d0eb8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlgeaty2tu2u", "content": "CVE-2024-13362 simply-gallery-block (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T13:33:05.922112Z"}, {"uuid": "e5000932-d4bb-4cac-9c40-6b47ee5fdb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlghm5j2tw2s", "content": "CVE-2024-13362 tablesome (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T14:33:05.932271Z"}, {"uuid": "b039d1d0-2d09-4453-9c9c-7810b05493e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlgkxhfvbp2s", "content": "CVE-2024-13362 tablepress (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T15:33:06.746183Z"}, {"uuid": "e9461501-3795-46c1-8e20-5ce451da7655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlgocqtwls2x", "content": "CVE-2024-13362 easy-facebook-likebox (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T16:33:07.240345Z"}, {"uuid": "cf0a6cf2-7f2b-4043-bcd0-17ffc0bc3b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlgro24ysp2s", "content": "CVE-2024-13362 wps-team (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T17:33:07.340237Z"}, {"uuid": "3bb03a0e-f961-45b7-9659-9c0fb182afab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlguzdapbw2h", "content": "CVE-2024-13362 security-ninja (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T18:33:06.959941Z"}, {"uuid": "497cb755-5613-478b-9913-c2a99c89938c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlgyemqmxm2x", "content": "CVE-2024-13362 joli-table-of-contents (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T19:33:07.301057Z"}, {"uuid": "9177f1ad-ee98-4303-ae89-8f10a4903991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlh3pvpjap2i", "content": "CVE-2024-13362 wp-meta-and-date-remover (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T20:33:07.125425Z"}, {"uuid": "441b6dea-6138-470e-a263-cb07a8280934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlh736r6yo2h", "content": "CVE-2024-13362 advanced-classifieds-and-directory-pro (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T21:33:07.213540Z"}, {"uuid": "cae45fe2-b436-4c40-bbda-851c551e2e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlhcggyj222x", "content": "CVE-2024-13362 easy-marijuana-age-verify (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T22:33:05.726018Z"}, {"uuid": "92735b4f-b462-4170-857e-8a288f60d2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlhfrr6euq2c", "content": "CVE-2024-13362 featured-images-for-rss-feeds (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-09T23:33:06.910306Z"}, {"uuid": "c6b98ce6-b67c-4777-bad4-ff95ceefbcd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlhj4zeupv2i", "content": "CVE-2024-13362 wc-thanks-redirect (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T00:33:05.497324Z"}, {"uuid": "94578aa6-d20a-4882-b7c0-36b3cad456f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlhmid42n42h", "content": "CVE-2024-13362 custom-page-templates-by-vegacorp (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T01:33:05.986725Z"}, {"uuid": "6d00172f-30f1-4166-9ac1-852f31e4b2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlhptmau342x", "content": "CVE-2024-13362 add-fields-to-checkout-page-woocommerce (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T02:33:06.137268Z"}, {"uuid": "6b6d6ca8-bc7a-414a-be57-be75cbfc5438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mlhqkstvld2e", "content": "CVE-2024-13362 add-fields-to-checkout-page-woocommerce (CVSS Score 6.1) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T02:46:06.289812Z"}, {"uuid": "07bdc7b4-acd4-4890-a774-35d855a3e476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlht6vgqmw2s", "content": "CVE-2024-13362 add-expires-headers (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T03:33:05.981922Z"}, {"uuid": "8e1b89aa-4db6-4b29-8726-80075543d85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlhwkas3pz2h", "content": "CVE-2024-13362 wp-notification-bell (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T04:33:08.411813Z"}, {"uuid": "af618371-c72d-4b9b-bc9a-22c432bb5e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlhzvhzqqu2i", "content": "CVE-2024-13362 gs-team-members (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T05:33:06.144475Z"}, {"uuid": "12809718-c5cc-44bb-b850-5a6e2de82b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mli5arfdcy2q", "content": "CVE-2024-13362 wc-place-order-without-payment (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T06:33:06.319362Z"}, {"uuid": "c9488caa-9aa9-439c-8671-ca93ba2c54cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mliam2hjb32s", "content": "CVE-2024-13362 code-manager (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T07:33:06.071766Z"}, {"uuid": "18569e37-86ae-46be-84ee-e0de0598f09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlidxdka372s", "content": "CVE-2024-13362 wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T08:33:05.938978Z"}, {"uuid": "6436ff69-153f-4e62-a1ec-dd459777a59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlihcmasyc2c", "content": "CVE-2024-13362 treepress (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T09:33:05.366224Z"}, {"uuid": "37bec1c7-f3da-47e8-806f-2c9850358794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:10.940282Z"}, {"uuid": "709d4779-ec3b-4750-8df9-34c97847a0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mliknx6s6d2i", "content": "CVE-2024-13362 map-location-picker-at-checkout-for-woocommerce (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T10:33:07.517677Z"}, {"uuid": "30d7c7fd-9837-4876-af42-c191afb71633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlinz6ljc52a", "content": "CVE-2024-13362 mobile-menu (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T11:33:05.295192Z"}, {"uuid": "4e261a7c-1bc2-4021-b477-b22273e6644b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlireiihzd2h", "content": "CVE-2024-13362 post-list-designer (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T12:33:06.137285Z"}, {"uuid": "ff0cad4f-a356-4791-b7d3-b9a51148b3ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mliuprkayi2u", "content": "CVE-2024-13362 restricted-content (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T13:33:05.835710Z"}, {"uuid": "f417fb74-dbe5-455c-89f9-671b119edf89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mliy32spzf2c", "content": "CVE-2024-13362 xt-woo-variation-swatches (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T14:33:06.130458Z"}, {"uuid": "6bb0fca5-2d77-448e-b290-f252a42cbaee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mliyk7d6vb42", "content": "CVE-2024-13362 xt-woo-variation-swatches (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-10T14:41:36.789045Z"}, {"uuid": "c6329e7a-9f2b-485e-b996-600099640c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlj3gelkte2u", "content": "CVE-2024-13362 delete-old-posts-programmatically (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T15:33:06.766364Z"}, {"uuid": "8f0bd354-10b1-4f7b-aefc-ecdb629ac036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlj6rnur5o2s", "content": "CVE-2024-13362 fullworks-anti-spam (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T16:33:06.346534Z"}, {"uuid": "7eb861b5-1397-4a51-a1a4-0d6a9a2354a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mljc4wytgk2a", "content": "CVE-2024-13362 glossary-by-codeat (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T17:33:06.288442Z"}, {"uuid": "46689799-b31c-43bd-8cbc-7d2cb5cd22a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mljititnl42u", "content": "CVE-2024-13362 widgets-on-pages (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T19:33:06.012692Z"}, {"uuid": "abca2eea-13c7-44c3-bd1e-a9f375dc0ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mljpk3jmdp2s", "content": "CVE-2024-13362 foobar-notifications-lite (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T21:33:06.512974Z"}, {"uuid": "03716f29-12bd-4a1a-a1f9-750d07fd4104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mljsvewirv2g", "content": "CVE-2024-13362 basepress (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T22:33:06.081107Z"}, {"uuid": "dbd1d3e5-b7c6-42cd-8a4d-c50cb8e3e427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mljwao3vq52s", "content": "CVE-2024-13362 woo-authorize-net-gateway-aim (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-10T23:33:06.070858Z"}, {"uuid": "ae7cd4f7-edd3-4528-81d2-18c84739f7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mljzlwx7xy2s", "content": "CVE-2024-13362 remove-add-to-cart-woocommerce (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T00:33:05.765408Z"}, {"uuid": "93747230-9551-4401-bb3a-a2bcad168caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mlka652tl522", "content": "Top 3 CVE for last 7 days:\nCVE-2026-31431: 141 interactions\nCVE-2026-43284: 122 interactions\nCVE-2026-43500: 84 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-42511: 56 interactions\nCVE-2024-13362: 4 interactions\nCVE-2026-29201: 3 interactions\n", "creation_timestamp": "2026-05-11T02:30:39.647089Z"}, {"uuid": "9924fad0-2f81-4370-83cf-c623ad818191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlkacjuxey2h", "content": "CVE-2024-13362 alt-manager (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T02:33:06.247743Z"}, {"uuid": "3e0e5026-6ed7-42f0-a765-fedd8b2f9e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlkdnsm2w62l", "content": "CVE-2024-13362 wp-letsencrypt-ssl (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T03:33:05.734635Z"}, {"uuid": "4e9f692a-03d4-4642-b9d9-0a8ecb1a4b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlkgz3x3wz2x", "content": "CVE-2024-13362 premmerce-woocommerce-product-filter (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T04:33:05.888158Z"}, {"uuid": "1f27330f-2a8f-4003-9720-5111163da01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlkkefmlpe2s", "content": "CVE-2024-13362 woo-floating-cart-lite (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T05:33:06.539899Z"}, {"uuid": "270af816-1041-42a6-8f5c-0cd870d113b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:26.937617Z"}, {"uuid": "e92666ea-7d87-488f-a0b1-f5b19627d5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlknpohbsj2u", "content": "CVE-2024-13362 advance-wc-analytics (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T06:33:05.938754Z"}, {"uuid": "5f1882b2-5fad-46b0-8ee7-fda9e7cb45dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:26.983913Z"}, {"uuid": "4c5fe6c4-274f-4813-bf7b-fbde6eca99af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:27.319273Z"}, {"uuid": "0b9936ea-f9f9-4d0f-8e23-f008ab883c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlkr2ydmqa2u", "content": "CVE-2024-13362 internal-links (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T07:33:07.028271Z"}, {"uuid": "e5d393a7-d168-484c-aa0e-e98f0f7c17fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlkugak2t72h", "content": "CVE-2024-13362 post-slider-and-carousel (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T08:33:05.574848Z"}, {"uuid": "8002bd2f-e964-4c9e-8103-2b68160a39ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlkxrkfi4h2l", "content": "CVE-2024-13362 post-to-google-my-business (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T09:33:06.771750Z"}, {"uuid": "c64b901a-f9e4-4352-810b-5f30347fa36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mll34t5nlo2u", "content": "CVE-2024-13362 woocommerce-pay-per-post (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T10:33:07.225181Z"}, {"uuid": "3df8de12-8a31-44c9-bbf5-352a545d51ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mll6i5cces2g", "content": "CVE-2024-13362 go-fetch-jobs-wp-job-manager (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T11:33:06.660456Z"}, {"uuid": "09e21e0d-cf49-4a28-84e7-c4d7c9ca23b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllbtgxmw52s", "content": "CVE-2024-13362 woo-permalink-manager (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T12:33:07.110956Z"}, {"uuid": "5c0a31eb-4f56-43a9-b8f9-34ff335dbf9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllf6pq2yq2q", "content": "CVE-2024-13362 xt-woo-quick-view-lite (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T13:33:06.533313Z"}, {"uuid": "a273a113-e7cf-4ee7-b41a-6da6fb132a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllijykp4b2u", "content": "CVE-2024-13362 contact-form-7-multi-step-module (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T14:33:06.781462Z"}, {"uuid": "8b9d069e-9a96-4e76-a4a2-bc58a72037c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllpaki4ey2x", "content": "CVE-2024-13362 woo-conditional-payment-gateways (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T16:33:05.601296Z"}, {"uuid": "899dbcfe-8985-4948-91db-f4005ed475f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllslum26324", "content": "CVE-2024-13362 wp-auto-republish (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T17:33:06.543094Z"}, {"uuid": "8e1d9ae2-0d17-493f-9d09-9bc181548b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllslum26324", "content": "CVE-2024-13362 wp-auto-republish (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T17:33:06.559974Z"}, {"uuid": "b7c34f63-a5ee-436f-a7e5-bf8c756a9bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllvx5lzvx2g", "content": "CVE-2024-13362 wp-top-news (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T18:33:06.164843Z"}, {"uuid": "4cd6afed-4126-4206-bf38-c1a85fb08ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllvx5lzvx2g", "content": "CVE-2024-13362 wp-top-news (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T18:33:06.170005Z"}, {"uuid": "d52742bb-47a5-444a-9c45-64a8de3683c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mllvx6fcxe2i", "content": "CVE-2024-13362 wp-top-news (CVSS Score 6.1) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T18:33:07.262936Z"}, {"uuid": "4e4487ee-3115-4a27-b7b0-e7f9a188a2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mllzchf74y2c", "content": "CVE-2024-13362 foobox-image-lightbox (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T19:33:06.939618Z"}, {"uuid": "133fbba7-ee15-4c8e-b1b6-47cbbc0fd09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlm4npoal42s", "content": "CVE-2024-13362 wp-coupons-and-deals (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T20:33:07.506082Z"}, {"uuid": "7f6a3134-c9da-4ab4-b1ed-5927b08d9c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlm7yzk2d62s", "content": "CVE-2024-13362 wp-fail2ban (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-11T21:33:06.386572Z"}, {"uuid": "612b1c29-63f8-4a09-8ca6-7b3ee7f91a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mln2td5xku2u", "content": "CVE-2024-13362 smart-phone-field-for-gravity-forms (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-12T05:33:06.317861Z"}, {"uuid": "af046679-6e0b-48f5-bf8f-aafc84d1be01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlnbjvphhv2s", "content": "CVE-2024-13362 product-layouts (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-12T07:33:06.428228Z"}, {"uuid": "2116d2a8-15da-470c-a1e0-70baf990753a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "16d82568-780e-4038-b817-cce0e1ac628e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "322a2d81-fe6e-4d86-9742-b5753220795e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "93e86c40-a222-4a49-8f65-cc7df62c3eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "24bc390b-e8c9-424e-aa69-c7946ef43603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm5fudcvse2s", "content": "CVE-2024-13362 inavii-social-feed-for-elementor (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-18T17:33:06.897537Z"}, {"uuid": "21314cce-3342-4641-a35a-1810e42c19ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm5mkw4mab2s", "content": "CVE-2024-13362 auto-install-free-ssl (CVSS Score 6.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-18T19:33:07.398985Z"}, {"uuid": "f0f6303d-7d56-4a08-ad89-1f76166b2a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13362", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mm5n4awnvd2w", "content": "CVE-2024-13362 auto-install-free-ssl (CVSS Score 6.1) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-18T19:42:49.064225Z"}, {"uuid": "724115fa-4968-47ed-9e2a-2bdfc14cef6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-23)", "content": "", "creation_timestamp": "2026-05-23T00:00:00.000000Z"}, {"uuid": "d6db55f7-249e-4323-afa3-6146b29b2397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13919", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:31.818692Z"}, {"uuid": "c9474d27-f27a-4b59-aa3d-c3ceae326e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:31.850424Z"}, {"uuid": "6e5dcc12-ca95-435f-b63b-9ee23777fb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4t66vqy3lccyv", "content": "CVE-2024-13784 - Contact Form, Survey, Quiz & Popup Form Builder \u2013 ARForms\nCVE ID : CVE-2024-13784\n \n Published : Aug. 16, 2026, 9:16 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : The Contact Form, Survey, Quiz & Popup Form Builder \u2013 ARForms plugin for WordPress is vulner...", "creation_timestamp": "2026-08-16T11:05:19.787814Z"}, {"uuid": "bb841d5b-4eb2-48a5-b96e-f9c9e5ec250f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-1313", "type": "published-proof-of-concept", "source": "https://github.com/grafana/bugbounty/security/advisories/GHSA-67rv-qpw2-6qrr", "content": "", "creation_timestamp": "2024-04-05T12:25:43.000000Z"}, {"uuid": "af795048-8b51-4c87-9fc1-9590e0fb230d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-13209", "type": "published-proof-of-concept", "source": "https://github.com/redaxo/core/security/advisories/GHSA-7wj8-856p-qc9m", "content": "", "creation_timestamp": "2025-02-10T13:49:06.000000Z"}, {"uuid": "caf756bf-e2c3-43ef-8e72-c8769dad0510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13787", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmvarcess42u", "content": "CVE-2024-13787 - Critical Insecure Deserialization in Veda WordPress theme. CVSS 9.8. Authenticated attackers can inject PHP objects. Unpatched. Disable theme or use firewall. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2024-13787/", "creation_timestamp": "2026-05-28T05:05:50.654950Z"}, {"uuid": "d7d716fd-4a84-4c57-b672-67065bad4dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:00:12.095914Z"}, {"uuid": "7f7817c2-8779-418e-833b-bdf4d07ec411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "creation_timestamp": "2026-05-27T00:00:00.000000Z"}, {"uuid": "9ce2baba-abe9-4fce-90a4-896eee2cef97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13985.yaml", "content": "", "creation_timestamp": "2026-08-17T00:00:10.032783Z"}, {"uuid": "f4c2ffce-8b6e-49c3-9d4c-ecdac0ffaa72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13745", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmydrwsz7n2g", "content": "CVE-2024-13745, EDK II: several issues with partition table measurements", "creation_timestamp": "2026-05-29T10:37:52.216002Z"}, {"uuid": "bbcff408-3cc1-4bbf-8615-bae41c7dea8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "a79a5172-576d-4ace-8716-e0abb9b7bb9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "content": "", "creation_timestamp": "2026-05-31T00:00:00.000000Z"}, {"uuid": "e5efbef5-a37e-48da-80f9-57f6c090a037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "content": "", "creation_timestamp": "2026-05-31T00:00:00.000000Z"}, {"uuid": "c603a907-6cea-4bea-9684-2f78e79a8548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "content": "", "creation_timestamp": "2026-05-31T00:00:00.000000Z"}, {"uuid": "813a4afb-4f33-4daa-a973-39ea1a168135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://t.me/purp_sec/727", "content": "\ud83d\udd12 \u0412 \u0442\u0440\u0435\u0445 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Ulefone \u0438 Kr\u00fcger&Matz \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0428\u0438\u043c\u043e\u043d \u0425\u0430\u0434\u0430\u043c (Szymon Chadam), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 \u0432 \u043f\u043e\u043b\u044c\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CERT Polska. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. \n\n\ud83d\udd35 com.pri.factorytest (CVE-2024-13915) \u2014 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 FactoryResetService, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13916) \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 query() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PriFpShareProvider \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a PIN-\u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13917) \u2014 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c LockUI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u043d\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 PIN-\u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043b\u0438 \u043e\u0431\u043c\u0430\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u0434.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b", "creation_timestamp": "2026-08-14T16:00:12.312504Z"}, {"uuid": "c2e361e5-33cf-4cde-8d1d-182bf6bf2c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13916", "type": "seen", "source": "https://t.me/purp_sec/727", "content": "\ud83d\udd12 \u0412 \u0442\u0440\u0435\u0445 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Ulefone \u0438 Kr\u00fcger&Matz \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0428\u0438\u043c\u043e\u043d \u0425\u0430\u0434\u0430\u043c (Szymon Chadam), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 \u0432 \u043f\u043e\u043b\u044c\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CERT Polska. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. \n\n\ud83d\udd35 com.pri.factorytest (CVE-2024-13915) \u2014 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 FactoryResetService, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13916) \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 query() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PriFpShareProvider \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a PIN-\u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13917) \u2014 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c LockUI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u043d\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 PIN-\u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043b\u0438 \u043e\u0431\u043c\u0430\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u0434.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b", "creation_timestamp": "2026-08-14T16:00:12.443956Z"}, {"uuid": "8e0e60c8-b735-4716-9f1d-50d2475b4fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13917", "type": "seen", "source": "https://t.me/purp_sec/727", "content": "\ud83d\udd12 \u0412 \u0442\u0440\u0435\u0445 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Ulefone \u0438 Kr\u00fcger&Matz \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0428\u0438\u043c\u043e\u043d \u0425\u0430\u0434\u0430\u043c (Szymon Chadam), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 \u0432 \u043f\u043e\u043b\u044c\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CERT Polska. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. \n\n\ud83d\udd35 com.pri.factorytest (CVE-2024-13915) \u2014 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 FactoryResetService, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13916) \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 query() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PriFpShareProvider \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a PIN-\u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13917) \u2014 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c LockUI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u043d\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 PIN-\u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043b\u0438 \u043e\u0431\u043c\u0430\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u0434.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b", "creation_timestamp": "2026-08-14T16:00:12.471563Z"}, {"uuid": "7b5e6098-c920-47c9-a7a9-041e365888a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://t.me/purp_sec/456", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2748 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CMS Kentico Xperience, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0443 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udd35 CVE-2025-1449 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Verve Asset Manager. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 (shell) \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-22231 \u2014 \u0431\u0430\u0433 \u0432 VMware Aria Operations (\u0440\u0430\u043d\u0435\u0435 VMware vRealize Operations), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-24085 \u2014 use after free (UAF) \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Apple, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VisionOS, iOS, iPadOS, macOS, watchOS \u0438 tvOS. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043a\u0440\u0430\u0436\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\ud83d\udd35 CVE-2025-30065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 parquet-avro Apache Parquet, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-13553 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SMS Alert Order Notifications / WooCommerce \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Host.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:20.555614Z"}, {"uuid": "933f4457-6d92-4585-a440-265f7529f1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:08.239256Z"}, {"uuid": "9412b2a2-8d49-404c-8aeb-f836e5e3b642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:08.344927Z"}, {"uuid": "c805b30b-2eee-46cd-8964-d1fc62f0f75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:08.389512Z"}, {"uuid": "a7075b80-39f6-4982-9052-6799322d7196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13985.yaml", "content": "", "creation_timestamp": "2026-08-15T00:00:07.724392Z"}, {"uuid": "c9b2b8c8-a174-42df-9ae1-7ed0552f9766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "3fd8da95-bc58-4082-b1e1-7c2b00576918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "788bb0ff-7f6c-420f-b149-1454542a9ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "b81dbf36-60b6-4780-88c5-a6eb7cf26f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13916", "type": "seen", "source": "https://t.me/purp_sec/727", "content": "\ud83d\udd12 \u0412 \u0442\u0440\u0435\u0445 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Ulefone \u0438 Kr\u00fcger&Matz \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0428\u0438\u043c\u043e\u043d \u0425\u0430\u0434\u0430\u043c (Szymon Chadam), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 \u0432 \u043f\u043e\u043b\u044c\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CERT Polska. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. \n\n\ud83d\udd35 com.pri.factorytest (CVE-2024-13915) \u2014 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 FactoryResetService, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13916) \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 query() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PriFpShareProvider \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a PIN-\u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13917) \u2014 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c LockUI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u043d\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 PIN-\u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043b\u0438 \u043e\u0431\u043c\u0430\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u0434.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b", "creation_timestamp": "2026-08-15T00:00:08.120713Z"}, {"uuid": "0c76c558-be42-4164-8d0f-70c7796133fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13917", "type": "seen", "source": "https://t.me/purp_sec/727", "content": "\ud83d\udd12 \u0412 \u0442\u0440\u0435\u0445 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Ulefone \u0438 Kr\u00fcger&Matz \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0428\u0438\u043c\u043e\u043d \u0425\u0430\u0434\u0430\u043c (Szymon Chadam), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 \u0432 \u043f\u043e\u043b\u044c\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CERT Polska. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. \n\n\ud83d\udd35 com.pri.factorytest (CVE-2024-13915) \u2014 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 FactoryResetService, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13916) \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 query() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PriFpShareProvider \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a PIN-\u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13917) \u2014 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c LockUI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u043d\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 PIN-\u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043b\u0438 \u043e\u0431\u043c\u0430\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u0434.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b", "creation_timestamp": "2026-08-15T00:00:08.156013Z"}, {"uuid": "fe6f0d31-a866-4067-a1b7-2a4bd498f2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://t.me/purp_sec/727", "content": "\ud83d\udd12 \u0412 \u0442\u0440\u0435\u0445 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Ulefone \u0438 Kr\u00fcger&Matz \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0428\u0438\u043c\u043e\u043d \u0425\u0430\u0434\u0430\u043c (Szymon Chadam), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 \u0432 \u043f\u043e\u043b\u044c\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CERT Polska. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. \n\n\ud83d\udd35 com.pri.factorytest (CVE-2024-13915) \u2014 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 FactoryResetService, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13916) \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 query() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PriFpShareProvider \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a PIN-\u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 com.pri.applock (CVE-2024-13917) \u2014 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c LockUI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u043d\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 PIN-\u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043b\u0438 \u043e\u0431\u043c\u0430\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u0434.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b", "creation_timestamp": "2026-08-15T00:00:08.196972Z"}, {"uuid": "a523aa6d-27ec-4641-a21d-bbfc88b13c61", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13991", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0e17d45f-b5da-4c1c-b554-fac1cc4d559f", "content": "", "creation_timestamp": "2026-06-19T12:45:22.670953Z"}, {"uuid": "4b23bf4d-7736-4bb6-96a8-bdc66fd8b0ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b93bf15f-111b-408a-9e01-4e12ad5b1790", "content": "", "creation_timestamp": "2026-06-19T12:46:25.196757Z"}, {"uuid": "0cd0c558-6641-4a61-910e-6769e8149eff", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13030", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9362a4a-d81c-488d-834b-52d8d56ec474", "content": "", "creation_timestamp": "2026-06-19T12:45:38.546101Z"}, {"uuid": "d6667617-ef07-4c61-9447-2dd5ce458329", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dc6942f3-ee36-4ef1-88a4-b22c90182a7b", "content": "", "creation_timestamp": "2026-06-19T12:45:38.995898Z"}, {"uuid": "b579b1a6-b50c-4395-8801-76365f6bb9e0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f8adadb-bb03-4077-9d76-eff6b9e2b3c3", "content": "", "creation_timestamp": "2026-06-19T12:46:25.126392Z"}, {"uuid": "46460fe6-0e0a-45b9-a86e-105c92b686eb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed621680-4a99-41e8-b2de-cef3f6640601", "content": "", "creation_timestamp": "2026-06-19T12:46:25.066932Z"}, {"uuid": "678f48d2-e48d-49ab-9d39-484caa8f4547", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/217f4965-66b9-4f83-89c3-5eb7b185d647", "content": "", "creation_timestamp": "2026-06-23T14:03:07.135833Z"}, {"uuid": "348035e4-3b3c-4b5b-b576-f442effe2f76", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13981", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4d1ff909-beaa-4f8c-aa53-3c1cad94b70c", "content": "", "creation_timestamp": "2026-06-23T14:03:57.667343Z"}, {"uuid": "97a5b5ad-062e-401b-bd5e-db2e80a7eca4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13982", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1bf54809-4001-4188-99ec-12b6b91b1cca", "content": "", "creation_timestamp": "2026-06-23T14:03:57.403529Z"}, {"uuid": "d053e362-d67c-4ca1-871a-e55b3e23c102", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13984", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/345e700e-9c04-4d77-9107-89ac69a96803", "content": "", "creation_timestamp": "2026-06-23T14:03:57.601290Z"}, {"uuid": "105b6b88-1d45-47d2-9c25-7362a5dba345", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ab3ee5da-c263-4433-a44d-8ea783fe1e32", "content": "", "creation_timestamp": "2026-06-23T14:06:06.513600Z"}, {"uuid": "c3007b51-9c81-4feb-8499-68838db1886b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cb54dbf9-e227-4e50-aba1-be3d1e96abe5", "content": "", "creation_timestamp": "2026-06-23T14:06:06.592565Z"}, {"uuid": "4e5a45cc-5660-4d7d-adfd-e28f29d84595", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/57637bcf-0231-4f6e-be9b-83ffe5d2ba6a", "content": "", "creation_timestamp": "2026-06-23T14:06:06.666244Z"}, {"uuid": "fa112429-ad76-4aea-ba57-5bb9a73fa504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://t.me/purp_sec/456", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2748 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CMS Kentico Xperience, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0443 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udd35 CVE-2025-1449 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Verve Asset Manager. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 (shell) \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-22231 \u2014 \u0431\u0430\u0433 \u0432 VMware Aria Operations (\u0440\u0430\u043d\u0435\u0435 VMware vRealize Operations), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-24085 \u2014 use after free (UAF) \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Apple, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VisionOS, iOS, iPadOS, macOS, watchOS \u0438 tvOS. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043a\u0440\u0430\u0436\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\ud83d\udd35 CVE-2025-30065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 parquet-avro Apache Parquet, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-13553 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SMS Alert Order Notifications / WooCommerce \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Host.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:42.137716Z"}, {"uuid": "ea739df9-6c2c-4536-a8cf-2e0086f8448f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:08.530566Z"}, {"uuid": "772963d3-ff54-415e-ae0a-e916e7a959d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:08.581226Z"}, {"uuid": "547624d6-3cfd-4545-b050-1587a31c3934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:08.677807Z"}, {"uuid": "2e796134-d74a-4ddc-9a12-78a6305bbee3", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13161", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf705deb-67b8-4a20-9007-3a4050d2dc7d", "content": "", "creation_timestamp": "2026-06-30T09:23:03.991147Z"}, {"uuid": "d815449c-98a3-4016-be4b-a99233bf34f2", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13159", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/383c69ab-4bd8-4eec-b766-0eff22bf1ac6", "content": "", "creation_timestamp": "2026-06-30T09:22:45.845313Z"}, {"uuid": "f62ea343-232b-4728-88a9-1bdf0ede32be", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13160", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fdc54d95-dee4-4e13-a653-b85634af8a9a", "content": "", "creation_timestamp": "2026-06-30T09:22:55.242050Z"}, {"uuid": "6c59b1f2-f84e-44f9-b660-20e397514273", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13985", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4493c1d8-fd43-4fd0-b92c-076ebeb203a7", "content": "", "creation_timestamp": "2026-06-30T09:23:12.532998Z"}, {"uuid": "bbb6e503-64f0-44c5-ae4c-cc5fb3460b5a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13981", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/de117342-a74e-4615-b114-860b91839be2", "content": "", "creation_timestamp": "2026-06-30T09:24:02.603604Z"}, {"uuid": "4fcd8edb-88fb-4204-9e10-63cd5c18da0f", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13982", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cca3a384-9b15-48bd-825a-f114eb798b33", "content": "", "creation_timestamp": "2026-06-30T09:42:44.518437Z"}, {"uuid": "ead6a0bb-5c4b-4478-b74d-5d5153dddd02", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-13984", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/861f0d79-ed63-4016-a360-de73f7fda9c2", "content": "", "creation_timestamp": "2026-06-30T10:00:43.391000Z"}, {"uuid": "400e16e7-e2dc-4ecf-af1f-64cbe3756935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13985.yaml", "content": "", "creation_timestamp": "2026-08-13T12:00:04.310026Z"}, {"uuid": "e9b90206-8a36-4d87-8110-59d10a9f6a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13962", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msxzpy45hc24", "content": "Norton Utilities Ultimate: Local Privilege Escalation to SYSTEM via Symlink, CVE-2024-13962", "creation_timestamp": "2026-08-13T16:08:59.301817Z"}, {"uuid": "5169c532-093b-404c-a64f-d496d97e661a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://t.me/brutsecurity/1644", "content": "CVE-2024-13918, -13919: XSS in Laravel Framework, 8.0 rating\u2757\ufe0f\n\nThe vulnerabilities allow an attacker to execute code in the victim's browser via Reflected XSS if the victim clicks on a decoy link.\n\nMore then 770k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/95OAY\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nRead more: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page", "creation_timestamp": "2026-07-09T03:00:09.040514Z"}, {"uuid": "511b6ebf-7f51-41e9-b940-f4704c5055fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13985.yaml", "content": "", "creation_timestamp": "2026-08-16T00:00:08.943254Z"}, {"uuid": "634af180-945a-40d4-9f38-ed3774232469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "seen", "source": "https://t.me/brutsecurity/1644", "content": "CVE-2024-13918, -13919: XSS in Laravel Framework, 8.0 rating\u2757\ufe0f\n\nThe vulnerabilities allow an attacker to execute code in the victim's browser via Reflected XSS if the victim clicks on a decoy link.\n\nMore then 770k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/95OAY\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nRead more: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page", "creation_timestamp": "2026-07-10T00:00:32.612473Z"}, {"uuid": "94ff9c96-e36d-413f-ac73-8054ca024654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13553", "type": "seen", "source": "https://t.me/purp_sec/456", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2748 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CMS Kentico Xperience, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0443 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udd35 CVE-2025-1449 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Verve Asset Manager. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 (shell) \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-22231 \u2014 \u0431\u0430\u0433 \u0432 VMware Aria Operations (\u0440\u0430\u043d\u0435\u0435 VMware vRealize Operations), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-24085 \u2014 use after free (UAF) \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Apple, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VisionOS, iOS, iPadOS, macOS, watchOS \u0438 tvOS. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043a\u0440\u0430\u0436\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\ud83d\udd35 CVE-2025-30065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 parquet-avro Apache Parquet, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-13553 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SMS Alert Order Notifications / WooCommerce \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Host.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:53.454939Z"}, {"uuid": "97d6e100-78b5-406d-96d8-606d194452dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1644", "content": "CVE-2024-13918, -13919: XSS in Laravel Framework, 8.0 rating\u2757\ufe0f\n\nThe vulnerabilities allow an attacker to execute code in the victim's browser via Reflected XSS if the victim clicks on a decoy link.\n\nMore then 770k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/95OAY\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nRead more: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page", "creation_timestamp": "2026-07-11T14:00:04.505992Z"}, {"uuid": "9eb75880-8e83-442b-9298-7b19e5355177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13918", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1644", "content": "CVE-2024-13918, -13919: XSS in Laravel Framework, 8.0 rating\u2757\ufe0f\n\nThe vulnerabilities allow an attacker to execute code in the victim's browser via Reflected XSS if the victim clicks on a decoy link.\n\nMore then 770k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/95OAY\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nRead more: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page", "creation_timestamp": "2026-07-12T00:00:48.248163Z"}, {"uuid": "abe78d5d-dbf7-49db-8388-bd23edb14680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13985.yaml", "content": "", "creation_timestamp": "2026-08-14T00:00:07.075349Z"}, {"uuid": "6168a226-3805-4479-85f6-11fb97a3951a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13784", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt6slw4wv62c", "content": "CVE-2024-13784 - contact form, survey, quiz & popup form builder \u2013 arforms\nThe ARForms plugin for WordPress has a security issue that allows unauthenticated attackers to delete files or access sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#reputeinfosystems #CVE #infosec", "creation_timestamp": "2026-08-16T08:50:04.692628Z"}, {"uuid": "dce754cb-884a-4092-8b7c-bf53f712f80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-27T12:00:07.864511Z"}, {"uuid": "613bb023-7b36-4c34-afb6-61b77e528c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-28T00:00:51.603549Z"}, {"uuid": "2b21a6bb-9e94-43f5-9eb5-d774d3516a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "seen", "source": "Telegram/vkQwkXUL30u3pRsZtV-s7rMER_a3mU1vbncFib7BaHrS3aA", "content": "", "creation_timestamp": "2026-07-16T19:00:12.470228Z"}, {"uuid": "7cf14d04-a36e-4ada-b178-5b85b4bf6046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "seen", "source": "Telegram/vFDO5SwsZ7hIMyqUKVS5e9UBDOzM5D4lILt5pmQly_CTvgM", "content": "", "creation_timestamp": "2026-07-16T19:00:12.587772Z"}, {"uuid": "5bac02e1-ce78-46bf-8108-59365eccb668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "seen", "source": "Telegram/vkQwkXUL30u3pRsZtV-s7rMER_a3mU1vbncFib7BaHrS3aA", "content": "", "creation_timestamp": "2026-07-17T00:00:27.993861Z"}, {"uuid": "8b678a7a-d368-47c7-848d-59c67764921f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "seen", "source": "Telegram/vFDO5SwsZ7hIMyqUKVS5e9UBDOzM5D4lILt5pmQly_CTvgM", "content": "", "creation_timestamp": "2026-07-17T00:00:28.107128Z"}, {"uuid": "3875de8c-f85e-46c2-9b48-d08219cbdbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "published-proof-of-concept", "source": "Telegram/vFDO5SwsZ7hIMyqUKVS5e9UBDOzM5D4lILt5pmQly_CTvgM", "content": "", "creation_timestamp": "2026-07-18T00:00:44.244733Z"}, {"uuid": "d999eefc-3346-433b-b4b9-0fadab30ee1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13985", "type": "published-proof-of-concept", "source": "Telegram/vkQwkXUL30u3pRsZtV-s7rMER_a3mU1vbncFib7BaHrS3aA", "content": "", "creation_timestamp": "2026-07-18T00:00:44.356890Z"}, {"uuid": "755142e9-fc26-4c39-9191-f8fa9f63ff62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1310", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mr3z57rhzd2j", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2024-1310](https://wpscan.com/vulnerability/a7735feb-876e-461c-9a56-ea6067faf277/)\nThe WooCo...\nhttps://wpscan.com/vulnerability/a7735feb-876e-461c-9a56-ea6067faf277/ #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-20T19:18:44.887350Z"}, {"uuid": "5ef3821a-fbc2-4be5-9d40-5d6220ed1a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13917", "type": "seen", "source": "https://t.me/pphm_HackerNews/520", "content": "Secret Backdoors in Popular Phones Put Millions at Risk\n\nRecent analysis by CERT Polska uncovered serious vulnerabilities in preinstalled Android apps on Ulefone and Kr\u00fcger\\&Matz devices. These include CVE-2024-13915, CVE-2024-13916, and CVE-2024-13917, which allow unauthorized factory resets, PIN theft, and privilege escalation.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.818829Z"}, {"uuid": "744e770e-7d09-4897-a586-b1e7b2f09bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13916", "type": "seen", "source": "https://t.me/pphm_HackerNews/520", "content": "Secret Backdoors in Popular Phones Put Millions at Risk\n\nRecent analysis by CERT Polska uncovered serious vulnerabilities in preinstalled Android apps on Ulefone and Kr\u00fcger\\&Matz devices. These include CVE-2024-13915, CVE-2024-13916, and CVE-2024-13917, which allow unauthorized factory resets, PIN theft, and privilege escalation.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.841699Z"}, {"uuid": "cb7aaa02-0852-4153-b2e0-2f108bca7338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://t.me/pphm_HackerNews/520", "content": "Secret Backdoors in Popular Phones Put Millions at Risk\n\nRecent analysis by CERT Polska uncovered serious vulnerabilities in preinstalled Android apps on Ulefone and Kr\u00fcger\\&Matz devices. These include CVE-2024-13915, CVE-2024-13916, and CVE-2024-13917, which allow unauthorized factory resets, PIN theft, and privilege escalation.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.863728Z"}, {"uuid": "62361c42-dd8d-4e96-990c-eb982ff594a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13917", "type": "seen", "source": "https://t.me/pphm_HackerNews/520", "content": "Secret Backdoors in Popular Phones Put Millions at Risk\n\nRecent analysis by CERT Polska uncovered serious vulnerabilities in preinstalled Android apps on Ulefone and Kr\u00fcger\\&Matz devices. These include CVE-2024-13915, CVE-2024-13916, and CVE-2024-13917, which allow unauthorized factory resets, PIN theft, and privilege escalation.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:23.943937Z"}, {"uuid": "daecf9ba-dff3-45ba-8025-36082814d246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13916", "type": "seen", "source": "https://t.me/pphm_HackerNews/520", "content": "Secret Backdoors in Popular Phones Put Millions at Risk\n\nRecent analysis by CERT Polska uncovered serious vulnerabilities in preinstalled Android apps on Ulefone and Kr\u00fcger\\&Matz devices. These include CVE-2024-13915, CVE-2024-13916, and CVE-2024-13917, which allow unauthorized factory resets, PIN theft, and privilege escalation.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:23.974002Z"}, {"uuid": "f5725588-b557-4e14-855e-6d33dae539d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13915", "type": "seen", "source": "https://t.me/pphm_HackerNews/520", "content": "Secret Backdoors in Popular Phones Put Millions at Risk\n\nRecent analysis by CERT Polska uncovered serious vulnerabilities in preinstalled Android apps on Ulefone and Kr\u00fcger\\&Matz devices. These include CVE-2024-13915, CVE-2024-13916, and CVE-2024-13917, which allow unauthorized factory resets, PIN theft, and privilege escalation.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:24.017606Z"}, {"uuid": "5a2544cf-5b85-4608-ba38-4034d8e29016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1305", "type": "seen", "source": "https://t.me/EchelonEyes/3044", "content": "Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 OpenVPN, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c RCE \u0438 LPE\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 OpenVPN \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u00ab\u042d\u0442\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft Threat Intelligence.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA 2024, \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u0437\u043d\u0430\u043d\u0438\u0439 \u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u0435 OpenVPN. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenVPN \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 2.6.10 \u0438 2.5.10.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u0438, \u044d\u0442\u043e:\n\n- CVE-2024-27459 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438 LPE \u0432 Windows;\n\n- CVE-2024-24974 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u0430\u043d\u0430\u043b\u0443 \"\\\\openvpn\\\\service\" \u0432 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043d\u0438\u043c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u043d\u0435\u043c;\n\n- CVE-2024-27903 \u2014 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 Android, iOS, macOS \u0438 BSD;\n\n- CVE-2024-1305 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 Windows.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u0442\u0440\u0438 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c openvpnserv, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u2014 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Windows Terminal Access Point (TAP).\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c OpenVPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043a\u0443\u043f\u043a\u0443 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0445\u044d\u0448\u0435\u0439 NTLMv2 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u043e\u0439.\n\n\u0417\u0430\u0442\u0435\u043c \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 Bring Your Own Vulnerable Driver (BYOVD) \u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Protect Process Light (PPL) \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a Microsoft Defender, \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042d\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2024/08/08/chained-for-attack-openvpn-vulnerabilities-discovered-leading-to-rce-and-lpe/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:02:07.471849Z"}, {"uuid": "d8d5654b-238a-46c8-89c4-36744c0a8102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1305", "type": "seen", "source": "https://t.me/EchelonEyes/3044", "content": "Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 OpenVPN, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c RCE \u0438 LPE\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 OpenVPN \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u00ab\u042d\u0442\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft Threat Intelligence.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA 2024, \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u0437\u043d\u0430\u043d\u0438\u0439 \u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u0435 OpenVPN. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenVPN \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 2.6.10 \u0438 2.5.10.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u0438, \u044d\u0442\u043e:\n\n- CVE-2024-27459 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438 LPE \u0432 Windows;\n\n- CVE-2024-24974 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u0430\u043d\u0430\u043b\u0443 \"\\\\openvpn\\\\service\" \u0432 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043d\u0438\u043c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u043d\u0435\u043c;\n\n- CVE-2024-27903 \u2014 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 Android, iOS, macOS \u0438 BSD;\n\n- CVE-2024-1305 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 Windows.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u0442\u0440\u0438 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c openvpnserv, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u2014 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Windows Terminal Access Point (TAP).\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c OpenVPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043a\u0443\u043f\u043a\u0443 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0445\u044d\u0448\u0435\u0439 NTLMv2 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u043e\u0439.\n\n\u0417\u0430\u0442\u0435\u043c \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 Bring Your Own Vulnerable Driver (BYOVD) \u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Protect Process Light (PPL) \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a Microsoft Defender, \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042d\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2024/08/08/chained-for-attack-openvpn-vulnerabilities-discovered-leading-to-rce-and-lpe/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:45.338329Z"}, {"uuid": "49b223d4-cd6e-4954-8212-76efc9e532f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "published-proof-of-concept", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-29T00:00:28.345419Z"}, {"uuid": "4fea2427-c4e5-4023-b667-e757422617c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1305", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3044", "content": "Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 OpenVPN, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c RCE \u0438 LPE\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 OpenVPN \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u00ab\u042d\u0442\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft Threat Intelligence.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA 2024, \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u0437\u043d\u0430\u043d\u0438\u0439 \u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u0435 OpenVPN. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenVPN \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 2.6.10 \u0438 2.5.10.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0434\u0435\u0442 \u0440\u0435\u0447\u0438, \u044d\u0442\u043e:\n\n- CVE-2024-27459 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438 LPE \u0432 Windows;\n\n- CVE-2024-24974 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u0430\u043d\u0430\u043b\u0443 \"\\\\openvpn\\\\service\" \u0432 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043d\u0438\u043c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u043d\u0435\u043c;\n\n- CVE-2024-27903 \u2014 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 Android, iOS, macOS \u0438 BSD;\n\n- CVE-2024-1305 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 Windows.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u0442\u0440\u0438 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c openvpnserv, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u2014 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Windows Terminal Access Point (TAP).\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c OpenVPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043a\u0443\u043f\u043a\u0443 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0445\u044d\u0448\u0435\u0439 NTLMv2 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u043e\u0439.\n\n\u0417\u0430\u0442\u0435\u043c \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 Bring Your Own Vulnerable Driver (BYOVD) \u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Protect Process Light (PPL) \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a Microsoft Defender, \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042d\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2024/08/08/chained-for-attack-openvpn-vulnerabilities-discovered-leading-to-rce-and-lpe/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:43.840946Z"}, {"uuid": "34624cf4-5ec1-477d-b6bb-ee0c9954e4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "seen", "source": "Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWL_BanVVXFSs", "content": "", "creation_timestamp": "2026-09-02T01:00:11.655825Z"}, {"uuid": "3af5c9c8-1745-4a30-afa3-e1793667a783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13513", "type": "published-proof-of-concept", "source": "Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWL_BanVVXFSs", "content": "", "creation_timestamp": "2026-09-03T00:00:54.837967Z"}]}